Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: +Ckbek71h5+nKNoEfKKGDoX2xbmOIYHl4BoeEUnB8lU=
Subject key identifier: C6:D3:6B:36:7B:C0:3F:F1:9A:71:EA:D8:AA:51:53:50:59:23:BD:B8
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 01983428E73FA024DCF5C146980D0E84C812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 15F8
Signing time: Tue 22 Jul 2025 22:02:32 +0000
Manifest this update: Tue 22 Jul 2025 22:02:32 +0000
Manifest next update: Wed 23 Jul 2025 22:02:32 +0000
Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=)
2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: TVt2iPOZPk6uwkWvmuNAeZ2LXMIj4dwp8ZVTS9oQsYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:28:e7:3f:a0:24:dc:f5:c1:46:98:0d:0e:84:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Jul 22 22:02:32 2025 GMT
Not After : Jul 23 22:02:32 2025 GMT
Subject: CN=c6d36b367bc03ff19a71ead8aa5153505923bdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:5b:55:c6:96:45:35:08:04:e6:69:df:7a:
9f:d9:b8:5e:f1:00:a3:dd:70:ca:e4:3f:8f:da:e1:
97:c3:0e:74:a8:52:bc:ad:83:cf:be:fe:2d:a4:ca:
55:aa:fe:c0:ec:c2:a5:4c:32:37:fb:8d:4e:4f:d3:
b5:c0:62:ad:d0:35:57:db:c3:59:9e:02:7c:80:28:
11:44:9c:ee:52:c3:14:2f:30:5d:af:28:23:3c:28:
c0:24:9b:3a:9b:08:38:3b:c7:82:1e:1e:7a:48:5b:
fe:6f:e8:eb:35:44:75:4e:c3:4e:9d:e4:36:9e:e6:
d3:9a:ce:ad:4f:80:e3:72:16:80:60:d3:1d:91:1c:
2f:a8:40:34:cc:01:09:ae:7c:01:a7:c3:6f:15:79:
a6:d3:45:81:aa:47:7e:2d:bc:d4:84:fb:86:cc:ec:
9f:13:82:24:ba:e8:ec:5b:b2:c3:ce:ba:a3:8d:f2:
84:d2:a4:7c:2c:96:f0:a0:b6:a0:0e:23:30:90:5b:
d0:af:59:01:cb:3c:b1:dd:3d:23:1a:e2:74:b2:7d:
88:7c:87:54:d3:db:80:96:fa:1c:e1:a6:1d:ce:28:
3b:ee:85:09:26:8b:fe:d1:1f:de:d5:1f:a0:b6:9d:
e7:11:a0:7f:91:17:bd:8a:7c:84:ff:17:ae:d1:c0:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:6B:36:7B:C0:3F:F1:9A:71:EA:D8:AA:51:53:50:59:23:BD:B8
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:41:fe:b8:a0:0e:f3:2b:30:56:c3:a3:af:d4:92:4d:dd:84:
c1:29:a2:4d:00:9a:10:55:9c:1d:00:a9:fa:af:bc:13:a1:ea:
d5:6a:c2:df:ff:3f:a1:a6:27:e7:74:6e:b8:cd:25:2d:3a:ed:
16:e7:18:0a:e0:c8:f3:44:a6:04:f3:48:26:ef:69:56:e1:1f:
67:ac:60:0d:67:72:92:54:3d:c3:c7:8a:e6:b8:d7:ce:88:89:
c4:69:c0:e0:e0:dd:1b:1d:e2:a4:f6:03:b2:75:af:87:1e:d8:
60:42:aa:91:bd:33:74:d2:f8:6d:9e:36:53:67:91:39:b3:9d:
c6:9a:c8:9b:d5:78:54:3a:e2:43:7c:04:1a:68:c7:6a:a2:49:
9f:c6:ff:06:76:e5:60:49:7b:7b:c0:86:b7:01:35:e6:d1:ce:
17:08:ed:8f:39:c5:61:20:65:3c:b3:ae:fd:8f:25:90:92:60:
24:76:72:62:ce:c5:48:eb:9d:c8:10:f2:df:dc:2d:34:f4:79:
8b:6d:ff:bc:38:22:22:b1:1c:bf:c2:c4:09:f1:c2:73:2f:75:
69:17:87:43:dd:0c:72:bd:f2:ec:07:10:2f:ce:3a:f0:f7:c1:
9d:8c:35:20:49:36:29:90:13:10:83:e0:f0:c7:b7:fd:f8:b3:
17:18:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:28:00 2025 by rpki-client