Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier: VfFkfqcVDw9sDKUDXPMyH9I6dIQD4NVCTVZK/cjZb7U=
Subject key identifier: FC:BB:52:82:3A:A2:88:5E:B2:42:47:46:9B:04:5A:3D:49:01:D8:3E
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 01984A0A4EC52A3E5F8ED3E3065FEB73CC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:46 +0000
Manifest this update: Sun 27 Jul 2025 04:00:46 +0000
Manifest next update: Mon 28 Jul 2025 04:00:46 +0000
Files and hashes: 1: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: lI//gQy29f0A318ImOU6ihwWArxmHnwcA29v0zAj01s=)
2: Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa (hash: 4Yb+dRFpkkMPfeWzASwoM5NrRtcERhjg7Yl8jCZxXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:4e:c5:2a:3e:5f:8e:d3:e3:06:5f:eb:73:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Jul 27 04:00:46 2025 GMT
Not After : Jul 28 04:00:46 2025 GMT
Subject: CN=fcbb52823aa2885eb24247469b045a3d4901d83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:85:a2:16:c3:32:b7:08:27:18:0e:e3:b1:
72:d8:8e:9c:6e:47:6f:70:b4:b1:0e:45:1c:d8:f0:
8f:46:cb:10:e3:be:f9:aa:32:5d:b6:b2:ef:17:00:
33:c5:2d:cc:72:d6:9c:6c:34:73:24:72:74:50:8f:
62:b7:fe:90:02:23:ab:ba:e1:65:cb:92:95:1e:80:
7d:2a:89:2a:aa:2d:06:98:04:fd:6d:d6:40:c6:38:
0a:de:b2:c0:1a:ec:a4:6f:7c:4f:4c:e2:9b:29:16:
03:b1:cb:fc:f4:e9:4c:08:4c:e5:55:68:b7:fd:11:
fb:01:b0:fb:f9:99:f2:79:f2:b5:ab:91:69:23:e8:
ba:03:5a:88:b8:8f:40:d6:2a:80:2b:59:1f:c9:9f:
06:64:f4:30:54:d7:c8:8e:8d:79:ff:b2:00:fb:dc:
c5:77:36:fc:08:56:81:b6:ff:f0:9c:f0:f8:da:3f:
b2:61:e5:35:02:2b:85:6d:d5:77:14:cd:f8:8f:46:
21:42:d2:7a:d6:48:77:76:89:9d:15:18:42:39:d6:
7c:21:e4:08:6e:6d:09:da:70:03:7f:c3:ec:52:3c:
32:a9:40:a7:10:a3:26:8f:cb:0a:1c:82:04:a0:11:
02:66:77:b0:83:94:bb:70:82:80:73:3e:09:bb:54:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:52:82:3A:A2:88:5E:B2:42:47:46:9B:04:5A:3D:49:01:D8:3E
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5c:00:94:0b:7c:b2:e1:81:9e:1c:4a:c7:65:ab:f9:d8:31:
ce:2e:ac:b6:85:64:79:9f:b7:ee:ed:f3:75:74:80:02:c6:fe:
ba:b5:97:1e:27:c1:3d:f1:a3:65:23:0c:22:3c:61:00:d7:d8:
2f:c5:35:bb:c3:01:6f:ca:65:88:87:d6:07:36:1d:cd:ce:41:
c8:6b:fc:57:09:0c:15:83:86:cc:28:52:06:92:d6:4e:de:37:
6e:58:11:cc:3f:e7:39:dc:9c:8f:76:d3:f5:c3:ed:39:ec:fe:
e1:78:86:d2:f6:4b:90:9f:91:1d:55:81:b3:b2:82:30:01:6d:
7e:a0:f5:e2:90:41:9c:18:1e:1d:f8:40:4e:f9:79:48:ed:ca:
ee:31:0d:dc:c4:fd:3b:82:17:dd:4d:6d:c9:92:39:a5:13:88:
3d:d8:74:fe:c9:a3:28:3d:92:3f:ad:5b:8d:9b:e7:9b:e4:1d:
36:49:89:f1:ea:91:75:b4:ce:9a:e4:c1:ef:01:3f:0a:de:4a:
03:2a:71:4f:20:98:2f:70:e3:04:64:95:a7:96:b1:68:ce:5b:
8e:03:94:ad:72:03:17:99:5f:8d:65:c5:79:de:96:43:59:d7:
1d:1f:d1:d5:ab:6b:da:04:b3:23:2a:bf:32:15:ab:dd:6b:50:
d3:be:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:39 2025 by rpki-client