Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: 5idh/W6cp1tKQIKWJD3O4PHWnxbu7xSgdubqjG1AFAU=
Subject key identifier: 2A:68:B2:75:3F:D7:AB:D6:65:4B:E2:3C:DC:6D:CC:88:E1:44:ED:8A
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019827EC4B41FDE088AE881C4D5554AF739D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1578
Signing time: Sun 20 Jul 2025 13:00:53 +0000
Manifest this update: Sun 20 Jul 2025 13:00:53 +0000
Manifest next update: Mon 21 Jul 2025 13:00:53 +0000
Files and hashes: 1: Q2tZHxcnTfsijpne_PaEOT5dOKg.roa (hash: FVNO2p4hWZxlSs3+Rn7ouc28IBioq9Skdi74miEeHBs=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: sX9TUjYgmeBKfKXJLbT1TVAArLlthtpzJamQz1qlNWc=)
3: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)
4: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (hash: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:4b:41:fd:e0:88:ae:88:1c:4d:55:54:af:73:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jul 20 13:00:53 2025 GMT
Not After : Jul 21 13:00:53 2025 GMT
Subject: CN=2a68b2753fd7abd6654be23cdc6dcc88e144ed8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:bb:06:9f:99:01:2c:78:c9:91:46:61:f3:
b6:d0:ef:71:2d:50:4a:12:f4:0d:3d:f5:ba:b3:06:
93:65:8f:ac:a5:27:9d:7d:1d:5b:a3:48:4f:ff:46:
77:42:a7:b8:d5:d9:70:18:8e:e2:81:49:8b:27:ad:
28:38:67:01:ac:71:38:39:27:5a:71:09:51:3b:fb:
45:5c:f1:fd:a7:f7:92:4a:7c:4b:2f:da:bd:fe:1c:
ec:7b:f8:96:e4:6d:2e:ed:2d:55:d2:a2:c6:eb:3b:
4d:d7:1e:26:98:1f:6f:d8:17:24:dd:de:e2:ee:a9:
72:5c:5a:bd:eb:0b:97:60:c1:cc:bb:1a:1a:22:8f:
9a:99:49:9f:c8:7c:bc:15:a5:ea:f9:d3:11:ed:f4:
a3:31:b6:61:6a:1e:64:90:6a:d5:18:31:89:f6:8b:
57:16:b0:d8:2c:3d:1b:18:fb:ae:9c:e8:1a:87:20:
5a:06:ee:70:06:57:2c:7e:43:7e:8e:a0:2d:09:1c:
b8:4d:88:3f:74:90:10:cb:25:b8:f1:87:64:5d:e0:
2d:55:5e:b5:98:bb:5a:8f:3f:1c:ad:bd:5c:2b:cc:
41:03:3e:a3:02:f9:80:7e:93:ca:49:33:3e:ab:ab:
7a:54:31:f5:a4:81:c5:ee:5b:0b:f4:fb:8c:1f:61:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:B2:75:3F:D7:AB:D6:65:4B:E2:3C:DC:6D:CC:88:E1:44:ED:8A
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:c2:b1:0c:9d:52:37:85:45:ce:d3:61:85:f1:bb:ca:e8:
5b:5e:24:b8:de:3d:03:ba:17:60:19:62:10:52:fc:d6:b0:7a:
5e:6d:7c:e8:2f:38:2e:14:94:1b:30:c0:99:27:bc:2c:7c:17:
0d:99:f2:0c:38:4e:e5:43:8a:61:31:8f:b3:e9:47:48:2a:0d:
6c:d2:6d:c5:74:f6:87:ed:58:75:e0:92:ed:49:50:20:89:cb:
50:a9:67:e9:9e:e1:34:34:10:21:55:79:fb:77:6d:54:4c:16:
96:0f:1f:63:e5:44:c4:00:0a:df:14:0f:27:d8:7b:ec:3b:cc:
81:9c:1d:e0:b1:6c:a3:82:b1:cd:a4:f8:c4:b6:1b:d7:ee:d0:
ff:b3:84:e2:ed:02:ff:cb:5b:62:7a:6b:26:1e:0f:ab:5b:6a:
25:a5:2d:d6:1c:5b:9a:e8:c4:c4:ab:fd:0e:23:d3:b5:c4:35:
5c:bd:70:48:30:cf:8d:94:63:e2:03:4e:03:7a:2e:98:58:b0:
92:89:2a:b0:33:92:8b:1b:10:98:68:83:9a:39:0b:ef:7b:54:
f2:c6:a3:9c:54:0d:f3:40:d9:82:26:22:26:aa:63:bf:eb:1a:
f3:45:af:5b:7a:8f:41:de:ca:24:11:e3:c3:f0:e6:6b:6d:0a:
e6:5a:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:29:16 2025 by rpki-client