Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
File: QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft (raw, json)
Hash identifier: dhM59R2azH+rKHuFFp2tQqpcaa6J1kBt8Lw6UU1MKpI=
Subject key identifier: D5:C6:91:D6:EF:E4:E3:B7:D3:2C:AD:C0:32:51:75:B7:5B:D6:68:62
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 0198529F493E6100C983659F208BE823D2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 20:00:27 +0000
Manifest this update: Mon 28 Jul 2025 20:00:27 +0000
Manifest next update: Tue 29 Jul 2025 20:00:27 +0000
Files and hashes: 1: QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl (hash: wWiPPD0F17gw3VzKiFPTNaOFsLileUWRFw4bQfe6YOo=)
2: rjvci4lVGCr57ADE7C3M4Mib4mk.roa (hash: yRKI8JSBUthmJegOInkpPYFyfDjZ1t7SRsTNJhUbFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:49:3e:61:00:c9:83:65:9f:20:8b:e8:23:d2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Jul 28 20:00:27 2025 GMT
Not After : Jul 29 20:00:27 2025 GMT
Subject: CN=d5c691d6efe4e3b7d32cadc0325175b75bd66862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:a2:fe:84:f8:57:ba:d6:1c:cf:48:04:5b:
79:e3:ed:8e:f3:fa:cf:4d:b2:3b:12:b0:d2:22:32:
7c:92:f5:10:cb:d1:d4:5a:73:18:86:61:9b:5f:05:
06:00:9b:0b:d7:40:6d:55:c0:2f:5e:c9:a6:a1:ed:
8d:48:95:4b:7b:5d:fb:68:2a:f0:b5:c9:c6:2f:62:
9d:5f:53:17:ab:27:b8:65:00:36:e9:3f:c5:b2:12:
82:79:30:ee:5e:db:f6:be:59:55:ae:3a:2d:cf:86:
94:b5:86:74:2a:4e:62:4d:76:5f:dc:28:ff:a4:9a:
34:a2:b8:b7:47:d7:b1:c4:1a:69:82:6c:02:7b:a5:
eb:3e:de:d0:f3:fa:e1:88:9f:fd:61:c7:2a:b6:89:
51:3d:29:c7:b4:bb:d7:45:82:ae:d8:24:53:d6:26:
e1:93:94:44:f8:7c:30:b2:58:fc:b4:0e:eb:3f:a7:
ca:81:56:fe:ae:1b:57:17:14:94:e1:a1:49:ec:e3:
1e:94:71:1c:db:ac:75:98:5e:87:03:36:60:c0:91:
bd:64:a6:12:cf:1c:88:ae:6e:6f:3c:c1:73:13:45:
c8:48:de:ad:98:08:7e:68:da:2e:01:b2:7f:be:e8:
c3:5e:d2:64:fb:b3:23:fb:a3:b0:f2:72:55:4a:97:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C6:91:D6:EF:E4:E3:B7:D3:2C:AD:C0:32:51:75:B7:5B:D6:68:62
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e7:f9:f8:f3:36:4a:45:72:ad:05:4c:af:a1:65:cc:e5:f3:
a4:3b:4b:6e:92:d2:e7:9c:78:c6:9b:08:90:9d:b1:ca:e6:09:
7e:91:b5:20:51:67:50:45:9d:5f:29:a3:f0:07:91:91:9f:29:
77:9c:b3:2a:b9:77:96:ba:3a:fa:00:34:db:c3:57:79:c8:77:
c9:35:b6:f8:9b:6f:64:00:9e:8f:bb:89:b4:3d:32:2d:6b:04:
df:ab:e9:b9:ec:fe:32:bc:7f:83:1b:a7:98:66:6e:d6:f1:71:
7d:e3:3e:83:a5:6f:37:ef:20:98:21:65:62:90:d9:63:3d:19:
cd:4c:f3:eb:75:df:5c:ca:23:61:b4:92:ac:75:0e:b4:cc:f6:
bf:e5:82:15:d9:01:38:00:00:98:e6:88:1c:29:fe:06:b8:23:
3b:a1:47:fd:75:60:8d:ad:b9:0f:66:3c:90:e9:9b:b2:e6:9b:
c4:2e:49:52:6b:87:13:49:eb:4e:bc:12:10:e9:7e:20:51:0e:
4a:b9:cc:70:ea:de:c0:eb:b6:ca:cf:ec:7b:fd:ba:8a:07:51:
0a:0d:a4:a1:dd:1a:cd:e8:eb:45:94:b9:cc:65:14:59:3d:fb:
df:d5:7a:b6:e4:ce:73:a9:c4:99:d6:06:b6:c0:16:dd:33:4f:
76:e2:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:16:46 2025 by rpki-client