Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: /JqICPlSaZCCAkgBoXuFauf4yYqFDPaDBZVZoFWdqcQ=
Subject key identifier: DF:51:59:BB:22:CE:41:CB:2D:77:3B:FB:AC:CE:5B:D9:E3:E7:0C:E0
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 01984B544740989AD6D0898E22C9A0B5AEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 036D
Signing time: Sun 27 Jul 2025 10:01:11 +0000
Manifest this update: Sun 27 Jul 2025 10:01:11 +0000
Manifest next update: Mon 28 Jul 2025 10:01:11 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: b+y36U6lARJxZpdToNAZSjscg4nkoWNp6TvreETsMx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:47:40:98:9a:d6:d0:89:8e:22:c9:a0:b5:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Jul 27 10:01:11 2025 GMT
Not After : Jul 28 10:01:11 2025 GMT
Subject: CN=df5159bb22ce41cb2d773bfbacce5bd9e3e70ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:41:76:30:4c:41:e9:b1:eb:55:b0:ff:7c:
e5:39:05:79:4e:bc:71:c0:fc:f3:c8:83:7a:67:bd:
88:ee:e0:69:00:16:9d:ed:30:8e:a6:c3:a9:93:58:
0f:61:66:ab:1c:98:ba:c7:b2:05:8c:be:66:55:23:
3d:5c:61:5c:2a:77:99:c9:aa:24:7a:0c:60:1b:79:
3b:f7:c2:78:92:bd:2c:f3:e2:f2:c4:3e:38:20:4a:
1a:66:5b:74:7c:17:02:74:2e:30:d0:75:5c:4b:de:
ac:c3:2c:67:cc:de:0e:15:d1:2d:b3:d0:51:65:4f:
cc:94:dc:83:76:fa:84:86:09:67:22:b3:02:9e:6d:
05:f5:03:6e:a2:d3:98:6e:bb:e9:0b:9c:0d:9d:7e:
e0:95:e6:68:f9:9e:ce:4d:77:3d:16:f5:5b:2e:bf:
0f:34:5a:5c:d7:50:03:52:e3:79:50:36:77:7e:c1:
92:b1:a2:69:74:5c:5b:00:08:84:2a:09:9b:d8:d1:
9c:2c:dd:6c:9b:60:a3:62:d4:e1:05:b0:f6:cb:b7:
0c:c5:df:32:b2:50:09:a4:bb:0c:63:b4:fc:30:d4:
35:74:21:d7:38:a2:57:4e:67:78:67:70:cb:5d:fb:
aa:0e:ef:d0:8d:c8:2e:47:a4:ba:51:bf:74:ab:e4:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:51:59:BB:22:CE:41:CB:2D:77:3B:FB:AC:CE:5B:D9:E3:E7:0C:E0
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cd:6c:98:90:2d:62:5f:05:7e:8c:10:c3:d4:8c:66:e2:14:
99:b4:b1:bb:64:3b:35:39:f8:d3:e8:f3:e9:e5:94:86:89:9c:
e8:80:ca:e7:f7:85:97:17:6b:3e:b4:2d:3b:f7:e8:f6:d4:32:
f6:4c:8d:5d:fc:5d:bc:6f:e5:d1:40:a5:40:70:06:da:c4:cb:
8b:e8:fb:d4:a7:60:f9:22:56:66:df:70:d5:e4:69:48:4c:32:
ca:cf:e4:a4:59:60:41:20:cb:78:f6:10:cf:80:b3:be:ab:eb:
d7:02:6e:62:85:10:ec:9a:9c:c8:36:86:01:80:ce:fd:c6:2c:
0c:87:e8:73:57:85:43:1a:c3:e8:4d:8f:b1:63:3b:6b:e1:76:
30:de:a4:d4:f1:3b:36:b9:21:79:5c:7d:1f:0f:6d:b2:28:3d:
50:49:bb:0d:bc:82:59:d8:9b:c2:d1:a3:cb:f3:e0:5b:13:44:
35:8c:c8:db:f7:67:07:f2:da:7b:2e:f1:6f:8b:b0:df:4c:a9:
fc:68:48:9d:df:04:84:48:98:6d:be:df:fb:45:de:5e:b4:f4:
1e:79:f2:3a:4f:63:a2:11:dc:0c:fb:09:e7:7e:68:32:f7:14:
cf:3c:25:dc:87:d9:e1:aa:d5:4c:2c:d4:e6:95:3e:8f:1b:a3:
8d:7c:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:43:04 2025 by rpki-client