Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
File: QYHCLrezLZAdElcA4UDrYAncxto.mft (raw, json)
Hash identifier: PtYCUtZOOrRcQKXRJ7IqZCFBbG1+NOe3vCjZ9S3XlwY=
Subject key identifier: 4F:91:B8:11:D8:BF:4C:1F:81:66:B7:C0:1E:F1:33:8A:A4:48:29:33
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Certificate issuer: /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial: 01984A410B5005F15082B79E9F59B91FFD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 05:00:33 +0000
Manifest this update: Sun 27 Jul 2025 05:00:33 +0000
Manifest next update: Mon 28 Jul 2025 05:00:33 +0000
Files and hashes: 1: HitPQyHhpEoVidVOwqr2ddK23LE.roa (hash: UNtTyCfc7GR1gxgfjG0Y/XLw7gBd/DnSW8H0cz2SvrM=)
2: QYHCLrezLZAdElcA4UDrYAncxto.crl (hash: rNrfQ/up7KTF5ipG5pv0N0cOhyAgF/KbWRKWrF6BDmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:0b:50:05:f1:50:82:b7:9e:9f:59:b9:1f:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Validity
Not Before: Jul 27 05:00:33 2025 GMT
Not After : Jul 28 05:00:33 2025 GMT
Subject: CN=4f91b811d8bf4c1f8166b7c01ef1338aa4482933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:ea:1c:b2:0f:ac:21:5f:ec:c3:47:06:87:
68:6d:e1:1d:b1:d8:6b:e5:cf:2e:d4:cc:1a:6d:fa:
0d:d9:21:0b:77:0c:5e:0c:1b:db:44:49:93:16:4d:
94:de:52:c4:19:ef:8d:44:cb:22:d4:fd:b1:54:09:
1d:05:c6:d3:29:dd:8d:c3:14:61:7a:e5:79:30:60:
38:bb:13:4f:63:a3:e7:0b:8a:12:42:12:0b:ac:a7:
a7:0a:4a:72:b4:b1:ce:5a:5e:90:27:e1:97:73:3b:
c9:c5:fa:60:b9:fc:86:e2:ac:97:5e:3b:de:a6:27:
40:56:e7:35:7f:b3:ca:2b:dc:0d:46:34:3a:bb:73:
4b:98:3f:13:47:fc:34:02:d0:f3:42:a7:10:33:74:
60:56:d5:8b:fa:c9:14:2c:5c:5e:71:58:90:d0:7a:
79:15:a3:92:f8:35:5e:37:0e:bd:1d:ab:97:b8:b1:
5f:9a:e8:9a:1e:6d:60:3f:6a:5d:21:ef:61:b9:9e:
90:07:c7:3d:06:95:34:d0:db:bc:09:92:7f:9c:42:
fe:1c:c8:5b:91:0c:f7:d6:63:97:89:21:85:0d:a5:
20:6d:0b:c3:13:cc:5c:ce:df:6c:52:e6:0c:1a:8b:
1c:33:bb:0a:6e:23:5e:1d:f7:bc:ec:85:c7:d6:15:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:B8:11:D8:BF:4C:1F:81:66:B7:C0:1E:F1:33:8A:A4:48:29:33
X509v3 Authority Key Identifier:
keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2f:e3:d6:8b:f7:6e:ff:05:0d:c3:98:d3:7e:1c:a5:02:db:
51:40:db:14:5d:31:71:74:47:9f:34:34:45:d6:65:fe:7f:96:
3e:2c:88:d1:f1:7b:bb:37:8d:a0:63:af:fb:ba:d1:2a:e5:2f:
49:52:50:ae:f0:f3:1b:81:ff:2a:7c:b2:ca:39:3f:0c:53:2c:
a3:74:07:1a:5e:31:e5:58:c7:48:8e:a1:ea:72:cf:fb:18:8c:
5b:a2:b4:98:91:3a:e4:b2:26:b9:15:66:0e:80:c6:55:86:e3:
83:66:c3:14:8f:f0:fc:6e:47:ec:27:93:b4:ee:4d:87:a5:c7:
58:c1:62:69:f0:c8:29:ca:5c:14:1a:7d:55:9a:5f:cf:75:64:
eb:ce:73:10:9b:fd:e5:8b:43:7d:66:dd:cb:e7:48:e8:9d:e9:
5b:77:9c:b1:03:15:c0:a7:db:e6:36:b2:86:dc:6c:63:46:10:
87:9b:40:f4:36:29:3c:b5:1a:53:b0:3b:c1:ca:27:f8:a3:d3:
41:80:16:89:21:b6:68:24:82:be:53:9b:15:29:cf:30:47:9c:
78:d8:07:85:e7:35:ba:77:2c:be:1f:25:29:e4:d2:c5:03:7d:
96:bc:43:6d:da:c0:d0:ac:17:ae:f7:f9:5d:1f:82:eb:cb:4e:
fe:35:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:11 2025 by rpki-client