Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: 5hq+2xd9QIGdFEq6Vm68ck+k2I5jRc8/PsyXsfTZzTg=
Subject key identifier: 20:F6:E1:62:04:D2:45:DD:40:65:C0:E6:5C:F3:E5:0F:6A:44:78:12
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01984A40EDA21F31C0E2C6FFBA71D832873C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 1130
Signing time: Sun 27 Jul 2025 05:00:25 +0000
Manifest this update: Sun 27 Jul 2025 05:00:25 +0000
Manifest next update: Mon 28 Jul 2025 05:00:25 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: AKvIfp7xTlQxTtnQkf7O8Q0xOSMTPtarNjmdjJbc5QQ=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ed:a2:1f:31:c0:e2:c6:ff:ba:71:d8:32:87:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jul 27 05:00:25 2025 GMT
Not After : Jul 28 05:00:25 2025 GMT
Subject: CN=20f6e16204d245dd4065c0e65cf3e50f6a447812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:80:f1:f6:44:57:bb:e4:22:dd:a3:81:0e:
ad:3b:9c:d3:41:d3:b7:b9:6d:bb:69:2b:7d:7e:85:
ca:d1:b6:c3:a3:f9:b5:1d:5e:6a:5a:d2:03:2f:08:
3f:ee:fa:e1:90:76:d5:ff:76:f6:68:24:34:a7:7d:
0b:68:78:80:44:76:b3:53:52:b0:1c:75:e9:80:56:
1d:cc:a3:15:79:51:07:72:0c:8f:2e:ea:1a:35:e5:
70:0e:5b:9b:70:4b:3d:59:80:b1:18:aa:f7:99:3c:
e0:32:6e:fe:94:ae:2b:38:88:5b:15:82:1e:87:31:
04:48:22:e8:d4:e4:be:f2:d1:51:03:ca:64:1e:bd:
73:ea:11:53:3d:b8:47:f8:2d:fe:05:9d:64:b4:d9:
89:93:69:ef:94:fc:9d:cd:12:ac:7e:e5:d4:04:f3:
4b:73:2d:96:ec:09:85:05:4d:64:40:8a:58:7c:ff:
61:30:fe:86:1c:7d:c7:1c:69:8a:78:b5:ea:88:ba:
c8:6a:1c:7b:d5:fd:89:54:e2:46:d0:63:02:17:ce:
25:8c:eb:7a:89:b5:15:53:0f:d1:a2:4a:cb:51:01:
06:6a:52:8e:cc:b3:46:b5:3c:6b:ab:24:8a:b8:f0:
f4:65:e3:70:99:b5:94:60:67:e5:6d:96:cd:19:14:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:E1:62:04:D2:45:DD:40:65:C0:E6:5C:F3:E5:0F:6A:44:78:12
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c1:27:c9:39:6b:33:c2:d9:21:bd:54:5f:34:f2:a8:89:e7:
a9:9e:e1:d4:60:96:20:b8:19:d5:9f:18:2a:a0:b9:49:d8:be:
a1:30:41:66:1f:55:a9:96:77:d9:fc:03:19:25:a4:b4:a6:60:
48:02:ec:78:5c:0b:d6:15:9c:0f:99:43:76:3c:73:6a:fe:84:
f8:d4:02:2f:51:e7:c4:0b:d1:78:e0:fc:84:13:d0:66:0d:c0:
bc:d5:eb:b9:1c:82:fe:d4:4f:b9:c8:99:bf:1f:e3:3b:e0:27:
20:c1:1d:d5:ce:60:01:ee:d0:cc:1c:70:ad:aa:3e:e9:7a:97:
23:60:93:e3:2c:e6:17:d1:11:5a:03:00:ed:2f:42:66:cf:09:
30:7c:41:d6:fc:98:55:c7:14:dd:25:ac:46:a1:a0:73:70:0e:
b2:3a:f0:df:3e:d1:c6:d0:2e:d3:29:fb:d2:42:c0:91:b9:bf:
f3:a6:43:49:a6:aa:fd:99:46:a9:06:6b:ad:05:f5:14:a7:22:
4b:64:41:bf:78:2c:96:93:51:d4:12:7f:78:b3:40:18:2d:37:
35:f5:dc:f5:84:be:a3:35:d6:61:41:af:33:da:01:d8:b3:b6:
88:67:ec:0b:8d:b2:b5:7b:f7:31:fe:07:5d:cc:11:7e:59:e6:
50:04:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:11 2025 by rpki-client