Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: kTBYNP9uHOgeEBq9TeYqyt+3HffPh74i8XW+G3pIJr8=
Subject key identifier: 42:D9:22:73:45:4A:DE:2A:D1:B3:02:22:8C:0D:8F:89:F0:CB:8B:C7
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 0198499BF6FA9106EAF050C426365E9B58E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:14 +0000
Manifest this update: Sun 27 Jul 2025 02:00:14 +0000
Manifest next update: Mon 28 Jul 2025 02:00:14 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: DAkcjsVIm5uGDSr5LcACcruePUeng/+RCMAiib0usZ0=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f6:fa:91:06:ea:f0:50:c4:26:36:5e:9b:58:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Jul 27 02:00:14 2025 GMT
Not After : Jul 28 02:00:14 2025 GMT
Subject: CN=42d92273454ade2ad1b302228c0d8f89f0cb8bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:be:15:d3:db:8c:7d:f2:c3:39:62:a0:81:
72:c6:3d:d8:80:bb:11:ce:4f:31:82:ef:39:47:67:
ad:1b:dc:3c:b7:fa:84:eb:99:c5:d6:9d:b9:30:64:
71:b0:e0:c1:e4:d1:a8:26:23:fe:24:ac:19:96:f0:
67:af:85:64:7c:55:ec:80:f3:86:f6:95:47:ee:f2:
f1:59:da:41:66:2c:0c:c0:6b:ce:9b:27:fa:c9:49:
fa:e5:a5:a3:2e:f5:dd:11:4f:25:95:da:a2:47:4f:
f0:60:60:f8:05:a7:53:c9:fa:12:da:a2:0b:0c:90:
36:75:e6:8f:b4:8a:b0:e6:d3:4c:21:ab:b6:2c:f7:
60:09:c3:78:56:60:bf:d2:25:45:96:9a:db:2d:9a:
b4:38:0c:70:16:e6:5e:9d:0d:a3:36:28:d9:f1:45:
7f:1d:99:41:ff:3f:69:16:0a:c3:d1:ed:1f:31:f7:
06:8d:c4:af:12:16:66:3c:38:a3:15:98:9a:6c:8e:
ac:39:45:4e:f4:f9:34:ce:d6:66:4e:5c:67:13:b1:
7a:6e:3c:6f:6f:c8:74:ad:68:52:ca:5f:3d:0d:11:
28:aa:77:e3:a2:5c:c7:8d:72:81:79:5d:47:11:1a:
23:84:c0:e9:ff:69:4f:34:86:a1:9f:9b:53:c4:ee:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:22:73:45:4A:DE:2A:D1:B3:02:22:8C:0D:8F:89:F0:CB:8B:C7
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d4:a5:98:d7:ca:a6:91:19:d3:ea:07:b6:17:5e:85:03:f5:
40:39:ad:c0:76:4f:fa:41:93:50:bf:70:b2:29:33:87:dc:27:
f4:3e:1d:46:02:d9:58:7b:6e:de:83:66:5d:45:02:bb:00:b5:
40:b1:97:95:ed:f0:31:2a:5c:1d:c3:52:9a:a9:e0:e9:75:13:
f6:9c:9e:a7:e9:89:7f:9a:a9:4a:fc:73:27:74:ad:8e:80:d1:
84:9c:20:19:13:22:46:5d:86:88:67:9e:48:8a:cf:6d:d9:fc:
74:95:c4:33:6a:ad:d7:3c:3a:72:ae:b4:e7:b4:99:3d:7e:01:
e7:f1:1a:8d:3a:e5:5d:67:55:29:31:41:b8:7e:10:12:39:91:
c6:60:db:f2:68:83:b9:70:ff:3e:ea:82:0c:ab:7c:a5:0e:a5:
d5:55:12:24:5b:40:a2:e3:12:3d:c1:c8:77:ef:6a:14:1c:81:
e9:44:67:f0:f6:bc:7d:17:3e:5d:e0:34:ce:2b:59:ca:89:07:
99:4a:60:e7:7a:c4:ab:10:e4:17:e0:d3:0e:0f:8c:5e:3b:c9:
af:2b:32:91:de:4a:83:c6:88:1c:f8:8c:9b:48:32:b5:af:ee:
10:be:a0:e0:8d:4e:bd:db:d0:f4:b4:a1:f1:82:66:30:df:51:
e5:ee:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:24:01 2025 by rpki-client