Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: QOfj7SkCfGRv19DSApAm5O0gSWFV3WulHjn3NrjvVN4=
Subject key identifier: 77:60:DB:1E:75:06:6E:0E:97:98:D2:30:9D:3B:48:12:2A:51:3B:65
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 019844E3FFD42F94422C89C59A8EB09E632C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 1083
Signing time: Sat 26 Jul 2025 04:00:49 +0000
Manifest this update: Sat 26 Jul 2025 04:00:49 +0000
Manifest next update: Sun 27 Jul 2025 04:00:49 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: vQoC+Z8mePXVaNoR5At16zdIK0CV9UpF1iyw7kxqwZo=)
2: TrfKChON90CRCXVKGdWD_lFGLCU.roa (hash: GFMm+kc1nJBxOyEj3z/q6lfVZK3yETv8yRHloXoAgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:ff:d4:2f:94:42:2c:89:c5:9a:8e:b0:9e:63:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Jul 26 04:00:49 2025 GMT
Not After : Jul 27 04:00:49 2025 GMT
Subject: CN=7760db1e75066e0e9798d2309d3b48122a513b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:47:f6:71:88:bf:5d:b4:61:c8:b3:3b:bb:
d7:1f:07:7d:b9:46:5f:69:5a:56:b0:2f:5e:4b:df:
42:a9:0c:4d:cf:e3:30:cd:e4:0f:a2:c2:d5:d7:92:
92:fb:b1:2b:8e:8f:c3:14:b2:b6:7f:3d:b4:cf:04:
26:fb:9a:39:c1:cd:71:5a:87:d6:99:f0:b8:8f:0f:
20:1d:5e:90:ff:23:68:5c:f6:1b:7b:dd:cb:57:35:
0e:cc:e7:fc:b2:ff:d0:61:48:1f:3b:1e:c1:15:59:
1a:30:73:5e:7f:19:da:b2:69:54:17:ae:b6:ec:b8:
2f:9d:32:36:9b:2d:5f:91:f4:b6:2c:04:88:a3:6e:
35:b9:c6:e4:af:07:88:da:c0:39:fe:42:ed:89:da:
e3:13:f8:d4:01:4b:5b:75:95:b7:11:2f:ec:dc:5d:
b3:7b:ab:0b:f6:87:e7:76:7d:c3:ba:07:00:c5:8b:
66:98:7e:73:b6:3f:be:cc:5e:cf:c0:0f:c2:0a:c5:
55:f2:06:82:fe:e6:38:b9:99:b0:32:db:21:ca:b4:
1c:44:20:0c:e5:4b:9e:0c:97:a6:b7:0f:f0:50:58:
fc:c8:71:08:64:ca:b1:d7:f3:e3:73:61:3d:3b:bd:
e4:c7:57:49:ee:82:7f:fc:ac:6a:ea:a8:11:fe:9e:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:60:DB:1E:75:06:6E:0E:97:98:D2:30:9D:3B:48:12:2A:51:3B:65
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:33:f0:d2:94:23:bc:25:6d:6f:d3:56:1e:19:75:ae:48:
21:b9:bf:b9:e8:57:2c:03:10:d6:77:67:3f:8b:92:f8:af:d6:
1a:aa:a4:89:90:1c:1b:44:7f:0c:ae:cf:db:a6:6c:38:29:85:
f7:2d:c9:37:80:68:48:aa:e0:d6:dd:2a:e7:bb:04:35:79:e8:
10:80:64:b6:6d:d7:d6:de:19:7d:6a:1b:06:45:62:c7:70:18:
30:7d:71:f4:d3:43:96:2c:06:67:dd:54:c0:2e:dd:a5:9b:84:
68:79:0b:ae:a9:b7:a1:a6:7a:8b:a2:55:93:03:78:de:32:a7:
f9:21:e1:26:e6:d2:08:a5:99:53:71:d0:d8:f6:a7:2c:dd:bd:
f7:97:ad:49:28:76:81:96:8e:7b:63:74:76:bc:fb:dc:1f:38:
1d:8c:9e:aa:90:1a:29:a0:57:1d:b9:f2:b2:72:c7:8a:4a:f0:
7e:85:4e:4d:d2:e3:16:be:97:45:6c:9e:1b:61:14:f0:d3:0f:
6b:92:e9:ba:a7:a1:68:ba:c5:14:9c:8a:7f:6c:32:60:8a:f3:
86:94:07:5d:2f:b5:15:48:e1:48:0d:60:ef:66:41:af:58:1e:
a7:c0:50:37:5c:a8:03:50:58:38:df:ee:6b:ea:17:e5:0c:2d:
ff:77:6c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:07 2025 by rpki-client