Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: J98NtmqytpwKMskikePz/NsrV15+1UukVUpnvHJlAHw=
Subject key identifier: FB:54:31:4B:F0:DD:9B:E2:46:F4:79:F9:82:D8:B9:46:B4:E3:B9:D2
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 01984E8BF7CE5488B835436F4F9BEE6D13B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 1596
Signing time: Mon 28 Jul 2025 01:00:52 +0000
Manifest this update: Mon 28 Jul 2025 01:00:52 +0000
Manifest next update: Tue 29 Jul 2025 01:00:52 +0000
Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: Hm3nCZXVtR59iRv2T0H4w4WZrrMJV1MmQLJ5nIamw4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8b:f7:ce:54:88:b8:35:43:6f:4f:9b:ee:6d:13:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: Jul 28 01:00:52 2025 GMT
Not After : Jul 29 01:00:52 2025 GMT
Subject: CN=fb54314bf0dd9be246f479f982d8b946b4e3b9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:df:d1:20:60:46:7c:20:ea:65:11:cf:22:
7f:1b:4a:48:ff:d4:f8:d0:1e:d0:d6:6e:b9:c8:fd:
e7:c3:ee:bb:d3:b3:51:89:b1:0a:1a:60:9f:90:49:
f7:30:cf:a7:90:e4:0f:7e:38:81:84:9e:aa:8a:40:
ee:6c:f3:be:0c:dd:ac:0d:ed:d8:c3:b2:f9:92:32:
f8:67:06:d8:d7:47:8a:20:8e:1b:ae:f0:e2:04:fa:
f5:36:d2:10:b2:32:69:93:d2:9d:c1:ff:95:28:63:
89:b6:ac:9a:df:82:b0:22:11:12:4c:7a:60:af:ef:
8d:ee:63:02:2d:ec:20:a8:75:13:1b:e1:92:35:d8:
76:a8:7f:e2:8a:a9:ed:db:a1:17:7a:da:e1:bd:2d:
5b:43:0f:c5:64:aa:27:e7:ac:2d:b3:9c:a9:9e:2b:
5e:03:d9:43:7e:a2:d1:2d:76:91:d6:1d:39:2e:12:
ce:69:a3:a3:2e:11:f2:93:cf:d9:de:f1:ca:37:51:
f7:80:59:5a:6f:0a:8a:79:90:33:37:52:7d:7e:9a:
e7:17:22:fd:7b:25:5e:45:61:14:1e:74:02:ba:a2:
57:43:9a:ec:28:81:64:de:bf:d1:50:bb:f3:cc:d9:
84:80:20:20:e4:4c:4e:0f:57:87:f1:9a:c1:78:7d:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:31:4B:F0:DD:9B:E2:46:F4:79:F9:82:D8:B9:46:B4:E3:B9:D2
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7f:66:70:d1:4b:f8:1a:cd:19:57:b3:27:d4:03:bd:b5:0b:
6b:92:f5:5a:fe:26:ae:b8:d9:64:0d:8d:d1:3d:71:ad:1a:30:
2a:5a:c3:3a:23:97:ae:85:60:72:0f:43:69:ca:e9:9a:36:2f:
47:d0:99:67:bd:9e:49:93:ae:02:94:61:5b:c1:bd:fd:07:50:
16:e6:b3:66:c0:c1:c8:75:5c:6d:88:2b:8d:87:2d:b3:85:4a:
c0:1f:f7:fe:25:4e:2d:a8:97:a2:4b:e8:59:93:21:47:a5:81:
be:42:28:ae:a7:e5:4f:83:09:da:21:85:86:84:a3:3c:93:00:
95:86:8f:c4:86:85:82:5f:a0:33:e6:22:c5:67:02:89:f1:27:
04:4d:18:5e:e8:4f:ae:ba:2e:3a:df:54:27:18:68:8b:b0:3d:
8f:c4:f3:1e:54:d7:02:f3:84:c8:4e:7c:4b:9b:8a:a1:91:3d:
f6:73:be:d8:65:a5:ac:3b:73:69:74:13:d2:45:2f:73:e5:af:
a8:44:ae:6d:d6:ad:75:94:00:05:04:67:da:ce:3c:96:a0:a2:
9e:be:42:90:a2:01:22:1a:82:eb:ab:ef:91:65:96:28:28:07:
53:48:d7:e5:db:4a:d1:99:db:77:e4:b6:df:c5:7c:8b:ca:dd:
24:53:86:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:06:17 2025 by rpki-client