Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: DPAjpxlGfyNyHoQgN56GIM5yfO1AWgNR0ecCRFBwpnk=
Subject key identifier: 50:70:71:8A:61:C4:6B:28:8E:0A:F1:1F:47:C2:2B:CF:B2:A8:3B:63
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 019848F720D0D65A98D8AFAD71974F594E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 025C
Signing time: Sat 26 Jul 2025 23:00:11 +0000
Manifest this update: Sat 26 Jul 2025 23:00:11 +0000
Manifest next update: Sun 27 Jul 2025 23:00:11 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: DLR5OcBW7Tl5CBlAysaebpHIcff/DYt2qUyaLmcZfNM=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:20:d0:d6:5a:98:d8:af:ad:71:97:4f:59:4e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Jul 26 23:00:11 2025 GMT
Not After : Jul 27 23:00:11 2025 GMT
Subject: CN=5070718a61c46b288e0af11f47c22bcfb2a83b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:37:52:e4:a9:af:7f:00:de:d6:0b:cd:e9:
36:5e:a4:db:23:a4:be:f6:a5:75:ae:d1:8b:fa:54:
23:6a:6b:50:a6:ff:20:f5:55:eb:26:36:c1:08:b0:
b7:81:18:2a:48:8f:9b:8b:77:d4:97:c7:5d:b7:ae:
7f:1e:48:16:86:75:3d:32:df:bf:1a:b1:ff:99:0c:
33:27:ad:42:42:e6:3d:3d:ef:7d:f2:15:12:60:00:
9d:dc:be:e1:45:3e:52:83:83:63:8f:21:d1:b0:1a:
59:b6:4f:9c:1d:b8:d6:c8:c6:23:a5:11:e2:a0:00:
4c:60:8e:a9:be:69:e3:bf:b7:36:60:b6:9d:55:d3:
cc:12:13:fc:c0:e2:24:ae:67:37:99:d8:09:6a:65:
5c:9c:86:88:a6:eb:86:21:5b:48:04:59:b9:62:e3:
a7:17:d6:99:32:4c:90:c7:51:1d:fb:8d:5b:1c:6f:
8c:83:16:a0:24:f7:f9:31:b7:5b:bb:6a:43:08:7a:
1e:90:b0:ab:dc:5e:f2:5a:95:52:f8:59:b8:41:3c:
17:cb:0e:b0:90:e7:4e:f5:60:57:bd:5a:be:a6:e8:
bd:8e:ba:aa:a5:65:1a:52:03:ab:87:ce:e2:86:5e:
25:05:f4:18:30:ff:58:f4:4e:92:37:4b:1a:ba:be:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:70:71:8A:61:C4:6B:28:8E:0A:F1:1F:47:C2:2B:CF:B2:A8:3B:63
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:26:3d:84:f3:7c:f4:8c:bb:05:8b:99:b8:3e:81:ed:86:05:
8b:26:29:13:57:4d:4d:0c:bf:12:54:22:1a:b5:b6:1e:ac:96:
82:14:6c:38:93:1b:14:41:a1:a6:79:20:70:19:ca:86:5f:cc:
77:e5:57:4e:ea:48:0b:49:09:bf:70:3f:a3:18:fc:58:9f:c6:
f7:92:32:f5:aa:a8:94:87:60:0a:b5:6c:d9:81:91:21:d0:4f:
43:7a:fb:9c:66:ae:72:3e:b1:1a:74:c3:fa:f4:4c:bf:65:e0:
4e:7e:f9:06:bf:54:4c:74:8e:32:f5:64:5f:f5:fc:55:05:ca:
9b:92:16:40:a1:ad:8f:e1:6c:4b:c3:8f:03:dc:f6:b8:4a:4f:
7a:10:b6:c7:d4:bd:94:41:31:55:60:ca:db:84:5a:d6:35:e6:
82:11:6b:32:4e:99:d2:06:93:7b:8b:d1:53:be:bd:e2:37:c8:
70:cf:25:12:b3:f2:a4:9e:4d:f9:b1:df:e6:43:23:02:fe:58:
14:83:67:87:97:ff:24:e5:23:f9:ae:0c:84:4e:59:0c:64:c1:
58:d2:82:c6:d5:88:54:d5:42:16:1b:7f:9d:8d:d4:f2:f0:67:
9d:78:04:2e:5e:35:ef:9a:31:d3:b7:06:4b:fe:b1:84:7f:88:
a8:f0:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:56 2025 by rpki-client