Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: jWE2+maeK4tzXq0IHPdyaKWz/fT3j1kO4jU3aFFN1Ww=
Subject key identifier: 32:F7:BB:96:0D:04:20:19:02:F3:D1:E7:FC:9D:E2:96:A4:D8:78:6D
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0198421A061F1890C79F2904D0676071C626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 1270
Signing time: Fri 25 Jul 2025 15:00:58 +0000
Manifest this update: Fri 25 Jul 2025 15:00:58 +0000
Manifest next update: Sat 26 Jul 2025 15:00:58 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=)
3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: PxfwZi1sACIyWv70xeWU/fR4GM0UNHv92925T+1V9Ss=)
4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=)
6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:1a:06:1f:18:90:c7:9f:29:04:d0:67:60:71:c6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jul 25 15:00:58 2025 GMT
Not After : Jul 26 15:00:58 2025 GMT
Subject: CN=32f7bb960d04201902f3d1e7fc9de296a4d8786d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:e0:45:99:e0:34:ff:0e:07:22:3e:f6:66:
b9:84:40:49:4d:14:f5:5a:d6:76:a4:29:88:c2:91:
f8:4c:b9:19:53:66:f3:d3:85:08:5c:d3:c2:95:bb:
07:da:9f:2f:cc:04:98:86:97:38:93:8d:a1:8c:7c:
dd:a3:a6:3f:47:11:4e:33:23:53:60:54:ff:46:b8:
75:80:e8:1c:e3:8a:59:3a:3e:2a:21:c5:82:8c:ac:
6d:5d:97:d9:97:7c:7d:37:eb:78:5a:65:b9:13:a6:
03:5f:7f:cb:7c:ae:e2:e4:47:2d:cc:2d:ec:66:3e:
e6:37:13:14:69:e7:70:19:6d:11:98:18:9e:e5:cc:
43:d4:c7:9a:cd:f2:a3:f3:5f:e7:0c:19:4d:cf:ec:
27:20:f0:47:03:f3:a7:e0:50:01:96:b6:51:05:1e:
29:18:9c:c7:5e:a8:16:d1:b7:cb:f0:22:8b:6d:c8:
6d:e3:89:68:97:9a:86:db:ca:18:b8:ef:08:cc:b1:
3a:25:e8:bd:df:1a:03:e8:8c:99:36:6a:5a:f3:5b:
df:7f:71:27:df:0f:cb:d0:42:54:81:1f:90:8e:74:
1c:c0:c5:ac:b1:c1:19:be:c3:6f:db:c3:fd:11:22:
61:b2:d5:57:14:f1:ac:e0:07:53:c0:a8:96:8c:84:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:BB:96:0D:04:20:19:02:F3:D1:E7:FC:9D:E2:96:A4:D8:78:6D
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a6:4a:03:d1:78:bf:5e:b1:b0:17:73:ac:16:3f:10:8d:76:
99:73:ac:3a:86:c5:b7:f0:09:82:35:54:85:a9:d5:d1:92:c4:
ff:a4:41:be:16:94:67:a1:99:48:1b:35:61:4a:a7:54:44:d8:
53:3c:11:fe:b5:b1:e4:27:64:54:e9:08:49:a9:f0:20:be:8e:
b5:ba:23:bb:c4:4a:8f:7e:b9:d7:f4:6b:44:cd:b7:d8:a3:69:
53:f6:b8:b0:00:be:81:2a:2e:de:16:5d:73:63:e1:c1:ae:79:
3b:15:57:2b:a0:0e:34:ad:98:b7:7a:56:5d:97:03:12:57:89:
8a:b4:50:fd:38:d8:89:b3:7b:2f:00:67:07:60:7c:a3:3c:a6:
4b:41:c0:8c:a5:32:1c:f1:6e:dd:3e:ff:3a:68:dc:e5:57:b3:
af:1e:a7:47:38:9b:bd:8d:4d:f9:03:60:e4:19:9c:e4:26:3a:
b5:77:f4:b7:af:24:a2:31:9f:24:d1:c5:6d:e6:1c:46:01:df:
b3:0e:ea:9a:29:6d:65:ef:5e:e4:28:a6:d5:8a:08:1a:ab:0d:
56:41:83:0d:44:4c:4e:82:d6:aa:6e:b6:9c:d5:90:7c:73:d8:
2d:b6:29:fe:48:0b:24:e2:49:6a:18:7b:6d:58:8b:93:a7:ba:
77:38:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:55 2025 by rpki-client