Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier: pDZT4ZSGgcXwoofPwmEtG/nnq5Mee3fskimNbJ4RWZo=
Subject key identifier: 96:45:CD:5B:10:48:E8:9C:E5:2A:69:A9:93:8B:5C:16:E4:0B:1D:11
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial: 019849D2CE8B36D80E388A94636769934E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number: 0582
Signing time: Sun 27 Jul 2025 03:00:08 +0000
Manifest this update: Sun 27 Jul 2025 03:00:08 +0000
Manifest next update: Mon 28 Jul 2025 03:00:08 +0000
Files and hashes: 1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: Ucm0cr1zlMvvn+Qy+lxuPBcY0paWpH4T37gspJnYyS0=)
2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ce:8b:36:d8:0e:38:8a:94:63:67:69:93:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
Validity
Not Before: Jul 27 03:00:08 2025 GMT
Not After : Jul 28 03:00:08 2025 GMT
Subject: CN=9645cd5b1048e89ce52a69a9938b5c16e40b1d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:0b:09:cd:6f:40:62:ee:41:cc:c9:7e:87:
c5:51:af:cc:25:35:07:fe:33:c5:86:66:75:2e:dc:
be:ff:77:69:47:4d:58:2a:5c:1a:3f:31:74:f2:9f:
0e:cd:4f:c5:9c:40:0c:9f:98:7b:8f:dd:b7:7b:8d:
83:47:15:5c:76:37:6a:5c:e9:15:6a:04:4a:23:3f:
68:67:16:4f:bd:03:ab:a0:a9:ea:0b:15:53:5d:f0:
e2:ff:85:77:0b:e4:fe:91:d0:83:cf:2c:f2:cb:2f:
b4:fe:e1:3f:a5:b0:3c:11:ad:42:93:4f:b8:38:b5:
4e:95:66:c7:6c:85:10:14:93:79:38:fb:fc:03:38:
06:e4:50:d3:ee:60:87:ad:ba:a0:ff:73:b8:59:f0:
a5:2b:9b:d7:d5:4a:19:49:51:09:5c:28:a7:5c:84:
b3:41:91:a1:1e:c5:3b:7e:c4:5a:32:94:f1:f5:a1:
a6:5f:3f:82:98:d4:88:8a:0e:1e:d7:3b:18:5e:55:
e2:9c:a3:e9:61:73:eb:41:74:c7:0b:3a:c6:bb:9e:
5a:cc:2e:1c:f5:a9:14:60:cc:23:e5:70:d1:39:b6:
89:e1:34:4e:dd:3b:1a:ce:e1:4d:4f:4e:3f:31:92:
38:97:51:5d:d9:59:78:b6:6f:ca:ef:d4:52:ce:b5:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:CD:5B:10:48:E8:9C:E5:2A:69:A9:93:8B:5C:16:E4:0B:1D:11
X509v3 Authority Key Identifier:
keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1a:77:0b:f0:0a:f3:f5:38:dd:48:ea:db:6d:de:9a:68:88:
b2:97:b6:aa:ae:4a:fc:8e:d4:c1:fb:e2:56:04:96:c6:3c:39:
dc:af:a3:61:c7:cb:33:41:c8:28:59:0b:1f:1c:43:9c:56:86:
87:e6:94:24:f3:2e:8f:47:ed:9c:2b:8d:86:b9:b3:50:17:63:
57:f1:cb:30:f0:34:ba:0f:b1:2f:bd:e4:a8:7e:e2:95:86:78:
2a:ce:19:65:f4:ac:0d:c0:a4:7a:5c:4d:fa:ed:76:39:ae:4d:
23:dc:56:7c:58:dd:56:98:d4:91:22:40:38:2d:37:5e:2a:b4:
07:66:9e:13:d8:5e:e6:2f:a4:61:a2:94:14:37:b7:cc:fd:ca:
94:b6:af:c9:83:41:ba:63:44:58:f7:08:cc:01:e1:c9:6b:f0:
30:76:86:1a:7f:99:2c:96:8b:66:14:48:aa:9c:16:58:f6:66:
ef:99:4c:15:02:52:17:7b:f5:f5:52:e9:f5:81:76:51:84:89:
af:29:b8:32:e6:7f:02:f3:70:d0:92:2a:0a:e0:0c:90:9c:fa:
9a:88:21:cb:0f:78:54:8c:a4:7c:eb:3d:01:79:14:e0:f5:d3:
e9:92:d5:9b:a2:b5:62:66:bf:1c:b3:27:b0:0d:23:11:bb:81:
45:12:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:27 2025 by rpki-client