Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: e6W78S0VHSu3PRI5QXN8aXX4zMXFMYXqFNqG+6VXEu0=
Subject key identifier: E5:4D:5F:23:3F:E7:62:C8:CB:1D:80:D9:55:27:01:A6:6B:83:D1:1A
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 01983CF3787DE480A5203B7FDBBDAA06685E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 138F
Signing time: Thu 24 Jul 2025 15:00:45 +0000
Manifest this update: Thu 24 Jul 2025 15:00:45 +0000
Manifest next update: Fri 25 Jul 2025 15:00:45 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: M+gELtseRK65YNy7I0SFvwHwTvGV0EAna6v1HIPAWeY=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:f3:78:7d:e4:80:a5:20:3b:7f:db:bd:aa:06:68:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Jul 24 15:00:45 2025 GMT
Not After : Jul 25 15:00:45 2025 GMT
Subject: CN=e54d5f233fe762c8cb1d80d9552701a66b83d11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:29:98:a2:5e:c1:91:b4:58:af:7c:9a:36:
91:19:73:0b:be:0c:4a:ae:bc:55:46:8a:42:6e:a7:
89:9f:10:b8:42:64:b7:46:8a:db:6d:2d:e3:d5:f0:
84:bf:17:8d:c1:1e:49:45:cf:50:75:9e:9d:98:d5:
d6:de:d5:a1:f8:b6:3d:37:f8:73:94:4c:18:22:85:
2c:80:06:49:5d:1d:f4:05:81:e2:f0:05:3e:a1:b6:
af:69:44:dd:a4:25:4c:37:21:9c:5b:9f:29:4f:35:
89:2c:51:ba:d7:12:29:42:ab:be:70:8a:a2:fc:c5:
8a:9a:b7:93:37:f8:66:cc:12:4f:4a:4b:6c:56:47:
ae:34:69:21:ac:ac:f6:26:a8:e8:e5:e3:30:16:96:
6d:a0:0f:ff:8d:74:19:21:e2:4b:6b:d2:9f:6d:96:
5c:49:d2:39:6c:a4:83:50:21:96:b4:ed:ec:68:92:
b3:e0:77:eb:04:89:7c:23:53:b7:d5:90:fc:a0:d4:
09:35:0a:48:a4:e9:20:7c:6d:d2:6a:5e:dd:ae:c9:
00:03:78:6d:d1:72:d3:25:64:db:46:e8:fd:b7:f3:
28:8b:18:01:d9:38:2f:c0:74:f3:1d:00:56:8d:b8:
2d:1a:d1:75:44:15:15:fc:5b:5d:fe:38:63:23:01:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4D:5F:23:3F:E7:62:C8:CB:1D:80:D9:55:27:01:A6:6B:83:D1:1A
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1f:02:ad:18:3d:66:64:65:ce:6f:53:e9:62:8b:41:21:5a:
87:1b:15:23:af:5f:ca:f0:31:bd:4c:30:15:c9:b4:45:0b:a2:
6f:06:0c:a6:07:d0:4c:57:7c:8b:03:88:d3:52:a5:9d:2f:06:
3c:f7:2e:b9:e8:38:62:7c:32:48:d3:51:2d:f4:8d:fb:7d:bf:
51:1a:3d:e2:76:05:e8:55:61:d8:a7:ec:35:91:62:8a:fc:a3:
c2:3c:3d:13:8f:23:ab:a8:99:ec:ed:ff:d2:ba:63:d8:d5:c3:
51:e4:c0:29:76:f0:69:0b:81:c9:95:72:4b:cf:16:00:e4:9d:
50:fe:7e:02:eb:45:36:45:5a:a8:f9:ec:cb:5a:ca:fd:82:4c:
bc:db:96:14:ec:fb:ac:58:75:5b:64:0a:3d:31:7c:f8:71:0c:
e1:60:1d:f7:a2:4e:37:54:48:15:d7:0b:6f:a0:31:b3:83:b8:
6e:4b:c2:89:4c:aa:78:20:97:05:16:cd:22:87:cb:ee:fe:9e:
ac:72:06:63:00:49:23:cf:ee:32:66:5b:b3:1a:24:09:12:da:
73:7a:2a:88:f1:6f:c3:e2:c2:1a:3e:0e:33:be:65:4d:5f:1d:
66:19:c8:ca:b1:e3:3a:49:1b:6b:1c:5c:ae:69:ed:d9:c2:c9:
70:f9:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:12:47 2025 by rpki-client