Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: x83KCyxFsKMTJmBdWk7TBGiT2W8CYmk3uv6USFF7lJk=
Subject key identifier: 0D:2F:92:CF:D2:E3:D5:31:1A:7D:B0:71:AC:62:19:FB:50:9E:E7:5D
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019835A7B74C8884E080ED50D2767DD86BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0A27
Signing time: Wed 23 Jul 2025 05:00:40 +0000
Manifest this update: Wed 23 Jul 2025 05:00:40 +0000
Manifest next update: Thu 24 Jul 2025 05:00:40 +0000
Files and hashes: 1: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: wXuXBlTEW1WQAjAUi83EkJ3qmCU9/QeBQKrOXaEWhdk=)
2: VYdNzCUiezNHp2ipnAESpOT2GMI.roa (hash: eS/GCbx9AxDlVVMe7mfu+B9lQ77SLCep89Ufdacjmo0=)
3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:b7:4c:88:84:e0:80:ed:50:d2:76:7d:d8:6b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jul 23 05:00:40 2025 GMT
Not After : Jul 24 05:00:40 2025 GMT
Subject: CN=0d2f92cfd2e3d5311a7db071ac6219fb509ee75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:4b:cd:8e:99:43:e6:a7:39:47:ec:59:28:
a1:80:8a:69:09:8c:64:a6:c7:60:3c:4c:5f:09:e3:
3f:76:76:f7:61:28:fd:5a:8c:f5:92:8e:12:fd:7b:
35:04:68:e1:36:45:e2:36:bd:73:55:c7:cc:c9:25:
17:8c:ee:ac:0e:c4:10:36:e8:fc:25:de:5f:7d:95:
91:58:23:5f:0d:24:d9:c0:94:64:de:80:2d:f2:6b:
ee:db:fb:a7:43:27:e5:70:76:b4:54:74:aa:e0:42:
23:b4:0a:06:05:a9:7a:90:1a:75:19:bd:df:16:bd:
8b:49:8c:03:85:67:f1:4d:7f:f2:a3:8c:9b:b7:86:
02:90:8f:27:35:f5:4a:32:bc:62:5a:07:cf:12:e4:
8f:09:5f:aa:54:f5:98:ad:92:04:85:a4:e6:5e:1f:
c2:c5:85:3e:9d:a2:2b:1f:cb:a2:de:f4:8d:25:99:
6a:26:02:6d:ff:43:a0:ea:86:78:54:7f:e1:ce:7b:
46:34:61:ac:63:71:b1:d6:ab:18:82:0a:46:e6:65:
3d:06:b5:30:91:38:16:43:63:f8:f6:13:30:2d:c5:
4a:55:e6:20:b8:43:af:d0:87:b0:93:7f:29:df:52:
eb:24:50:c5:09:97:2b:bf:a3:40:6c:66:dc:1e:67:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2F:92:CF:D2:E3:D5:31:1A:7D:B0:71:AC:62:19:FB:50:9E:E7:5D
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:d3:c1:bb:ca:ea:ed:50:e1:50:e4:d9:81:c1:9e:30:0d:
97:f3:cd:21:48:9a:fb:fd:a7:2c:56:c9:24:17:ec:e8:cc:47:
5a:74:07:0a:68:ec:d8:4c:46:67:61:2c:56:85:12:e3:d9:66:
fc:90:dd:95:78:0f:ad:93:24:09:5d:9f:94:fd:5c:41:6c:8e:
f4:6f:aa:19:e1:7f:0b:2c:66:50:1b:99:a7:77:14:8b:af:74:
2a:42:f6:3d:4f:0c:3e:f8:e6:5d:af:76:d4:ea:16:f2:71:72:
4a:53:ab:f5:9b:ee:4e:7f:53:9a:d5:20:a5:bd:e3:94:32:59:
8d:0f:cb:83:ab:d3:cf:63:94:20:03:e3:5b:4b:be:4e:21:6c:
00:1e:e3:aa:1a:5e:dc:df:64:74:6c:95:99:13:85:b4:27:d8:
63:70:5d:ca:8a:0d:d5:a7:f6:75:84:d1:7d:b4:6d:61:d0:6d:
b4:26:5b:1d:11:a3:30:ea:7d:79:3f:3a:a9:fa:23:1c:ba:34:
87:87:83:20:9a:f5:ca:90:20:c6:8a:6f:48:4d:61:3d:ed:56:
98:0e:f3:6a:fa:12:10:35:97:9c:ef:29:5d:85:a0:76:6b:ef:
61:79:16:a9:88:fb:fc:2f:7e:79:9f:9c:b6:b0:28:cc:f8:54:
c4:2c:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:59:36 2025 by rpki-client