Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: 3TALZDrqIDz8XgC4iSl9qsLX6x0mVpvjCQKT/j2EeZQ=
Subject key identifier: FC:14:58:2C:EF:21:F0:EA:4C:47:0C:EF:35:7B:F6:C1:D0:B4:04:BB
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 01984A77FFD95320C9AE8AE00744C4557038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 06:00:34 +0000
Manifest this update: Sun 27 Jul 2025 06:00:34 +0000
Manifest next update: Mon 28 Jul 2025 06:00:34 +0000
Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: 4LxasCq6bXGsVTuTitiutYBksv2+BLomyh0F294Iv38=)
2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ff:d9:53:20:c9:ae:8a:e0:07:44:c4:55:70:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jul 27 06:00:34 2025 GMT
Not After : Jul 28 06:00:34 2025 GMT
Subject: CN=fc14582cef21f0ea4c470cef357bf6c1d0b404bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:a8:19:ad:cf:db:5b:3d:eb:db:a3:b4:a8:
c9:4b:0d:b5:39:23:c0:f7:d2:43:7d:9c:cc:5f:49:
ce:bd:db:cd:dd:83:11:3b:82:f5:74:05:ea:34:7a:
3d:4b:81:ed:17:77:de:c1:ea:a7:f3:14:0d:57:80:
8c:a1:a2:cc:7c:2f:c5:ff:cf:f7:03:b8:0e:f7:f9:
ba:63:a7:2a:12:5a:a1:40:95:fe:09:79:b9:3b:ef:
22:8d:99:f3:c2:8e:7a:47:36:c4:09:d5:bc:90:ac:
ba:b1:ad:f9:1a:e6:72:d2:5a:0c:7c:72:ff:4b:19:
07:f0:6c:3b:85:78:ad:b8:53:75:54:e3:56:5c:9f:
65:1c:1f:a9:b9:72:56:10:48:e6:42:e7:9b:23:35:
2e:33:af:7d:ca:e5:da:22:f7:55:c9:02:1d:08:3a:
6e:4f:54:af:3f:0a:3b:96:9c:34:48:4f:34:3b:ed:
02:5f:ac:c4:f1:71:3d:2b:b9:d0:d9:18:29:97:e4:
24:a6:81:e0:27:e2:b1:39:e6:c7:e7:0e:db:6f:ae:
43:e8:aa:e2:34:3d:36:1a:99:f8:f8:90:90:00:11:
a2:67:c8:b6:23:04:6e:d6:b4:a7:9c:7d:e9:22:60:
cd:b2:56:6f:e3:0b:a3:41:5d:25:6b:c9:80:57:9d:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:58:2C:EF:21:F0:EA:4C:47:0C:EF:35:7B:F6:C1:D0:B4:04:BB
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:44:56:7d:93:38:f3:bc:77:99:56:a7:02:9e:30:d6:01:27:
2c:7b:a1:7e:46:cc:75:9f:01:cf:92:3d:57:72:8c:bf:cf:bd:
af:37:50:fd:9d:7a:68:03:3c:1d:89:e5:7c:94:4b:3c:72:52:
52:94:a9:49:ef:a3:24:20:c7:d0:ac:18:84:58:7c:2c:f8:eb:
e9:bb:02:fb:2c:d4:70:92:3d:c1:28:21:57:64:7d:f7:2f:07:
e8:80:c9:c5:9d:40:c7:e5:bb:81:70:1a:f8:f6:5b:8d:11:d9:
07:73:ce:09:c3:eb:ba:5e:4d:19:c3:e6:b1:f6:b0:43:c1:8d:
77:e2:0d:05:0d:2e:b1:28:07:11:27:7e:b8:ce:be:c7:ca:33:
ea:b3:44:e8:72:10:ed:3b:c1:48:57:fb:14:1b:f0:d0:94:09:
06:86:2e:c4:b0:53:5a:67:1e:7e:0e:33:68:f8:f6:6f:4a:69:
85:4b:f2:04:f9:99:98:ec:c0:8c:a5:a8:30:49:dd:b5:99:95:
e8:47:07:93:70:2a:7d:71:3c:b7:76:11:d0:68:70:66:79:86:
9f:11:30:fa:88:81:5d:73:bf:f8:a7:6b:1c:b9:6f:04:4a:00:
b2:9d:7d:65:ac:c7:f5:9d:79:dc:8b:54:50:a8:ec:e2:27:cd:
ad:c2:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:10 2025 by rpki-client