Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: iOAgny0E3pwSOiLTK+w1JLw4h3irUqHVz11f2QCdy48=
Subject key identifier: AE:7D:80:E4:2C:C3:79:C2:31:0B:C0:20:8B:1E:66:28:1A:59:03:66
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 01985833F9597C0C694AAA5466FDBFE85BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 0454
Signing time: Tue 29 Jul 2025 22:00:57 +0000
Manifest this update: Tue 29 Jul 2025 22:00:57 +0000
Manifest next update: Wed 30 Jul 2025 22:00:57 +0000
Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: 02iuKLcSpmwD1E4jo/Y15LdhjmShCByBwVyJPoMBuV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:33:f9:59:7c:0c:69:4a:aa:54:66:fd:bf:e8:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Jul 29 22:00:57 2025 GMT
Not After : Jul 30 22:00:57 2025 GMT
Subject: CN=ae7d80e42cc379c2310bc0208b1e66281a590366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:33:73:2e:32:47:bb:54:0c:d0:24:b2:ce:
00:ed:e2:5b:5c:9a:d5:5d:2f:bc:ee:3c:e3:0d:83:
41:f4:56:6a:b4:3b:e0:62:9c:d9:1c:23:74:dc:4a:
7d:90:9d:c7:90:fc:6b:68:9a:4f:4c:20:b9:41:58:
ea:9e:58:b4:d1:72:0a:0e:aa:a0:3c:3a:55:6f:93:
79:45:a7:49:37:57:e3:9a:7f:d5:81:6d:b7:78:7b:
10:17:74:6d:c9:f5:ba:d4:eb:f8:3e:25:bd:53:8f:
99:53:26:fc:0a:ff:76:34:22:35:8d:7e:fb:fc:9e:
ec:06:e7:19:c2:55:ac:a9:a7:06:e5:0f:a1:a4:32:
32:d9:8a:7b:1f:de:7a:4e:36:d3:16:f6:c6:a7:f1:
42:17:0e:8b:35:c7:d6:19:08:ae:08:34:94:fd:43:
df:96:69:e5:d0:1b:56:eb:7e:19:37:0f:a8:0f:84:
ca:c3:5b:0a:ac:70:36:e5:6f:21:18:a6:3b:4c:22:
1d:38:e6:2d:a5:15:fa:c3:8d:b1:d2:61:ef:87:d0:
23:00:21:68:ec:2d:d5:dd:d7:09:ee:b7:75:a8:6d:
33:01:b5:f3:d3:06:45:55:2e:76:04:98:45:77:c9:
3f:56:97:73:68:36:61:82:7f:2c:c9:95:99:8b:ec:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:80:E4:2C:C3:79:C2:31:0B:C0:20:8B:1E:66:28:1A:59:03:66
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9e:1b:ba:0c:46:e8:12:2c:c3:8f:62:7d:2e:77:70:8e:f4:
5c:58:06:07:64:d1:fd:e4:e4:e5:c1:5b:e9:c7:0d:29:93:92:
fe:8c:76:88:68:84:2d:67:8b:4c:2d:fe:c4:62:8f:06:d1:54:
15:e3:cf:d9:9c:25:03:21:de:30:a6:f7:b1:92:21:b7:17:f5:
f9:fc:e1:d3:48:db:be:fc:49:2b:0d:4d:f7:eb:52:e4:ee:b3:
90:fe:c2:d9:ca:9c:13:6f:6f:e2:e8:20:b2:98:f0:d5:49:80:
77:17:0f:66:92:f3:64:66:81:ad:46:98:a1:dc:cf:1d:b7:82:
a9:2b:04:16:5a:ca:d6:49:c2:15:31:8a:bf:7d:99:7c:b0:92:
4d:9f:1d:2b:3e:8d:70:24:73:b8:19:dd:4c:f8:9d:62:78:9f:
d7:22:5d:b3:6a:43:dd:df:6c:d3:8a:b3:b5:26:f9:96:b0:88:
f2:a1:1c:1d:35:09:d7:14:69:f7:5b:ad:66:7f:e0:dd:e8:a6:
7e:69:92:4f:e7:a3:aa:a4:5b:64:2d:fd:dd:de:a7:93:f2:8f:
39:f6:59:36:c8:5a:fd:89:f7:90:02:a8:70:1f:09:fd:56:e2:
e9:08:45:de:b8:5b:d9:76:84:8e:de:49:a9:5e:ab:c6:03:c1:
4c:77:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:16:58 2025 by rpki-client