Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: VoKu9/iX7Exsj+Gd1Xuzg0iiXM2PQ/wb9SPq/aGz2f0=
Subject key identifier: E5:3E:47:15:EF:85:46:22:E3:C7:80:F0:74:73:C5:B9:73:70:8E:41
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 01984966D2BA20C4B1792DEC8EE828949F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0ED8
Signing time: Sun 27 Jul 2025 01:02:11 +0000
Manifest this update: Sun 27 Jul 2025 01:02:11 +0000
Manifest next update: Mon 28 Jul 2025 01:02:11 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: 4FkwekY744G19cqrjt7Ppbguh/1lhOwblVXY8WAXLfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:d2:ba:20:c4:b1:79:2d:ec:8e:e8:28:94:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jul 27 01:02:11 2025 GMT
Not After : Jul 28 01:02:11 2025 GMT
Subject: CN=e53e4715ef854622e3c780f07473c5b973708e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:80:7b:96:ba:de:43:67:a3:89:07:70:e2:
0a:d5:16:37:a3:77:e1:33:09:9b:83:50:41:68:4b:
81:00:0e:97:a6:60:cb:66:37:21:b1:67:13:2c:f9:
a5:8f:2c:e8:f0:40:79:22:26:b1:b3:d1:f6:ee:2b:
00:22:3a:3c:47:f0:da:71:07:8b:8e:49:c1:b3:2e:
82:77:1c:56:e8:0c:13:91:1f:8b:08:61:55:61:29:
e0:7e:2d:a8:01:97:04:1f:08:10:b1:1f:82:f2:df:
a2:b8:2f:19:45:49:19:95:31:d6:ad:e6:ce:fe:00:
9f:70:f4:af:8d:b1:de:66:f0:2e:00:ff:74:6d:2b:
40:42:65:ff:74:04:94:6c:96:0c:67:09:c4:da:e0:
11:7b:b2:b2:3c:03:50:9f:d1:c1:93:72:e4:9c:49:
bc:6b:e0:e1:ec:f7:e4:aa:92:06:54:81:7a:4b:93:
cf:61:45:94:1a:93:c1:f3:ac:c2:42:e0:03:ec:04:
b6:58:4f:c0:a9:e6:35:78:e7:22:d4:d6:23:31:a8:
c5:60:2b:e5:62:dd:4e:b6:7c:e5:af:d9:93:fe:b4:
5a:1b:39:7c:7e:05:2a:51:45:96:f1:51:a2:b7:c6:
39:cc:e0:c2:aa:64:19:30:2b:aa:e8:54:52:35:b2:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:47:15:EF:85:46:22:E3:C7:80:F0:74:73:C5:B9:73:70:8E:41
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8a:a3:3b:46:4b:8a:60:89:55:e6:b1:78:f3:85:4d:4c:a8:
f6:86:ea:47:8c:a1:35:48:8f:3a:0e:4b:b5:a2:63:a9:19:d7:
44:13:3e:91:87:a0:75:bc:14:ef:12:d8:43:be:de:9d:ed:85:
4e:33:75:43:d8:46:a9:c4:49:3e:ca:8b:42:61:97:9c:a2:31:
d1:30:ee:4e:7f:82:d0:ce:44:31:fd:a4:83:91:1f:7b:46:ce:
75:11:93:0d:da:32:41:aa:fd:76:ee:2c:8f:e5:47:38:0e:35:
b2:ba:a2:57:a3:6e:85:2f:93:00:91:f9:4d:61:20:7f:0a:dc:
99:3a:a8:6d:2f:ee:5c:40:eb:f3:0b:c0:54:06:88:fb:c5:90:
9f:9c:bd:ee:d2:0b:73:12:30:e2:0d:c1:24:e8:f5:a3:5c:09:
ac:3f:e0:aa:f7:40:18:68:18:7b:08:60:f2:0c:b0:c4:87:88:
5b:ab:a5:31:09:ac:44:0f:31:75:65:02:3f:79:a7:f9:3f:6d:
d1:46:a4:ce:d3:15:81:d3:4f:0c:e7:d3:f2:9b:d6:1b:68:74:
f9:ea:a4:4f:8e:9c:eb:e9:f3:4c:d5:8e:3a:7e:71:58:bb:b6:
f0:ef:01:fe:fc:8f:7d:b8:13:26:ef:e7:50:26:45:03:68:70:
db:6f:c7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:58 2025 by rpki-client