Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: SrJkDuw7hoJ6MUw6GVt8GM+Bh5j6GuKF2m5688yQfFk=
Subject key identifier: 4F:45:76:34:8C:9C:40:62:58:6F:65:D6:99:2B:64:B7:7F:DB:62:61
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 0198542008C6454A8477E60DB0D1D1CCCDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 03:00:42 +0000
Manifest this update: Tue 29 Jul 2025 03:00:42 +0000
Manifest next update: Wed 30 Jul 2025 03:00:42 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: nfwE9BcJp3oLM6NBZMrzxiRNVEMZA6vxdqGtFiQr0lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:20:08:c6:45:4a:84:77:e6:0d:b0:d1:d1:cc:cd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Jul 29 03:00:42 2025 GMT
Not After : Jul 30 03:00:42 2025 GMT
Subject: CN=4f4576348c9c4062586f65d6992b64b77fdb6261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:75:97:47:04:9c:84:2f:31:ab:92:d8:fb:
15:39:a4:cf:60:43:cc:77:48:c3:80:e9:57:7d:2c:
7f:c4:64:9f:c1:ba:22:0c:99:ef:22:c5:ba:da:34:
be:22:0d:cd:7a:45:f6:04:b8:69:67:42:a9:ed:78:
70:ae:89:e9:cd:e8:5d:e6:20:46:c6:63:6b:f3:63:
d8:70:29:ca:8c:c1:f4:96:a9:e1:06:fe:ec:7f:c5:
81:99:ea:cb:f0:4b:9c:39:51:8d:c5:db:08:13:e6:
6b:93:20:ac:70:ba:ca:ca:5e:96:36:5b:14:b8:96:
a4:9d:9c:7d:c4:7f:49:84:f9:d4:a2:f9:9f:d3:fd:
cd:28:15:d0:c2:72:bd:c3:24:a2:f9:41:b4:a4:18:
2d:80:f6:9d:e4:a8:59:01:d3:84:01:81:38:c6:88:
a5:e4:c7:56:79:4d:d7:39:77:35:dc:59:ac:e2:05:
8b:52:06:e3:49:9e:c7:fa:19:2e:cd:81:ab:77:22:
c6:8d:87:0f:95:52:8e:18:dd:ac:d9:66:4d:fa:c5:
b4:2d:0a:a6:e8:f8:9a:a5:30:9b:08:bc:c3:3c:28:
9f:c3:6b:48:38:56:50:11:d8:34:d4:2b:93:5a:6e:
f2:81:89:b0:57:df:04:64:72:b7:16:5c:4d:b3:a8:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:45:76:34:8C:9C:40:62:58:6F:65:D6:99:2B:64:B7:7F:DB:62:61
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9c:d8:d8:ab:d6:6f:48:e7:5a:0e:75:dd:01:67:8b:fd:19:
4a:e8:42:45:ab:f2:91:4d:f8:9a:00:42:bf:2d:ef:24:74:ba:
f0:bc:ff:49:1c:ac:a4:14:c1:ec:8a:3d:33:cd:88:4a:8e:cb:
aa:f2:16:d1:35:b9:80:f4:e6:86:0d:37:08:74:54:6d:2c:79:
b4:3b:76:c6:40:cf:7d:58:56:c8:85:2e:4c:51:c3:78:cf:4f:
26:78:65:87:42:61:7e:67:fb:dd:d5:8e:34:44:c9:c9:51:07:
d7:61:e1:29:06:86:f6:b9:49:2e:9e:85:3d:0b:0b:30:74:4c:
4a:ea:de:e4:17:10:38:4b:2e:b8:ac:30:1d:d3:1c:db:c2:8c:
f8:6e:20:eb:c9:1e:1a:2d:1e:77:ae:3f:6d:10:db:43:be:8e:
cd:61:1b:8f:dc:86:1e:52:fb:17:1c:e9:49:b8:d6:78:f8:9b:
1a:3e:83:6b:8e:04:44:cf:78:d0:a6:82:4c:72:53:50:f9:40:
72:64:7a:78:43:c1:d5:97:11:3c:a2:75:64:75:ba:1f:d9:33:
f7:5d:87:52:c7:fa:14:e5:b7:cd:a0:0f:e9:cc:81:19:37:c6:
71:82:a3:2b:5d:9a:30:0c:d0:5f:da:f4:07:36:99:cb:02:cb:
49:99:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:19 2025 by rpki-client