Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File: _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier: 3TCHfJtbe8SYDAEP/fUiXKniKcLSYr7ca30PKl0khyw=
Subject key identifier: A8:63:9A:30:8C:A6:CD:04:91:62:CB:BE:F5:F6:22:7B:DC:35:7B:D5
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer: /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial: 01984A09F5ECD339480BD98229C7EF6D6D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=)
2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: mRrCAZnqlBFmbgFURS/Tm9GW+49BEG/kB0LAm2ZIyEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f5:ec:d3:39:48:0b:d9:82:29:c7:ef:6d:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=a8639a308ca6cd049162cbbef5f6227bdc357bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:e0:c5:e3:f0:5b:92:82:60:e1:d6:a5:ff:
f4:c4:bc:78:b7:0a:c5:21:4b:64:ae:87:7e:41:a2:
9c:62:36:75:15:1d:39:20:b8:53:0d:e3:ae:b2:06:
5d:4c:29:45:ca:74:c0:40:84:59:02:dd:aa:2b:bb:
28:45:2a:23:44:07:f0:c5:ef:92:45:fa:73:79:2b:
f0:be:6a:3a:2c:05:e4:a1:b9:8c:b6:fd:d7:9b:a6:
3f:95:c3:8b:95:68:1b:80:cc:c0:cb:6b:5b:fb:6a:
5c:8a:29:07:2c:50:45:df:e5:b1:9a:e1:af:73:8e:
fd:aa:b3:3f:76:86:77:23:fd:69:77:e3:9a:95:86:
aa:1c:92:ba:d7:84:64:aa:23:b1:f4:42:7a:a3:f8:
7f:dc:32:1f:95:8a:2a:43:cc:b8:f5:b1:76:fb:74:
0b:85:96:37:87:be:3d:77:64:d0:e7:2c:46:b7:1e:
c0:cf:39:56:fd:91:0c:ac:fe:2f:61:9e:b5:f5:73:
20:05:7e:57:e7:78:0a:34:c4:bf:c6:23:09:bd:bf:
00:16:91:39:ef:61:60:95:9e:e9:c3:ee:01:17:83:
7e:e4:18:df:f3:a9:36:2f:5d:b8:c4:15:d6:3f:54:
cd:c4:ed:c4:ce:7c:95:53:95:22:d7:81:b9:46:1d:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:9A:30:8C:A6:CD:04:91:62:CB:BE:F5:F6:22:7B:DC:35:7B:D5
X509v3 Authority Key Identifier:
keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ed:05:88:5a:83:4c:43:f8:5a:77:fc:1a:ae:d4:ba:d8:a9:
d9:4b:37:a1:3d:35:08:2f:8a:48:98:24:2b:15:7b:28:d4:b0:
d8:5b:eb:ba:c5:f7:36:96:ff:70:75:a8:a4:de:93:a4:c0:bd:
07:8f:44:d3:5d:fa:1e:9b:af:f3:2f:c7:05:ca:2e:d9:2a:5d:
6e:0a:b5:e8:ab:e1:74:76:c5:87:3a:6d:de:a2:fb:00:0d:08:
ad:ee:2b:ef:f4:3b:10:b8:02:41:d3:55:2c:fb:39:b6:70:3d:
96:8c:71:69:fb:ad:ba:e2:88:69:7b:b3:f7:9d:ea:27:1d:3f:
80:fc:ce:94:90:40:17:34:9f:27:8e:f6:f4:71:68:e7:80:86:
32:74:f8:12:8c:5d:9b:16:23:cc:28:fc:69:89:c3:8a:31:b5:
ff:f7:09:54:42:32:03:29:c6:48:85:eb:b9:ff:13:c7:27:65:
89:78:c8:f3:a1:45:11:29:ea:a1:a3:42:c4:ce:ee:3f:b8:87:
8d:08:aa:4e:92:18:89:ec:3a:52:91:38:d4:a0:0e:2d:3b:b0:
2c:06:11:68:a2:8f:c0:a3:10:12:e0:4a:ce:38:1c:35:71:fc:
bf:ee:9b:8d:b3:3b:9f:ed:6a:16:89:c3:d0:97:bd:1f:dc:98:
34:5a:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:19 2025 by rpki-client