Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: 17aBR4yQsxI7K9wWyArNYZ3MjHTIT5zz1mJkwV3q3OI=
Subject key identifier: 4B:60:40:15:47:6F:A9:75:BB:C4:7E:D3:3D:75:BC:7D:7D:6C:BE:45
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019848F7147A9E2BAD80A5292135FE6D4B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 23:00:08 +0000
Manifest this update: Sat 26 Jul 2025 23:00:08 +0000
Manifest next update: Sun 27 Jul 2025 23:00:08 +0000
Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: SbF0sidXt1a5K2uSLmt5dWO4vyO9jxlEEyrgJ/kX1so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:14:7a:9e:2b:ad:80:a5:29:21:35:fe:6d:4b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Jul 26 23:00:08 2025 GMT
Not After : Jul 27 23:00:08 2025 GMT
Subject: CN=4b604015476fa975bbc47ed33d75bc7d7d6cbe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:91:6b:28:b3:77:a0:90:67:98:fa:b3:ee:
1a:84:a9:c8:ac:f4:ce:26:07:d6:9d:22:63:be:03:
ec:87:12:ac:b7:d9:0d:aa:a1:77:72:bc:6a:61:c2:
48:4a:34:bc:fa:5c:8e:71:c3:f2:b4:c9:7c:0c:5f:
4b:bf:99:54:fb:a3:75:25:8c:9e:b4:96:c3:54:4a:
7d:c7:98:85:cd:df:a1:33:f6:d8:79:94:d2:ef:e8:
ff:b7:70:c6:47:45:dd:ba:37:b8:26:b0:7e:1e:24:
c8:ee:96:70:e3:ee:91:19:08:9e:8e:99:df:9e:25:
96:2d:a2:f7:09:17:a4:5a:57:93:3b:f8:72:1e:00:
2c:70:44:0c:e2:d0:4b:f6:bf:b6:67:af:94:22:fb:
16:7a:75:29:c5:aa:7b:4e:7d:f5:79:ff:c2:93:f6:
18:db:35:1c:38:f6:1f:63:6e:83:a8:82:7c:f6:d5:
b6:b5:36:7c:f1:43:96:bd:34:a5:8a:72:45:e8:53:
fc:58:1a:3a:92:fd:e2:6c:c7:32:15:91:4c:35:ba:
a0:46:12:26:02:48:e3:17:86:45:14:0c:0f:bb:a9:
f2:f4:26:0c:c3:0f:ed:4a:86:ec:6f:49:f9:72:fc:
13:d5:a1:db:69:fe:40:63:45:30:47:84:dd:14:49:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:60:40:15:47:6F:A9:75:BB:C4:7E:D3:3D:75:BC:7D:7D:6C:BE:45
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ad:10:95:9e:e1:05:36:e3:d6:17:c9:d3:13:4e:f8:c6:ea:
1a:fd:41:f9:45:c4:af:73:8c:1a:f0:67:02:b3:bb:35:6c:ff:
b5:49:62:49:ff:ec:36:df:64:ca:bb:40:fc:8d:4d:dd:93:5a:
0e:66:98:28:ce:86:db:10:17:9b:24:50:de:70:fc:42:e9:1a:
a1:18:03:c0:7a:36:b9:ac:24:fc:3d:16:6d:93:66:2c:04:e0:
a8:86:18:98:fc:71:b7:fd:91:6d:a5:95:5c:fc:a9:f8:78:71:
d7:42:99:99:41:4c:e1:91:41:4a:24:ed:ba:bf:a6:1e:45:ba:
77:ab:32:01:e8:37:61:c5:b9:87:bb:83:05:61:b8:f8:b9:92:
32:4e:ce:5b:80:a0:46:66:8e:c0:1c:15:24:64:5d:38:57:3e:
2b:71:94:5a:c3:43:ca:93:63:09:77:15:58:0a:e7:e8:82:f9:
24:b9:ec:ba:f8:0d:36:60:3b:2b:76:d2:53:08:a2:37:b8:60:
fd:7a:b5:fc:c8:e1:55:37:21:00:f4:7a:f2:12:e1:45:21:3b:
ed:ae:83:c3:d7:29:08:d4:78:93:bb:92:bd:a4:68:45:30:20:
a8:1e:b7:58:63:13:0c:fa:e6:8c:ef:bc:6b:c8:9e:fc:b8:77:
d2:a2:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:35 2025 by rpki-client