Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: rXClsyTkH/IwqcBDP2AwHsAmKsNghZHSdCbD4muT67k=
Subject key identifier: 46:5A:74:B2:98:33:F8:D2:7E:93:EB:7B:D4:B2:FF:4A:A1:35:72:68
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 01985D912053FB570C26F9E42A9D6D51AC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 0541
Signing time: Wed 30 Jul 2025 23:00:48 +0000
Manifest this update: Wed 30 Jul 2025 23:00:48 +0000
Manifest next update: Thu 31 Jul 2025 23:00:48 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: 9A53m4qEYav6jIgjvPxobfDhPPmuntMlUoey0JaT770=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:91:20:53:fb:57:0c:26:f9:e4:2a:9d:6d:51:ac:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jul 30 23:00:48 2025 GMT
Not After : Jul 31 23:00:48 2025 GMT
Subject: CN=465a74b29833f8d27e93eb7bd4b2ff4aa1357268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:3f:ef:74:1f:d1:88:59:1b:fe:92:ce:28:
b3:00:19:7e:29:e7:c5:5a:2b:fb:b0:b1:fe:5d:e4:
2f:f3:4c:d5:bd:7e:95:ba:1a:cf:99:db:7e:b9:ae:
57:ef:06:23:e6:a6:8b:dc:31:af:74:95:e9:50:e7:
bd:e5:60:68:b3:bb:11:07:1c:2b:57:1c:f7:59:02:
32:16:a8:58:93:d3:37:4c:d4:0c:c9:70:c1:03:37:
4a:b0:b1:b8:31:29:10:1d:7d:50:f1:fd:3c:2a:b3:
f7:fd:41:e8:8e:c6:df:c2:55:b8:e3:65:73:97:48:
20:88:fa:e8:c4:63:8f:ed:56:e4:67:47:47:4f:7b:
07:60:36:c4:0c:39:52:15:29:78:2e:f0:3b:53:7e:
b0:63:12:45:4d:dd:cc:13:bf:68:f6:9a:96:81:d5:
ca:50:88:a6:5b:c0:fb:b2:b9:14:7b:0d:11:10:9e:
8e:7c:fc:23:42:59:8b:16:c4:f8:49:77:28:ff:ab:
69:0f:ec:ad:ee:0a:7e:0f:74:9a:2b:82:2e:1d:ee:
85:e9:d9:a4:53:46:65:6e:98:a7:e9:0b:bc:1d:5f:
51:da:53:fa:a7:b0:ef:f0:72:af:82:66:b9:5d:98:
01:28:ce:04:40:08:6d:7a:1b:52:b6:3a:58:24:f4:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5A:74:B2:98:33:F8:D2:7E:93:EB:7B:D4:B2:FF:4A:A1:35:72:68
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c6:27:0e:f8:38:b4:c2:56:62:57:f9:0a:9e:cb:44:56:a9:
f7:61:63:50:04:e1:f2:65:fe:ae:ca:26:ea:7b:cd:2d:f2:7f:
e5:5f:8e:f7:5c:f3:f3:bc:32:28:a6:43:27:2f:42:6b:21:05:
97:8f:a0:6d:8f:df:4e:fc:82:3c:f7:77:41:39:a2:35:50:70:
7e:36:83:a1:59:2d:77:16:d4:d3:19:a4:24:53:39:2b:97:01:
96:ff:c5:7e:59:6b:c7:45:b9:36:87:4f:6e:7a:de:cd:c3:54:
c7:f9:c6:ff:f6:52:3b:a7:31:d0:76:b0:54:5e:a7:3c:14:8a:
9b:eb:dd:cb:90:e3:3b:d9:56:7f:dc:39:fa:a1:e4:9a:8f:81:
0a:5e:4f:50:ea:22:6a:70:89:14:46:ae:9b:7c:b9:fc:a8:20:
67:e8:f8:25:f3:e9:8a:ae:e4:4a:7d:9b:a5:1f:5d:d7:dd:66:
41:11:0e:7f:02:3e:e6:1b:58:e6:78:19:c8:d4:17:da:39:f2:
c4:8a:0b:13:13:a8:39:2f:48:7b:bf:d6:9a:97:d3:5f:58:59:
0e:ad:f8:81:a0:e8:85:72:94:6b:b4:a3:25:d1:e6:87:a1:6d:
a1:f3:d4:c8:95:c9:b2:fb:a2:03:63:15:d5:b8:10:96:f0:51:
47:c9:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:31:23 2025 by rpki-client