Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: 563dzenkzuKgCeNuN+Y5wiqempKzmdN308RRU6aMU6A=
Subject key identifier: FC:97:DD:7F:E6:E8:3E:DB:FC:46:A4:DF:38:EB:43:C5:44:D9:DD:27
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 01984A40E6827E482F8B8B315ACA3CB70E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1596
Signing time: Sun 27 Jul 2025 05:00:23 +0000
Manifest this update: Sun 27 Jul 2025 05:00:23 +0000
Manifest next update: Mon 28 Jul 2025 05:00:23 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: 5Is+oe7cEMPnTFT6FiqVNVCFeYYpnDMLak8RIhE9uWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:e6:82:7e:48:2f:8b:8b:31:5a:ca:3c:b7:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jul 27 05:00:23 2025 GMT
Not After : Jul 28 05:00:23 2025 GMT
Subject: CN=fc97dd7fe6e83edbfc46a4df38eb43c544d9dd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:94:3a:14:7e:b2:8d:d6:d2:d4:59:1e:0b:
e7:a2:95:b5:d9:a3:78:8c:bd:51:42:f7:6b:8c:85:
67:ba:40:a5:2f:65:fb:3c:01:29:c4:f0:4d:af:be:
3a:75:82:03:e3:88:18:37:bb:b8:52:40:df:6f:d2:
f7:f5:a0:cc:01:3d:9c:33:6c:3d:d0:71:d0:57:04:
f7:3b:0f:a0:d1:b1:4d:1f:7d:e6:7b:05:c6:2f:06:
62:af:8b:96:0e:a8:ab:6f:af:94:4a:5f:b2:07:a8:
70:8c:f4:bc:48:45:50:cd:19:2e:ba:c6:af:e1:93:
0c:a1:47:04:dc:ad:39:fb:39:97:c8:69:65:d5:e0:
52:b6:6e:28:e3:6e:45:01:2e:70:43:d8:39:e5:bf:
1e:cf:84:1a:84:df:9b:60:c3:05:ad:a9:62:7e:81:
6f:09:7b:df:8d:fb:a4:3b:ba:e0:00:e2:be:a1:89:
ea:94:cf:f0:8a:27:f8:08:cb:4e:86:d6:38:58:9a:
a6:49:80:1d:18:92:f3:80:e3:71:27:65:40:9c:da:
ac:95:f7:f9:15:6e:f3:54:40:6a:ff:d5:5e:6e:37:
23:e7:85:37:78:52:c1:4c:68:e4:d9:9a:d8:08:da:
3a:e5:3c:c2:51:ab:5f:1c:20:d3:bd:7d:ff:ad:b7:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:DD:7F:E6:E8:3E:DB:FC:46:A4:DF:38:EB:43:C5:44:D9:DD:27
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:14:d1:ed:29:47:85:b7:01:8b:42:44:ea:cb:32:9a:2f:e5:
60:cb:b9:74:12:27:01:15:5a:64:04:df:c2:62:0b:b8:2b:27:
04:94:2c:76:22:70:3e:36:47:54:8f:fd:ca:cf:c2:fc:44:66:
a5:40:62:55:af:2b:88:23:77:e1:f1:4e:9d:ae:e6:d6:7c:c4:
08:e1:01:5a:cf:d7:bb:09:57:33:18:6e:cc:ba:aa:f9:b9:d5:
ca:d7:06:08:79:1a:8f:40:15:5d:b3:ef:66:0e:eb:63:cd:6e:
87:6f:4e:8f:91:56:1f:bb:60:3b:a5:d1:0a:cb:bb:13:1f:ed:
9e:65:38:20:85:0c:55:03:42:1f:6e:dc:1a:37:af:70:dc:a3:
88:2b:9f:21:e2:73:6c:49:68:65:2e:53:41:11:db:2e:9e:fd:
ad:55:dc:f3:09:97:07:64:78:d6:69:eb:7c:3a:8e:cc:1e:f6:
80:92:70:63:60:3f:ad:b8:b3:83:6f:2d:3e:69:07:5e:f9:d9:
22:ed:63:ef:10:2f:8f:3b:1c:7d:e0:df:65:95:ae:a6:47:13:
57:c0:a2:28:92:87:ff:ce:bd:8c:f5:ba:ba:d7:9f:0a:92:c6:
ba:74:c9:a6:f6:f0:a8:3d:2a:d3:79:b3:0c:e1:82:ef:97:c0:
ff:2c:4c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:36 2025 by rpki-client