Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: u9vs78LP0+E+kS8jBFosm5CpeeZRoKg4W1p2NrEbm/s=
Subject key identifier: 62:F5:2A:55:69:7B:18:51:A8:6B:C2:E7:51:B7:5F:CA:31:28:C7:B2
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 01984AAEF78FC8B5B7BE7F0CDD37CBDC3547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1532
Signing time: Sun 27 Jul 2025 07:00:37 +0000
Manifest this update: Sun 27 Jul 2025 07:00:37 +0000
Manifest next update: Mon 28 Jul 2025 07:00:37 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: u/fD0WUwJByp0WMrKALzITrmgXnhpScbz5C4slXZ5EQ=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f7:8f:c8:b5:b7:be:7f:0c:dd:37:cb:dc:35:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Jul 27 07:00:37 2025 GMT
Not After : Jul 28 07:00:37 2025 GMT
Subject: CN=62f52a55697b1851a86bc2e751b75fca3128c7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:03:94:11:7b:9c:0c:d8:3a:8f:bf:ba:f6:
65:c8:bd:02:aa:d2:78:14:d1:9f:01:e4:9a:13:1c:
e3:91:39:97:91:06:51:71:0c:61:fd:30:b5:ea:41:
83:3f:46:e0:35:fd:9e:09:96:b8:ee:c9:3c:8c:ba:
d8:41:d3:e8:e8:4d:37:a2:5c:05:1f:39:44:ce:6f:
fa:79:b5:25:00:e9:fe:36:aa:2c:a1:5d:64:bc:bb:
07:ac:de:74:52:67:a1:e2:d6:a3:ac:c5:5c:a4:67:
f7:14:10:ac:d7:e9:9e:74:5a:cb:6f:a8:f2:7d:eb:
8c:b1:03:ff:4f:14:3e:c4:45:44:8d:00:61:49:2a:
1a:44:de:ab:f6:41:3c:72:84:c7:85:15:85:c7:58:
8a:91:50:17:25:73:03:58:ac:b0:72:14:71:0f:9d:
ce:fa:f5:b5:28:8c:f9:e2:17:b3:28:c6:23:eb:0b:
9a:a2:3f:46:2f:ac:6e:5d:4d:c2:7e:45:69:95:ab:
d1:14:23:d6:5a:a8:73:dd:3b:8b:e6:10:cb:02:98:
f0:6d:b2:a4:31:73:0c:13:1d:c4:f3:b1:cd:5c:2b:
e3:a5:a4:6a:3d:f4:40:51:77:ae:dd:60:b1:ea:56:
67:99:5d:d5:49:04:24:62:af:42:47:41:a6:ca:7e:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:2A:55:69:7B:18:51:A8:6B:C2:E7:51:B7:5F:CA:31:28:C7:B2
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8b:6b:08:7a:09:66:59:38:ce:d9:87:25:a5:a3:68:9e:3b:
81:df:49:40:af:8f:91:b3:f4:d1:6c:00:ba:90:91:08:ba:bb:
f3:2a:5d:9c:a8:71:cf:5e:a9:2b:a1:5b:29:6d:26:70:a9:69:
6a:af:a6:63:1f:60:19:9d:de:5d:6a:d6:61:7b:96:c5:c2:3b:
22:ca:5c:9e:e5:86:9c:6d:e1:d1:d8:f9:8c:65:a5:37:35:df:
59:a9:3c:fd:c2:82:5b:de:a7:f5:37:42:69:68:b6:e1:cd:d7:
ec:bc:47:d3:11:b8:b6:fc:d0:57:45:8c:e4:0f:44:ac:e2:c7:
84:a9:d4:76:9a:96:3a:e6:d9:3b:bf:2f:fe:d7:14:72:b4:c8:
26:fd:a0:83:96:2c:09:22:6b:f2:88:02:b2:0b:38:98:7c:fe:
73:dc:51:f7:18:0b:62:11:79:ee:7b:08:28:35:81:f9:07:ef:
08:58:bb:33:f6:ec:e4:52:8b:d7:2e:49:22:31:30:c8:e4:38:
a2:1d:12:56:01:6f:25:8c:6d:64:d4:64:9a:32:fc:06:c4:5c:
71:e3:d2:e6:e9:e5:f1:d4:6d:98:f1:3b:04:91:fa:9b:30:3c:
a1:14:63:3e:b4:dc:cb:63:ef:c0:18:94:e9:3f:91:d9:81:7d:
00:44:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:23 2025 by rpki-client