Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: jM0ZbaRUXTbk5IPSfo6VCXEioNlcl/1QnZSorFYnOJY=
Subject key identifier: 4C:9D:D1:B2:C3:FA:A2:4A:5F:DF:DA:A8:12:92:08:00:54:F9:51:DE
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 01984E54B9F4659D479163B5A0896B10B4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 0769
Signing time: Mon 28 Jul 2025 00:00:32 +0000
Manifest this update: Mon 28 Jul 2025 00:00:32 +0000
Manifest next update: Tue 29 Jul 2025 00:00:32 +0000
Files and hashes: 1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=)
2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: eJc++UK68rQQvF4eMqt+dWYCkItxI2AWIVOwXMeDQGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:b9:f4:65:9d:47:91:63:b5:a0:89:6b:10:b4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Jul 28 00:00:32 2025 GMT
Not After : Jul 29 00:00:32 2025 GMT
Subject: CN=4c9dd1b2c3faa24a5fdfdaa81292080054f951de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:f7:42:f4:5c:a5:1c:59:6c:d0:d6:d0:20:
82:c1:c7:2d:3e:0d:25:06:16:f9:0c:42:34:b2:cb:
4e:96:ad:08:ef:5b:21:52:ea:64:b2:6e:a1:69:99:
8d:73:0f:ce:79:cb:1d:5b:4b:83:7a:45:d1:37:03:
96:12:bd:2a:95:3d:52:88:5b:03:69:4f:f0:39:7f:
3d:c2:e3:aa:ce:2c:67:f4:00:13:f1:72:1a:34:65:
18:01:75:48:96:cd:ea:50:a8:17:49:e3:18:d7:bb:
79:ed:04:80:cb:b9:20:77:d0:6a:4c:84:7f:6d:01:
6b:df:52:88:6c:91:e1:10:67:bf:90:0f:a3:c0:fd:
e5:c5:e8:93:a1:e2:29:d1:45:71:d2:ae:5c:a1:c1:
6f:30:1e:24:ea:dc:a1:3a:a6:13:6a:e0:2d:6f:78:
d6:e9:35:24:13:93:84:6d:76:9e:fb:04:67:fe:d5:
2f:96:e9:c6:be:d1:aa:61:dd:01:c4:2c:bd:e7:1b:
72:68:9f:c7:26:04:39:39:8a:3c:60:c8:35:64:19:
d0:6d:24:f0:1b:56:e7:dc:72:d5:34:ab:69:02:f4:
c0:d3:89:55:c5:0f:78:63:6e:38:1c:1a:a1:46:2d:
fc:e8:58:13:43:18:af:86:34:c8:df:76:32:c9:e0:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:D1:B2:C3:FA:A2:4A:5F:DF:DA:A8:12:92:08:00:54:F9:51:DE
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:da:61:93:73:13:46:b7:c7:93:e8:e8:d1:80:24:45:6a:6f:
ee:be:c1:1c:16:5c:e7:82:42:05:40:51:84:2c:4c:ae:8f:44:
ab:56:d8:50:6f:06:bf:7c:3d:ee:4c:28:e1:10:99:ba:5e:f0:
de:3b:23:1f:9f:91:74:9b:c6:c4:81:d9:1d:cd:1c:d6:8c:38:
89:e1:9a:3c:12:e5:77:6f:b6:83:42:9a:87:ab:c0:c5:a5:1c:
f6:29:5a:30:26:b5:1f:e4:46:ee:48:1a:f4:19:67:44:c9:2f:
4f:89:d9:78:2d:bc:3e:c7:52:a4:e0:88:01:13:9e:71:d2:c3:
d5:3e:07:28:2e:a2:0e:1a:f0:e0:41:08:c7:59:64:c7:a4:da:
1b:56:ff:2d:d3:6c:6c:75:50:53:7a:e9:be:1f:f8:12:f6:d8:
83:9d:eb:eb:a5:a4:c9:fe:4f:46:f3:c9:7a:a8:35:b1:61:47:
ec:5d:5e:42:2e:52:81:14:cc:f2:0a:f1:96:ad:97:91:c3:6d:
7b:8b:18:27:85:16:ec:4b:53:d7:8e:1e:bf:62:44:23:6b:1c:
62:b1:b9:2d:56:fc:e2:0e:0d:d2:f7:74:30:2b:b3:bc:47:ff:
c3:3b:9e:a3:53:d9:b4:35:57:f9:99:b6:93:c7:2e:3f:fd:c2:
7e:36:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:51:24 2025 by rpki-client