Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: r//lSRugYkns/9bLzgZaXGcOgkscX95rMGfnsBp8SqE=
Subject key identifier: 79:54:3E:4A:C2:A5:C8:2A:E7:0F:3A:86:1E:F2:F2:93:AD:DB:71:F5
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019826D96636007453A879EF8BA9DCA2ECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 0DDE
Signing time: Sun 20 Jul 2025 08:00:38 +0000
Manifest this update: Sun 20 Jul 2025 08:00:38 +0000
Manifest next update: Mon 21 Jul 2025 08:00:38 +0000
Files and hashes: 1: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: CYsCPk9wAhITVOUF4qA8Ox0/nVayhxMsazqSWHnDxak=)
2: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (hash: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=)
3: pSYXiKXGXABhmANIG0Y2vhGLRUA.roa (hash: kjXcWabBcy+Nz9B+eKiIbdHIvrnXu/XwD/9ZftdegXw=)
4: uJ1wgWjtfF_PUvxzUj8noSaLQx0.roa (hash: 5K3mYspcTrH8J1dlAJJG2SBHWuIALi8AQG16SYzuq8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:66:36:00:74:53:a8:79:ef:8b:a9:dc:a2:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Jul 20 08:00:38 2025 GMT
Not After : Jul 21 08:00:38 2025 GMT
Subject: CN=79543e4ac2a5c82ae70f3a861ef2f293addb71f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:f4:95:3e:10:3d:1c:17:3e:0c:d9:19:01:
16:c3:93:5c:e4:0f:74:e0:17:c6:32:dc:06:16:76:
67:f5:da:b4:ee:63:0d:8e:79:93:70:9d:56:96:10:
30:e5:d9:ad:83:bc:49:62:b9:fd:39:16:83:4b:cd:
69:77:77:34:30:b0:0a:9d:da:f4:00:50:65:71:ac:
a4:b2:a0:69:9f:ce:00:16:b1:9d:eb:e7:e2:d0:cb:
9b:a6:20:06:dd:d3:07:50:f9:35:6e:cc:da:d5:f3:
90:e9:b6:35:8e:4c:0a:f6:f9:6f:ec:91:4c:52:be:
fa:57:64:7d:3b:c7:04:97:38:ad:02:3d:7e:fa:8e:
0e:b6:d4:8c:51:50:5b:37:a8:a3:80:24:0d:d1:05:
95:7d:38:91:dc:c8:dc:b7:f0:05:68:55:ee:06:14:
2b:fb:c6:b6:fa:45:90:48:55:72:b9:1b:49:bc:9e:
28:83:b2:dd:1e:6e:b7:00:d4:4a:65:2c:f0:c4:da:
c3:e5:b9:ff:5f:60:15:15:2e:55:a5:8d:9c:9d:75:
d2:49:78:a5:33:90:74:ed:2e:ff:8b:57:b6:8c:67:
43:3c:4b:69:f6:b6:79:2f:ae:07:af:d8:30:ae:d4:
b5:94:69:6a:44:c5:ee:7f:7e:b9:7a:4b:e3:df:0e:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:3E:4A:C2:A5:C8:2A:E7:0F:3A:86:1E:F2:F2:93:AD:DB:71:F5
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:42:1c:91:45:16:c4:e3:08:26:15:49:dd:a8:ab:3f:30:
c6:20:5f:8a:03:07:11:36:80:1d:1e:de:ce:28:7a:67:76:ef:
42:5a:f2:09:32:0c:87:62:5d:90:ac:42:ad:89:2d:04:45:87:
c3:0d:59:e2:d2:41:35:36:18:52:51:4d:97:64:c7:71:a8:18:
29:5d:59:8e:45:e6:d5:ae:bb:70:52:28:56:e0:07:55:a0:11:
f5:d6:fc:ab:09:18:88:00:b2:d1:97:e3:56:3f:85:21:0e:1b:
ae:b2:32:dc:98:3f:b7:fd:87:d9:40:76:af:8d:4a:33:e5:b2:
41:d9:0a:d8:0c:24:1d:95:c5:5b:71:1e:84:d4:b2:09:5f:c0:
92:38:1c:b7:73:74:e3:ff:0e:64:42:86:3d:0b:80:86:5f:11:
1b:14:f4:c0:ad:4b:25:27:b6:f3:65:9e:fb:69:9d:d1:fe:15:
89:e7:29:c6:44:5c:6f:52:d8:d4:1d:15:ed:06:6e:56:89:95:
17:73:a9:0e:a2:45:77:0e:9b:76:1a:c7:c3:12:97:e7:93:c7:
3a:ca:aa:54:a5:7a:2a:c4:b7:65:79:40:5b:55:ae:4e:2b:3a:
42:4f:f3:0c:49:88:ea:0b:62:34:32:f2:e7:15:75:3c:9e:5b:
47:93:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:30 2025 by rpki-client