Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: fkKFBt/araZqS5nIhe7DyF0G7OXflnDFmyg8fhnYDkc=
Subject key identifier: 3E:A8:55:00:CD:AA:90:C1:D7:A8:25:F5:9D:BB:EF:83:75:E6:E4:48
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 019848C06CE6E439A2D9EB19EC8B44A2EE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:27 +0000
Manifest this update: Sat 26 Jul 2025 22:00:27 +0000
Manifest next update: Sun 27 Jul 2025 22:00:27 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: upY4qAqvk3jkFFuILTqg9bFrm1P/BSTX8UC6QE2Pvfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:6c:e6:e4:39:a2:d9:eb:19:ec:8b:44:a2:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Jul 26 22:00:27 2025 GMT
Not After : Jul 27 22:00:27 2025 GMT
Subject: CN=3ea85500cdaa90c1d7a825f59dbbef8375e6e448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:b0:8b:25:94:7f:73:7b:5e:ae:b9:e9:98:
9c:39:cf:45:e3:61:c7:52:9d:cd:0c:e1:ec:b5:95:
69:93:80:95:45:10:2e:3f:97:a4:c3:85:df:57:54:
66:b9:25:5c:46:15:12:30:02:9a:00:24:a5:0e:df:
73:f5:e8:5c:99:8f:77:6b:7e:bf:f9:b5:b1:19:74:
cc:b5:2e:51:2c:2b:aa:89:98:4b:ba:14:79:61:8f:
b4:aa:f6:e4:a0:13:dd:8f:b6:9a:ba:38:e5:e8:96:
12:b0:86:42:4e:b8:e7:60:98:13:f4:53:7b:e3:d5:
87:e6:1c:1a:af:3a:46:44:64:23:bf:3d:a8:60:fb:
18:86:ef:a8:77:56:be:79:c8:7d:b9:fe:6d:6b:b7:
ca:f7:30:27:b8:92:77:34:77:b2:6d:6d:36:ad:09:
be:5c:b3:93:ee:10:fc:4f:21:2a:e1:9b:f3:2b:7e:
21:03:86:79:06:78:80:77:bd:49:5d:ce:6a:10:fb:
9e:70:8f:5a:4b:c4:e0:5a:4e:8d:e5:72:e7:48:0b:
74:1c:01:78:c3:a1:17:77:77:7d:fa:18:bd:27:b6:
54:d2:ba:e8:d9:c7:a0:1c:99:a3:01:9e:8c:88:3c:
67:22:3f:1e:ae:42:bb:8a:22:c2:b3:51:19:67:1b:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:55:00:CD:AA:90:C1:D7:A8:25:F5:9D:BB:EF:83:75:E6:E4:48
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:c6:37:b7:e0:70:ed:bb:04:0a:75:6f:02:ba:14:94:19:
f9:cf:16:98:21:e5:1c:6d:48:18:77:15:33:bb:5b:de:b0:b3:
33:93:e9:c7:85:eb:ad:9c:7e:64:af:4e:21:b8:45:d2:78:82:
7e:dc:28:c4:b7:5b:71:a4:38:ac:b6:71:eb:c0:20:54:98:1c:
a3:b5:0d:27:88:d9:51:f0:fb:68:9b:eb:19:88:3f:02:27:7e:
b0:7e:c9:a2:f3:e2:ee:f8:59:4b:8a:2c:19:b1:55:88:c4:42:
d5:97:c2:90:e3:6c:e8:de:87:01:1b:36:1c:c8:71:19:17:19:
bf:83:66:53:a3:60:18:28:a4:9f:35:0e:66:65:9b:ec:c2:a3:
84:0b:6b:be:43:81:27:9b:4e:c0:7f:60:91:69:66:e9:98:60:
70:ec:07:62:c5:0e:bf:68:f8:41:b6:22:f9:32:47:ac:56:10:
ef:a3:b2:f7:9e:54:cb:73:83:60:7a:d2:2d:0b:31:de:fa:c9:
78:06:b1:78:c8:d9:10:33:9e:d1:cb:14:5c:55:85:6d:3e:e0:
05:35:cb:6f:3a:f4:ad:7c:eb:fc:27:1b:a3:9d:44:eb:55:81:
aa:e7:6d:ed:e9:32:43:5f:c4:b8:72:59:5c:4e:bf:5e:3f:c1:
34:00:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:44 2025 by rpki-client