Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: p2/oaCVsWjWTbZXMm9jJWEMcF8qJDsQ6kNm4NrkXwis=
Subject key identifier: 31:A0:15:5E:A6:99:42:10:3C:E1:A2:A6:DD:F0:E8:AF:76:9F:EA:37
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 019856EBD6B7F02F26A1714F8735DDAF21B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 05C6
Signing time: Tue 29 Jul 2025 16:02:33 +0000
Manifest this update: Tue 29 Jul 2025 16:02:33 +0000
Manifest next update: Wed 30 Jul 2025 16:02:33 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: pGS3bXehljsc1QjOAL+LMZTXZW0NpfRh2j5AegFDUbg=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 16:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:d6:b7:f0:2f:26:a1:71:4f:87:35:dd:af:21:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Jul 29 16:02:33 2025 GMT
Not After : Jul 30 16:02:33 2025 GMT
Subject: CN=31a0155ea69942103ce1a2a6ddf0e8af769fea37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:c2:42:da:f8:f4:06:f3:6c:dc:b0:2a:0a:
97:0a:fb:ce:ec:67:4a:2e:d5:ef:29:9c:d3:22:f2:
95:8f:74:c3:1e:af:31:83:c4:43:32:38:b2:d6:b8:
4a:8e:71:bf:9f:84:26:f4:9c:16:3d:40:ba:5e:4b:
04:db:b5:00:ac:97:6d:02:04:f7:17:0d:d5:25:ab:
01:79:5d:bf:9a:4e:a2:80:8e:60:f9:00:74:e1:89:
5a:6d:8d:38:55:1d:06:30:d0:f5:0d:59:a2:04:cc:
89:f3:41:7e:0b:3c:39:5b:f9:b0:cf:6a:21:0c:f0:
cb:df:1c:9e:55:40:7a:e5:81:de:86:70:0d:bc:c7:
77:3e:8f:ec:8a:be:a7:45:68:2e:24:cc:5d:82:32:
16:c6:0d:b8:4b:4c:5d:b3:79:34:2e:73:bd:af:c0:
4a:22:a5:c0:4a:2a:e7:5d:4f:e6:da:4f:62:37:3d:
9b:88:64:92:72:ad:04:6c:27:26:a7:4b:e7:7d:73:
9f:60:d0:d7:07:19:2f:75:84:66:d4:70:ff:c2:66:
3c:ef:92:5f:97:51:5f:98:ad:d9:af:8e:9a:17:40:
c2:85:b5:f6:53:2a:e1:8b:37:0b:18:66:3a:35:02:
73:24:46:0b:c4:62:fb:db:5f:6c:70:d5:92:a5:17:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:15:5E:A6:99:42:10:3C:E1:A2:A6:DD:F0:E8:AF:76:9F:EA:37
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:86:bc:7c:f9:c3:2c:22:11:1a:bf:5d:60:22:d5:41:9f:1c:
54:88:29:f6:b6:e8:d1:be:f0:44:7e:ee:9a:4a:e3:30:97:da:
23:fb:36:bd:4a:ba:84:da:d8:80:3b:79:e7:f2:e4:4b:de:29:
8f:50:53:82:63:9d:16:71:61:a9:50:09:aa:57:a2:b2:f0:ba:
2e:cc:64:a2:26:ea:08:e0:e7:fb:f5:41:4f:a4:98:75:6a:6b:
02:a3:4c:b7:fc:4e:8e:98:f4:18:25:07:b9:13:65:77:a9:c9:
95:2e:5a:e3:8f:f7:e1:83:b4:2a:96:a1:d1:13:37:0c:3d:ee:
91:d4:f0:01:82:3e:76:78:cc:fc:38:64:bc:10:1c:55:50:df:
35:eb:e5:9d:3d:99:54:e1:93:4c:2a:0d:50:d5:84:10:cf:09:
e0:65:0a:4e:40:03:56:1f:6a:3f:58:8c:bc:9d:37:c8:92:28:
38:d3:2d:d3:c0:76:eb:88:ca:94:9b:1c:e1:f0:2a:9c:21:0c:
cb:45:da:bf:5c:59:8d:6a:04:63:f0:b9:02:9f:c4:25:d0:26:
8a:62:70:4e:b4:1e:a8:39:d8:43:1d:27:fc:bf:b6:3e:de:0d:
d0:2f:ed:36:34:02:0b:da:cd:75:84:22:43:67:80:6e:da:d4:
24:c7:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:09:06 2025 by rpki-client