Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: kB2usLl2ehzWz4U5MnHMKOndi+TIY7vOMx3G8PCkcTw=
Subject key identifier: D9:3E:D3:53:31:91:C1:14:B3:59:29:09:31:6A:B7:43:0F:AD:09:EE
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 01983CF38C6AE95E2F5AE65C3827EE3470F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 02EE
Signing time: Thu 24 Jul 2025 15:00:50 +0000
Manifest this update: Thu 24 Jul 2025 15:00:50 +0000
Manifest next update: Fri 25 Jul 2025 15:00:50 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: CQYXW51vksQfhmcgw6lKD9+4QUul1cYMHlPnB+At8WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:f3:8c:6a:e9:5e:2f:5a:e6:5c:38:27:ee:34:70:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jul 24 15:00:50 2025 GMT
Not After : Jul 25 15:00:50 2025 GMT
Subject: CN=d93ed3533191c114b3592909316ab7430fad09ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:19:1b:29:e5:21:4f:4f:76:5a:0e:3b:c4:
e2:b5:92:49:b7:3e:5d:c7:47:a4:15:f1:c7:ed:95:
7a:04:f0:00:74:0f:6b:0f:62:fd:70:6f:9d:2c:89:
f8:33:87:16:e4:fe:fe:27:e4:f9:b7:1d:07:78:44:
7c:a9:65:60:8d:8f:64:3e:3e:6c:a7:65:b7:9f:34:
af:e2:a1:d8:64:93:a3:5d:11:de:22:64:f4:c1:5f:
f8:cb:cf:e6:ea:d2:27:68:75:88:bd:5c:06:66:c3:
b8:9b:3b:9e:41:f7:c3:cc:a4:98:18:af:f7:88:00:
aa:c9:d2:ba:c5:f7:cc:8f:bc:f6:fb:6d:89:40:97:
8c:60:8f:86:33:6f:fe:c8:a4:f2:06:3b:17:2c:09:
78:de:d8:07:bf:08:75:b5:46:db:be:e1:e8:59:69:
fe:1d:71:a3:8c:e8:ec:67:ba:36:1c:74:5b:15:17:
df:ba:32:4d:2f:f4:af:f1:5c:64:ae:51:0f:a6:10:
0b:5c:0e:4a:0b:cc:a5:36:40:0b:e7:96:fc:49:fd:
04:89:85:18:1e:fe:eb:3f:2b:fe:64:5e:e2:10:ec:
0a:d0:1f:cf:c5:29:4a:ec:4f:80:2d:87:65:a3:7d:
02:42:d8:44:c6:29:2e:d5:f8:78:ac:1d:49:ec:ee:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:D3:53:31:91:C1:14:B3:59:29:09:31:6A:B7:43:0F:AD:09:EE
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:93:cb:85:0f:a8:76:00:c9:3e:73:75:5a:e7:99:74:99:da:
3b:d0:61:24:d5:d8:13:5b:a9:3f:f2:19:7d:c0:37:5d:bb:d0:
13:f3:0e:c0:5a:99:a8:58:65:6c:0c:74:4b:32:f6:a5:3c:21:
cb:ac:3b:3a:0f:b3:7e:82:16:b2:d7:61:a7:48:f8:08:49:16:
45:78:49:c2:72:5f:7b:d9:e7:cb:6d:7c:34:60:62:c9:74:55:
3e:a5:4c:ab:16:76:40:54:9f:d6:b9:8a:1a:ae:cb:32:96:fa:
a8:a3:a8:f6:50:ab:d7:1a:47:3c:3d:78:f1:58:f6:86:2b:d2:
38:e0:3d:f3:67:22:cc:f0:4a:00:02:4c:c1:1b:15:ab:fc:8f:
a2:d6:6d:ca:35:bd:19:94:2b:d8:6a:7b:c6:e6:c9:7f:80:e5:
d0:e4:f9:aa:46:98:51:a7:a6:65:fd:00:a8:ff:b0:75:a5:1a:
9c:d2:90:b4:dc:99:0b:41:72:e6:5a:3a:af:ff:f3:14:fe:c0:
a7:58:a5:cb:85:56:32:1d:08:b8:a4:7e:a7:0e:25:97:ab:2c:
84:4c:98:ad:0d:ee:ed:42:4a:e3:e5:07:fe:cc:f1:02:0e:17:
4a:52:85:80:46:fc:fb:5d:2d:07:63:5b:78:63:eb:50:0e:d8:
52:27:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:14:25 2025 by rpki-client