Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: RJ+eofP+XLvfQeeFzu3vIA0ezqjTmyqAdeBQScD66oU=
Subject key identifier: 43:C2:D4:8B:F6:2A:1C:AE:1D:F0:F8:D0:0A:2C:91:86:4F:5D:BC:7B
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 0198451A90D5DB1D4763EC66CA69CF0CCDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0C95
Signing time: Sat 26 Jul 2025 05:00:25 +0000
Manifest this update: Sat 26 Jul 2025 05:00:25 +0000
Manifest next update: Sun 27 Jul 2025 05:00:25 +0000
Files and hashes: 1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: 3wDKMlbLxNtyB28Brb5xOBKvwqK5gko5xgWOKz4sBhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:90:d5:db:1d:47:63:ec:66:ca:69:cf:0c:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Jul 26 05:00:25 2025 GMT
Not After : Jul 27 05:00:25 2025 GMT
Subject: CN=43c2d48bf62a1cae1df0f8d00a2c91864f5dbc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:bb:ef:b5:90:24:dd:33:c1:69:a7:9a:c3:
66:21:62:84:9b:b1:e7:4c:ec:7e:1d:c9:e5:d5:47:
27:9c:42:3c:a8:b3:c2:6b:e0:da:5e:2b:3c:96:37:
fc:56:f8:d6:46:29:97:85:54:58:a2:e9:3f:32:6a:
03:71:ed:af:bc:85:e1:f6:99:61:af:4a:d6:59:cf:
2c:a4:0d:6f:58:f5:bf:87:20:00:b2:80:5a:14:f1:
1f:3b:02:e1:18:37:73:e7:ac:31:65:8b:f3:1e:7d:
63:f2:63:aa:0c:01:98:af:70:11:4c:f8:6b:2e:0a:
d3:bd:d7:8e:94:38:ec:80:e4:b5:2d:72:6f:6b:97:
fe:31:f9:ae:41:d6:02:55:a8:53:ed:a5:38:aa:e2:
54:ca:8d:4e:c0:4c:26:ee:b4:14:ab:15:2b:af:38:
d1:ba:25:8e:ff:b3:8b:80:dc:c0:71:69:8f:d3:d8:
6e:52:99:e9:61:04:7a:ee:ae:9d:65:7f:8d:d3:ec:
0b:89:cb:9e:2f:67:0b:91:eb:b3:9a:a5:ac:d9:f8:
1c:1e:17:82:c2:81:63:63:24:54:40:0d:c3:a6:c2:
21:96:81:a0:15:be:10:3d:48:dd:9a:e0:4d:90:b9:
7b:7c:92:90:6e:4b:09:fe:c1:ff:04:d2:ee:53:70:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:D4:8B:F6:2A:1C:AE:1D:F0:F8:D0:0A:2C:91:86:4F:5D:BC:7B
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6d:f0:05:64:66:56:8c:cc:1c:c0:1f:f2:25:25:74:f0:33:
b4:9c:2b:67:b3:1d:8a:bf:b6:7b:2e:fc:fc:78:a7:e8:68:3a:
31:56:77:6a:01:ed:9c:80:d4:20:31:69:37:43:92:d0:ef:2c:
3c:55:f6:5f:4b:eb:cb:fc:43:21:fd:7b:28:7f:46:d8:de:88:
5c:d8:c9:bb:7d:37:ed:da:fc:1c:4c:1d:1f:51:1f:9d:ce:f4:
92:b5:fc:c6:90:97:72:35:8c:5d:f9:b4:75:ba:81:ca:f2:1b:
24:8f:13:45:17:16:0f:71:0a:1f:09:f3:3c:68:fb:bd:4f:5e:
d4:03:32:c3:78:74:db:c6:a8:21:ba:2f:47:36:b9:c7:e3:35:
d8:cb:9b:e7:f2:6d:e4:63:31:e3:bc:ac:b1:02:ad:a3:70:39:
7d:81:86:99:2e:83:d5:d6:53:43:d2:3b:22:d3:09:c9:2b:64:
fd:25:28:03:ee:88:40:bb:26:28:ec:fd:9b:b4:68:31:b0:38:
d2:05:e9:f3:e0:a3:47:94:8f:31:59:50:e4:40:bd:fc:93:ba:
5f:8e:01:93:49:d4:3f:4b:a5:29:24:ec:31:16:52:d8:47:42:
72:34:3b:b0:5c:82:15:d4:9c:27:92:07:70:78:dd:31:ba:11:
48:61:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:35:44 2025 by rpki-client