Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: o5XDaYuU/0x9eJ2NGjv8hAAtR4/gCDRic+tPNtaCKE8=
Subject key identifier: 53:B5:70:61:80:9C:04:18:79:0C:53:C2:7A:97:DC:67:EE:A9:B9:06
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019848C0E97509A8E0B222ED1B48ECB0B5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 22:00:58 +0000
Manifest this update: Sat 26 Jul 2025 22:00:58 +0000
Manifest next update: Sun 27 Jul 2025 22:00:58 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: NDc3XSzHhEiR/fjbpbWIcZ+rH0zpm260cyJLCS1amOw=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:e9:75:09:a8:e0:b2:22:ed:1b:48:ec:b0:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Jul 26 22:00:58 2025 GMT
Not After : Jul 27 22:00:58 2025 GMT
Subject: CN=53b57061809c0418790c53c27a97dc67eea9b906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:77:b4:72:ca:89:3e:40:8b:bc:a2:85:d0:
30:84:62:02:2d:83:7d:54:b3:aa:aa:f4:2d:2f:6e:
54:61:b5:cb:25:fe:86:b9:1b:6a:02:85:93:4b:91:
62:e2:71:06:2c:f6:16:1f:2c:1c:5a:f3:49:9c:08:
f2:d7:80:59:e1:de:44:b2:9c:65:c9:80:cd:a1:69:
68:f8:94:ea:64:b4:ad:67:59:26:1f:ad:a4:0e:ef:
b5:b5:48:33:2c:14:70:0a:72:54:38:c8:d8:11:ed:
56:db:43:b5:01:9f:e8:60:6d:f4:01:58:dd:ed:73:
40:35:64:84:1a:eb:c6:02:47:65:7b:17:0b:6a:fb:
91:4a:12:b6:b6:61:56:4d:ce:06:57:f6:d8:27:73:
87:f5:73:1c:55:2a:f2:85:0a:2e:29:78:f1:aa:04:
d8:49:3e:57:b5:a5:32:ec:d1:79:e7:b5:82:ea:e5:
2a:41:83:8a:5e:7f:f0:ce:1d:ac:87:32:a0:a7:01:
9f:3b:72:6a:75:0f:2d:5d:04:70:00:b9:f6:54:a2:
90:65:90:da:26:af:87:89:9a:b0:09:a2:cc:1a:4f:
91:16:bc:37:a0:24:aa:4f:82:e9:86:3f:85:b0:7c:
a1:89:2a:8b:5c:f0:2d:be:70:52:3e:b4:c6:51:3c:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B5:70:61:80:9C:04:18:79:0C:53:C2:7A:97:DC:67:EE:A9:B9:06
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:00:73:a6:4f:27:73:4a:f1:41:9a:6f:a4:54:5e:11:24:42:
92:74:fd:27:fa:21:45:96:a6:fc:c6:67:58:5a:f7:08:12:d9:
02:6a:ac:3c:e5:26:44:69:fa:c7:41:03:c7:84:df:07:95:00:
f2:39:83:c5:99:1b:02:39:88:23:f5:a2:14:f3:61:9c:5b:bb:
2e:50:b0:fa:55:d8:1f:a3:10:ee:d5:c2:1a:32:22:8a:f0:d6:
7d:bd:0d:0a:71:4a:f8:c5:e6:9c:b7:aa:4c:53:4c:7c:2a:16:
b4:45:01:97:5e:25:9e:50:96:8f:51:91:7d:33:8f:e5:60:14:
1d:51:cd:4e:06:64:fc:35:0a:e2:ae:c6:79:94:fe:69:68:e4:
5d:13:f4:a5:22:2e:b8:75:0f:81:c7:61:a7:0e:ef:84:94:a0:
f6:35:ca:76:b8:5f:a0:07:86:dc:b7:a6:e4:77:46:f5:82:7c:
7d:c9:13:ed:b9:13:fb:7c:6e:e5:73:2d:6f:d0:61:d3:cc:8e:
23:58:fc:2b:61:26:8c:ca:b1:d2:88:79:b1:cb:fc:aa:e2:42:
d0:d5:1a:9c:1f:cc:6d:50:4f:65:5b:81:cf:84:a8:19:dc:e1:
a6:77:5c:2b:48:de:d3:7e:c2:4e:7a:84:dc:57:e2:bf:4c:8a:
ca:ba:60:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:18:32 2025 by rpki-client