Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
File: 1QylITQTxwqeg7R6gqfEV53UwZY.mft (raw, json)
Hash identifier: yTrhnxpPMjnS88O8wmH/0DeILyowXwRO8aGFcLBSVMc=
Subject key identifier: E8:56:77:9A:7C:A3:F6:F6:13:A9:7E:E5:D6:2C:E1:0F:AB:F0:9F:EF
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 0198541F80C79D2E64064FA8A8A865626B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
Manifest number: 0853
Signing time: Tue 29 Jul 2025 03:00:07 +0000
Manifest this update: Tue 29 Jul 2025 03:00:07 +0000
Manifest next update: Wed 30 Jul 2025 03:00:07 +0000
Files and hashes: 1: 1QylITQTxwqeg7R6gqfEV53UwZY.crl (hash: 7DGSFXidSC6G3VIaw+A6QtwjkrIoMQ3zSmlSvIfV9Uo=)
2: _qLxIOi7VmVEBLaS1YixdxXiwBA.roa (hash: 0p2ssxxIHIoQau1gQDFigWlgz8Te2D1iMIcwAH/P3eQ=)
3: xxT8grXnmq40HsKuG1Zwf8qr5yM.roa (hash: Q9jgD1xIS5+5fspqYSArTtS7aFho5oJiLf020/LBelY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:80:c7:9d:2e:64:06:4f:a8:a8:a8:65:62:6b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Jul 29 03:00:07 2025 GMT
Not After : Jul 30 03:00:07 2025 GMT
Subject: CN=e856779a7ca3f6f613a97ee5d62ce10fabf09fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:e5:48:4f:86:4f:c1:b8:92:4a:18:41:90:
51:73:ae:31:47:68:3b:72:1d:52:f5:2a:d1:ba:13:
1d:63:76:fb:5d:ae:9e:cb:f6:87:30:2d:f9:1d:fa:
ce:fe:fc:cf:13:dc:5c:95:48:e8:2a:ec:9e:13:50:
a8:37:9c:f1:c8:d8:4e:de:b0:a6:32:be:c4:8e:14:
42:1a:81:d9:52:9b:84:4c:ca:9a:96:c4:f8:a4:65:
97:01:9e:e9:ab:19:ed:7a:0d:ad:49:cd:3c:31:41:
29:aa:81:65:5a:e9:1d:9b:f6:f9:3f:a6:a9:9f:cb:
84:c6:fe:2b:8b:63:a2:e7:72:64:47:8c:be:36:ee:
da:5f:00:b1:f4:5d:4d:8d:a6:ba:f6:41:d1:8f:b0:
fc:fe:cf:3e:c8:e9:9e:ce:0b:4b:3f:26:19:1b:cc:
fa:c3:ff:c2:da:9c:76:44:19:8e:93:b0:13:bd:a6:
3d:de:5d:56:28:40:69:6a:6b:e0:2a:d1:0d:a9:d2:
4a:ad:4f:08:bf:54:82:e0:29:00:3c:2c:91:b2:85:
ad:1a:9b:2b:df:33:a6:a6:7c:0a:ed:4a:76:2c:66:
dd:6d:a1:d5:ae:35:56:7b:30:fa:12:ba:e2:5a:39:
11:ce:6e:30:8c:33:5f:14:00:1f:6f:65:27:db:b5:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:77:9A:7C:A3:F6:F6:13:A9:7E:E5:D6:2C:E1:0F:AB:F0:9F:EF
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:40:c8:46:7e:bc:39:fe:6b:96:89:c7:d6:65:dc:8c:ba:8b:
f7:6c:b1:25:4c:cd:6e:f9:02:dd:6c:21:a5:32:d8:ee:56:b3:
42:28:93:b2:77:a2:bd:34:d1:5c:a5:a1:85:00:63:a5:3b:ea:
39:d4:28:b2:cb:ab:dd:2e:d2:ab:f0:74:54:dd:52:92:f3:b7:
eb:22:d8:44:d5:58:e3:b9:be:f1:df:de:bb:13:f6:d6:fa:e1:
4e:63:e8:39:db:c5:d0:13:02:07:6b:22:a7:0d:2c:22:e3:73:
35:1a:f5:e5:d7:7c:90:c7:19:8a:7a:fb:61:8c:b3:76:1c:7f:
8a:a3:31:96:28:d4:a3:04:f1:b9:1b:22:9d:6d:69:29:f2:4e:
3a:2c:81:c4:09:8b:b0:d0:48:71:c3:5b:f9:2b:90:59:5f:c3:
3e:12:a8:46:ac:52:84:e2:6d:33:a3:21:c5:5c:ea:f4:fd:c7:
07:86:ff:04:bc:69:ab:a7:f1:0d:71:d4:2f:6a:6b:4b:63:43:
e7:69:df:24:ad:0c:22:5b:cb:0b:89:ec:05:09:64:2b:0f:a5:
5e:cd:75:fb:d6:f7:fb:3a:10:db:93:a3:4d:4b:fc:c1:44:f7:
66:a2:92:8d:1d:c4:93:b2:05:ee:b6:a5:65:c2:fc:68:a0:f0:
40:4f:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:54:36 2025 by rpki-client