Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: 7YjxSTl7gMigXV9QXNZd+r6YbPFp64XksOrNexTuh14=
Subject key identifier: 08:8E:A4:D3:12:32:0E:CF:9A:43:6F:63:B5:83:B7:04:41:96:C2:5A
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 0198481BE8D45A3CC1090074C8136DB77920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 06C0
Signing time: Sat 26 Jul 2025 19:00:45 +0000
Manifest this update: Sat 26 Jul 2025 19:00:45 +0000
Manifest next update: Sun 27 Jul 2025 19:00:45 +0000
Files and hashes: 1: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (hash: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=)
2: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: z0m3PsVb6hFG7/JQeiD/YI2Zo+ORD4enVgoD8j0kbl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:e8:d4:5a:3c:c1:09:00:74:c8:13:6d:b7:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Jul 26 19:00:45 2025 GMT
Not After : Jul 27 19:00:45 2025 GMT
Subject: CN=088ea4d312320ecf9a436f63b583b7044196c25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:4d:a4:0d:e1:3c:49:e4:a6:87:22:17:ff:
4f:88:c3:63:9f:21:93:4b:0d:bf:9b:0e:18:0a:de:
ed:5c:82:76:f4:1f:f1:c8:79:69:38:38:8e:b1:e6:
c9:8c:0a:b4:ec:e8:d9:e7:8d:57:0c:fa:15:9f:84:
d0:a1:20:c0:bc:57:bd:f1:2c:6d:ba:e5:58:0b:45:
fc:e8:02:7c:2f:af:ed:8b:63:95:34:5a:3f:eb:19:
ef:14:c1:77:fb:1d:86:26:7b:8c:8a:96:5a:41:30:
c3:f3:0d:db:21:40:5f:e3:4b:c1:df:d5:90:ff:2d:
6f:0b:2e:1e:c4:fc:a8:15:65:43:4c:d2:bd:96:f4:
0d:e2:38:87:1b:dc:3b:18:fd:fa:88:f5:2d:9b:95:
74:e5:8a:4b:1f:4e:4f:e4:3d:e0:e2:aa:5e:1a:15:
f9:74:c0:1a:28:f2:9f:6c:bf:c2:6c:60:db:fc:c8:
e9:5e:b0:fc:c1:22:7b:99:9e:2a:f0:eb:67:9b:f0:
db:f3:7b:50:5c:aa:c1:87:97:2a:6f:a4:10:cb:15:
c8:aa:da:ba:1a:71:be:69:83:9e:0b:87:2b:c9:3c:
7f:5e:ce:2a:66:97:4c:41:f1:5d:2b:b7:a2:74:4c:
37:b2:5c:37:7b:2e:af:e4:a3:66:2f:ce:78:cf:7c:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:A4:D3:12:32:0E:CF:9A:43:6F:63:B5:83:B7:04:41:96:C2:5A
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ee:10:b6:0d:2e:e0:6d:55:04:35:79:f1:44:9d:f3:13:42:
df:3b:71:29:f9:22:e5:70:ba:68:8b:99:c2:ea:92:ff:1b:49:
fa:d5:24:dc:8d:94:4c:44:4d:18:0b:76:3f:4a:22:24:da:9c:
c3:37:c6:2f:53:e1:5a:b4:9d:d1:98:8e:97:d5:bc:a8:40:2a:
25:db:a4:fd:8e:5b:7c:4c:26:52:56:59:e6:b5:41:18:d7:13:
e1:23:e8:a5:ca:71:6b:36:42:29:af:89:38:cd:e9:c7:e4:78:
40:eb:1a:d9:c7:77:a8:2b:61:45:2b:6b:63:d5:7b:87:57:0d:
a6:f6:3e:e9:bf:79:f1:d9:5e:26:cc:95:57:cf:7c:bc:52:cf:
07:1b:90:93:50:5f:c4:32:e6:5e:36:93:ff:30:ac:e9:d8:83:
e6:3f:54:0a:c0:f5:a5:ba:3e:eb:8a:09:06:47:aa:39:34:42:
6d:26:92:ac:86:eb:26:67:ce:12:c1:59:14:c6:76:1d:d6:71:
a7:15:c5:4c:7f:c6:59:f0:e2:5b:0c:63:c7:b2:43:c0:ae:71:
3f:9d:1c:b6:e1:47:75:f6:82:b7:90:2f:e7:97:8f:72:a1:71:
13:64:05:28:7d:76:b0:41:04:41:84:50:86:4f:e5:11:73:f2:
9d:72:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:53:53 2025 by rpki-client