Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: uOLtEEao6Q9Gz5hm41BRyW5HPTjHcWZi9fV0bYmfJyk=
Subject key identifier: 6F:0A:B3:7E:2D:0F:1E:3E:7D:2F:68:22:A9:33:7E:87:AE:3E:51:3D
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 01984A77D062ED8354C8973EB399C722A24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:22 +0000
Manifest this update: Sun 27 Jul 2025 06:00:22 +0000
Manifest next update: Mon 28 Jul 2025 06:00:22 +0000
Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=)
2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=)
3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: 2bXdykljzlCXC59nIun7U2URTLgdaEaBNomzR+6oe6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d0:62:ed:83:54:c8:97:3e:b3:99:c7:22:a2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Jul 27 06:00:22 2025 GMT
Not After : Jul 28 06:00:22 2025 GMT
Subject: CN=6f0ab37e2d0f1e3e7d2f6822a9337e87ae3e513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:f7:ed:a5:f9:6d:22:c4:1a:b4:f4:9e:08:
04:b0:85:5e:24:a3:1b:73:3a:38:58:00:be:7c:5c:
8e:7e:5d:b3:76:16:cd:90:36:83:13:5b:dc:45:57:
74:5d:d6:bc:8b:3c:3c:0c:d6:4e:89:ac:89:f7:1e:
29:8f:21:ee:d7:e2:35:00:c6:8f:08:85:04:fe:9d:
bf:31:1d:5c:d9:fb:15:8b:90:a4:0e:a6:42:42:a8:
a4:00:3a:8c:c4:5a:f7:04:cf:34:b4:4f:a1:a5:93:
2b:0d:05:10:d1:10:b3:0b:18:bb:79:34:d4:a3:4e:
2b:e5:05:9d:b3:27:c1:6d:a7:47:0f:ca:42:70:49:
77:f2:a8:4d:91:fd:e6:0b:f1:f0:5f:6f:59:33:74:
35:c9:99:87:25:f7:9c:5a:4f:d4:9a:0c:cb:f4:66:
a6:e7:eb:c2:91:b1:15:c3:bd:23:fb:90:53:1e:52:
23:f3:83:71:b6:c6:b7:9b:fd:1e:98:39:90:9d:31:
51:ed:ac:68:34:60:03:cb:d0:c3:a4:9b:1f:9d:2b:
6a:fd:db:5c:e5:db:4a:da:18:4d:09:ce:7e:5e:67:
af:d9:85:53:d2:3a:7f:48:85:a9:bf:82:f4:2c:9a:
d5:b8:75:3f:88:5e:cd:5d:d5:93:92:60:37:0a:84:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:B3:7E:2D:0F:1E:3E:7D:2F:68:22:A9:33:7E:87:AE:3E:51:3D
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e0:ac:bc:da:56:99:59:6d:77:18:28:93:b6:2f:d2:43:6c:
b9:75:73:85:68:3e:fc:7f:53:58:56:05:12:73:c2:15:25:5a:
ad:a4:2d:a6:48:b4:97:f4:89:ac:43:d7:37:ab:b8:22:90:ad:
d8:86:e2:09:10:81:8f:64:3f:52:8c:64:3c:a9:ae:c6:0c:73:
ac:f3:0b:46:04:cb:52:61:30:51:0c:c6:ae:58:0d:cb:ea:3b:
03:84:98:31:d1:37:c5:b9:c0:46:e6:50:c8:5d:b2:f9:70:80:
5e:9f:1f:28:fb:98:fb:2b:5f:67:2b:27:79:09:bc:dd:8d:c8:
4d:56:ab:06:0d:6e:a2:74:e0:a8:b4:c0:3c:78:c2:43:be:5c:
fc:da:f3:c0:a3:7d:a4:5e:83:dc:2f:2e:07:58:53:1c:bc:69:
a0:20:e1:48:fa:ee:0c:6b:62:7d:65:1b:5c:d3:18:ea:81:69:
85:3c:9a:0b:60:6c:e7:fb:44:1a:26:a7:e8:e6:c7:ad:c8:80:
a7:18:89:83:8e:b8:ee:8c:7e:80:ca:43:c7:b0:83:76:4c:a3:
bf:ea:ed:51:81:bc:d2:59:ad:a5:fe:f2:03:d2:f0:23:47:7f:
47:e9:58:4c:bb:4b:e2:b5:54:d4:b8:2a:05:76:5a:6f:2f:59:
26:cd:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:18 2025 by rpki-client