Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: FeHZy54YZ+cOfa5VQnjjEhLFrJxffPTeHL9EsxEcsQE=
Subject key identifier: 50:8F:03:EF:48:72:3C:13:D3:F7:CB:A6:8A:44:D9:5D:B0:91:94:4B
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 0198439A7E705805DB68383B539F6C3A56DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 02AC
Signing time: Fri 25 Jul 2025 22:00:55 +0000
Manifest this update: Fri 25 Jul 2025 22:00:55 +0000
Manifest next update: Sat 26 Jul 2025 22:00:55 +0000
Files and hashes: 1: Fg4gfGthOyzcFXfxEYyjwrss7as.roa (hash: mWUv12QovIjIHXpuDNAMlgedx6+BQ3vMWaiHrsA7+3A=)
2: Q5e6g1WUMRG4cL4aNZtJqqD_-yo.roa (hash: T3aZ91YVxRUkDJ96e4vMqo7oCynEMTZ2Xb8h0pZbGMo=)
3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: ynZXhguLt4CPLRrK1+Akglc2TxfXT8qc+tYBOfi0b0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:7e:70:58:05:db:68:38:3b:53:9f:6c:3a:56:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Jul 25 22:00:55 2025 GMT
Not After : Jul 26 22:00:55 2025 GMT
Subject: CN=508f03ef48723c13d3f7cba68a44d95db091944b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:46:33:41:b1:21:22:62:7f:75:ed:62:7d:
de:d7:3c:db:bf:77:cb:13:d7:ff:94:91:93:f6:f8:
5f:ab:f4:d6:f7:9a:16:d4:e2:10:49:35:93:51:02:
ea:8e:26:c3:ac:55:17:60:67:ea:fa:5b:4b:39:10:
ce:dc:d5:72:1d:43:fd:0e:bf:91:29:5b:e4:ed:2b:
54:cc:3d:af:ec:bc:e9:2c:2d:9c:c4:a6:49:cf:ad:
c4:49:42:d7:e2:b5:24:2b:25:5b:29:ee:6c:64:c3:
ae:42:d0:0e:68:50:d8:e7:00:9d:a3:5e:74:54:74:
a7:6d:33:ec:79:ef:3c:be:a4:e5:90:78:ef:8e:83:
c1:dd:c4:8d:83:f8:e0:a7:5a:07:6b:6d:9a:42:55:
2f:5f:e7:7e:57:42:9c:a0:04:24:11:73:9d:4d:6e:
53:dd:ff:4c:16:fb:d5:9b:3c:94:87:51:d8:b9:73:
26:c8:f5:ae:f6:52:06:96:ed:ed:25:53:be:3e:05:
d1:6e:a1:c1:b2:73:79:4f:05:50:77:45:0e:a4:ab:
35:6e:de:02:3e:07:63:41:73:76:07:df:41:51:f7:
a8:42:e9:8b:45:c2:4c:02:8c:c3:34:e6:99:4b:d7:
b9:4f:f1:1b:3f:f9:7b:12:4f:8e:5b:d4:c5:9c:f6:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8F:03:EF:48:72:3C:13:D3:F7:CB:A6:8A:44:D9:5D:B0:91:94:4B
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b5:0b:04:77:de:4e:a3:c0:32:d7:94:d1:e0:6b:3e:cd:2c:
0d:1a:38:b4:64:3c:7b:96:cc:74:b3:3a:f5:c0:c0:c0:74:e4:
5c:4b:51:7b:86:c7:53:bd:d0:e7:b2:63:4a:d7:f3:af:7a:12:
09:70:a9:40:59:26:aa:91:c2:05:32:4c:e4:c9:12:16:54:77:
3c:dc:a8:2e:25:93:9a:08:1e:66:32:d6:af:9e:8d:d4:81:34:
fc:cb:8c:73:b1:9d:4e:f9:cd:be:47:c1:ba:b9:a9:cf:3a:d9:
9d:9d:ac:69:17:d3:33:d0:db:e0:34:16:dc:a1:a0:6e:b7:40:
2f:25:7e:4a:9e:ba:eb:8f:c9:ae:1c:24:9d:c7:29:fa:e4:bd:
2c:d1:be:41:0c:3c:6a:4d:36:45:b6:00:29:0c:22:b1:64:70:
c4:90:91:c5:8b:db:0b:54:2c:83:a4:72:4d:44:a9:fa:d7:c7:
6c:6b:1b:0b:83:ac:9d:8e:4f:ad:67:12:7c:c5:b7:72:92:f8:
56:e3:21:fd:9a:33:3b:9a:1e:18:7e:50:5f:52:a3:67:82:30:
7e:ce:3c:e0:5c:f9:ce:39:ea:21:de:1c:fb:44:62:03:38:67:
1c:37:67:a9:30:f4:03:38:4c:32:a7:92:ae:b2:2a:da:79:3c:
bd:a2:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:32 2025 by rpki-client