Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: wTnOM/H8qi+wUTPNez4XN0xMY6V40F1shTmx2wiwkBE=
Subject key identifier: E5:45:84:A7:85:87:FA:EC:3E:D8:B6:0B:0B:51:35:8F:8E:1E:46:63
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 019847E4ABC76A81EFF1143B877376589FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 18:00:25 +0000
Manifest this update: Sat 26 Jul 2025 18:00:25 +0000
Manifest next update: Sun 27 Jul 2025 18:00:25 +0000
Files and hashes: 1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: +INL4CXIzmrSMC1WVNjdadHBiVL1B+iaaRzk5hDYZMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:ab:c7:6a:81:ef:f1:14:3b:87:73:76:58:9f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Jul 26 18:00:25 2025 GMT
Not After : Jul 27 18:00:25 2025 GMT
Subject: CN=e54584a78587faec3ed8b60b0b51358f8e1e4663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:82:3c:4c:23:76:8b:9b:21:b9:8c:74:50:
86:0f:88:e5:08:a4:9e:09:2e:5e:d0:e4:b1:14:fd:
68:47:d8:36:79:42:7a:6c:73:db:57:cd:00:5d:40:
33:8e:d7:21:2f:a8:3d:ba:08:5f:a6:77:d4:07:48:
76:d1:fb:48:af:39:38:49:2a:70:b1:7c:ea:0c:ee:
61:f1:2f:3c:48:ac:0e:4e:0a:89:07:b5:92:94:4a:
55:70:a4:0d:2c:43:ea:38:da:21:b9:ba:bb:8e:b5:
77:4b:c4:6a:f0:9b:be:28:ae:94:7b:77:f8:b1:7d:
2f:b6:a8:7e:29:60:24:d6:b9:23:3b:54:75:c5:0f:
9b:0f:aa:cb:bb:20:d0:ed:a2:12:ca:f2:44:fb:3e:
40:81:f0:79:41:71:d2:21:c0:96:6a:00:40:a1:36:
ca:f0:35:d3:be:99:a6:ce:d2:c6:cd:7e:4b:fe:88:
60:4b:51:7c:69:f0:38:ce:19:33:49:5e:68:0d:81:
bb:76:1c:0a:25:cb:3c:60:ad:e3:4c:8a:49:ca:d1:
9d:12:df:98:9b:b2:3d:dc:a9:a0:e3:5a:6e:00:21:
ae:3c:8c:df:d8:95:79:0b:3a:5d:a9:1e:17:66:a7:
89:33:a3:5d:e6:45:8c:da:4a:84:c0:17:c7:aa:7a:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:45:84:A7:85:87:FA:EC:3E:D8:B6:0B:0B:51:35:8F:8E:1E:46:63
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2e:8d:fa:d1:b4:0f:e1:93:06:48:c4:05:8a:c0:73:39:ca:
e0:bf:7b:dc:52:c2:be:a1:d4:90:ae:b7:32:7f:fe:b7:b4:dc:
5f:7a:8f:55:d9:b5:1b:77:77:0e:30:54:b2:8d:af:52:8a:97:
9c:83:8e:a4:3c:ce:bc:6c:7f:cf:2f:7a:9a:4d:90:23:41:9d:
20:3d:92:45:44:69:11:02:13:58:a1:7c:2e:13:be:83:51:84:
24:6b:5c:cf:78:6d:24:ea:de:16:8c:ae:3e:38:7d:ae:9d:72:
ad:51:2b:32:4f:9d:1c:0e:e6:b3:6a:21:a0:0f:9f:ee:02:2d:
27:eb:47:6b:1d:0e:7f:4f:4b:23:c1:1f:24:fd:2a:f8:87:c0:
11:b0:de:cf:18:e9:c6:2e:00:27:2c:2b:74:38:b1:34:e2:37:
34:a5:08:0d:9f:01:32:c3:5e:6b:18:0f:fb:36:ca:d1:c4:de:
c8:83:bc:af:75:ca:6e:5f:41:22:71:22:0f:6f:dd:1d:7c:61:
db:2a:0b:65:23:e3:ff:96:fb:1d:89:d0:d7:e6:11:2c:24:80:
76:b0:fc:e0:85:a0:16:69:77:7c:9c:86:13:85:32:8d:a9:6e:
6d:ea:ab:fa:55:c5:95:13:d3:4b:2a:8a:07:4a:9a:e6:5e:25:
68:35:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:44 2025 by rpki-client