Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: F0GaI9fmi+y0O77u8w8SoG3KQb8GY4pi8YJ+sjvSTO0=
Subject key identifier: 3E:F2:F6:F4:8E:C6:91:B9:93:3F:00:6C:44:44:E3:DD:AC:87:A9:B4
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 01983DD007B8BDB914FB6D05B8493115573D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 15FB
Signing time: Thu 24 Jul 2025 19:01:40 +0000
Manifest this update: Thu 24 Jul 2025 19:01:40 +0000
Manifest next update: Fri 25 Jul 2025 19:01:40 +0000
Files and hashes: 1: USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa (hash: W3xrS1zgc7QMM+ux8ilDAtn6lUWxhEYKoHwrzSB4Kb8=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: IZewvcq3cPO+LMaAQ9hJnnghdkhgjp6VZUX3mpsS6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:d0:07:b8:bd:b9:14:fb:6d:05:b8:49:31:15:57:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Jul 24 19:01:40 2025 GMT
Not After : Jul 25 19:01:40 2025 GMT
Subject: CN=3ef2f6f48ec691b9933f006c4444e3ddac87a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:b4:f7:2c:29:72:fc:37:e7:eb:a3:cb:ca:
4e:e5:e4:62:79:59:e2:ca:71:6e:a1:10:fa:a0:e8:
78:83:84:15:55:74:2c:4a:5a:95:cb:43:ef:0a:49:
1d:4b:66:31:a1:52:e7:58:08:44:46:b0:e4:41:8a:
44:d9:8c:f8:61:d1:f1:14:91:ae:6b:72:c3:c0:34:
13:a4:d0:bb:52:9e:10:42:f1:d4:19:aa:58:34:c0:
60:0e:f1:ac:ae:b8:f0:75:f8:10:4d:89:01:63:c7:
d7:55:87:03:e8:c8:3f:d9:fd:a4:9f:da:ab:a4:bb:
1d:e3:ac:c1:75:44:d4:46:f2:58:fe:b6:7b:cc:b4:
98:9c:22:0e:fa:82:7f:b3:a3:ed:27:13:89:27:c6:
c0:98:b4:13:2b:9b:b2:e2:8d:b3:0b:63:37:f2:c1:
f0:fb:08:46:ab:bb:89:3b:4d:1e:a7:ec:2e:84:2c:
9b:b1:31:8d:a6:de:81:ac:05:ee:bb:46:87:f2:90:
d9:3a:4b:a1:bf:f3:14:3c:7e:62:fa:a7:20:ef:40:
69:ad:b4:b3:cb:a5:85:fa:29:fb:80:5c:84:65:f0:
b9:a7:3f:0d:8e:cc:47:1b:39:51:78:c1:60:8e:02:
d8:dd:3d:28:20:f2:3c:c0:82:5e:06:b5:0e:b3:0a:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F2:F6:F4:8E:C6:91:B9:93:3F:00:6C:44:44:E3:DD:AC:87:A9:B4
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:4a:a0:52:91:dd:d4:4c:49:02:32:f1:08:4d:91:58:d3:
26:1d:fe:d4:31:e8:9b:97:43:62:52:f9:d7:cd:89:0b:5b:b4:
d6:5e:f7:5d:e6:39:43:1d:52:64:8b:f2:91:d2:3f:7f:4b:e7:
d4:14:a2:48:ee:79:4c:85:b6:59:b2:a7:54:ff:b9:1c:65:9e:
dc:38:78:01:b1:28:4b:24:23:cf:04:dc:a0:25:cb:1a:5f:aa:
f6:9a:cc:b5:a4:f1:6b:c9:6f:35:57:64:ff:a6:fd:7f:b7:e2:
81:5c:ef:59:13:6d:c2:f9:5a:5c:d6:c4:ba:dc:47:7f:9f:52:
1a:de:2f:32:52:1e:50:62:77:00:75:0e:b2:7d:2a:11:20:0b:
aa:2b:27:ee:7b:e0:de:62:5d:c8:00:fd:0c:20:14:e2:c1:44:
f9:c6:bc:e2:0f:7f:dc:b2:ef:bc:5f:5e:dd:3d:d9:30:e9:31:
af:30:c7:21:18:bc:08:1d:1b:93:b1:69:bc:dc:96:58:a2:32:
cd:5c:19:84:6b:79:ee:e0:1f:80:be:5e:aa:76:63:7b:73:a1:
4a:b2:a7:c1:d4:52:60:b3:0a:94:57:53:a2:c0:eb:0b:91:09:
a5:a6:b8:18:0e:dc:20:fd:e9:55:f1:25:f7:9d:cb:6f:f2:2f:
d2:60:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:29:59 2025 by rpki-client