Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json)
Hash identifier: pYm5T4w+sEj23ARHJEJKdmNSHQtZc71+6bUWCbp6GnY=
Subject key identifier: 93:79:25:B0:85:C2:D3:63:A4:A7:17:DD:DA:72:E1:7E:5F:66:AE:7D
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 019849655B84E3D87FFAFDB475114827C9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
Manifest number: 1515
Signing time: Sun 27 Jul 2025 01:00:35 +0000
Manifest this update: Sun 27 Jul 2025 01:00:35 +0000
Manifest next update: Mon 28 Jul 2025 01:00:35 +0000
Files and hashes: 1: 19IQx82rzsiCoBb7iKS7zS0gXio.roa (hash: TEyMe4x0yj15nmcDqFTTZyRV6sHl2P5CCSlpIqh9COU=)
2: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: qAL9HT7OWGgtKftVZ5so3ZYJA0JyVLwQH6537o37PHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:5b:84:e3:d8:7f:fa:fd:b4:75:11:48:27:c9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Jul 27 01:00:35 2025 GMT
Not After : Jul 28 01:00:35 2025 GMT
Subject: CN=937925b085c2d363a4a717ddda72e17e5f66ae7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:59:59:91:ad:09:c8:70:4d:0d:3a:9c:b7:
47:d0:f3:fd:4a:72:75:e2:11:21:66:7f:04:55:a1:
3c:a7:d6:39:27:19:8e:74:1f:7a:ce:1f:95:1c:59:
21:e9:01:85:40:f0:6b:79:02:c6:5e:f5:c2:53:9d:
54:a2:c0:4e:fb:33:cb:a7:a4:70:3f:32:60:39:a0:
ab:5e:ca:2c:13:fd:23:a1:84:83:3b:29:bb:53:b1:
9c:80:31:2d:5e:e3:c5:c2:09:9b:63:41:89:cc:33:
db:78:43:a3:2e:36:90:01:fe:24:77:e5:6b:90:67:
41:a0:d9:e5:ae:65:36:de:9b:58:24:0e:a4:5d:c7:
99:f6:04:fa:07:c5:f1:64:b9:28:30:d0:f1:2b:31:
92:5b:49:dd:26:d7:f5:35:b2:75:f1:e1:b6:b0:e1:
8c:3f:ca:db:0c:c5:b0:54:d0:6d:c6:e7:ca:b9:d4:
b1:1c:c3:be:f8:45:d8:0f:59:7f:35:5f:1c:1f:74:
78:3b:96:39:82:eb:44:c6:e3:65:b7:8e:09:9c:1e:
d9:a2:21:b6:84:8a:71:68:5b:b4:81:c9:65:a7:92:
53:ad:f8:ec:94:b8:f9:42:39:3a:24:3b:f8:5e:b4:
f9:40:10:da:75:9d:6a:0f:9d:31:4e:d0:1e:2e:71:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:25:B0:85:C2:D3:63:A4:A7:17:DD:DA:72:E1:7E:5F:66:AE:7D
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:75:9d:2e:f3:b7:16:00:76:16:bd:77:c3:e4:9c:29:9a:d9:
a4:27:76:43:dd:3b:82:10:9d:b0:74:e6:64:31:ed:32:e6:db:
d1:6e:6d:0f:0c:1c:4e:7d:8c:48:b3:74:29:67:e2:be:be:d0:
b4:c0:53:53:ae:a8:1d:dc:c9:a1:44:63:51:ef:a8:11:be:d1:
e5:ee:a9:a1:75:9a:fa:9a:40:3b:48:38:2d:f4:97:d9:6b:d4:
2d:03:ef:03:fd:f6:fa:a9:36:6b:3e:4b:11:6c:d8:10:c9:e9:
17:bb:44:29:14:8a:77:17:cf:55:36:0b:15:25:4a:43:e7:94:
0b:c4:7c:15:00:3d:91:e2:13:e3:bb:79:14:a5:6c:b5:dd:61:
8d:14:ec:0d:25:22:21:97:1d:7e:38:79:92:05:7e:49:5f:5f:
2c:ab:42:5a:21:b9:54:b4:5e:0a:67:08:61:88:a1:20:b4:a0:
7a:55:7e:25:5c:9a:50:6c:a7:59:7f:dd:60:d3:bb:82:3b:a9:
e5:ec:c0:98:e7:34:3d:b0:27:76:69:ce:af:27:a1:d2:1c:5e:
61:87:b1:0f:ee:5d:cb:ca:c0:4e:18:57:64:01:74:c3:fb:a0:
65:56:b3:ac:2d:90:f0:a5:6d:bb:bc:a5:83:50:2d:b9:50:f8:
78:e4:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:33 2025 by rpki-client