Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: javlI7+5BjZ+b+lg5dCaEdiN2JsqoBGtscGGMxQs3V8=
Subject key identifier: F5:86:B5:5D:60:33:E6:B4:F4:9A:C2:26:38:CC:49:20:0B:86:B9:98
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019849D33911DDBB009D6AC19BEF83263556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 03:00:35 +0000
Manifest this update: Sun 27 Jul 2025 03:00:35 +0000
Manifest next update: Mon 28 Jul 2025 03:00:35 +0000
Files and hashes: 1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: dKly89d1nhsJ6J9tcujjw6mftzUxhjTW0KSXAdkqDhQ=)
3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:39:11:dd:bb:00:9d:6a:c1:9b:ef:83:26:35:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Jul 27 03:00:35 2025 GMT
Not After : Jul 28 03:00:35 2025 GMT
Subject: CN=f586b55d6033e6b4f49ac22638cc49200b86b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:32:67:c7:0d:ca:9f:cd:e4:8b:31:ef:13:
ea:6e:1d:c7:6c:d1:86:d3:4d:fc:20:89:1c:b4:c3:
84:e3:77:c5:10:2c:6d:24:5c:ab:5b:58:a6:5b:07:
2f:f0:95:51:5f:3e:e3:c6:57:29:87:41:20:cb:62:
21:fd:03:73:36:5d:64:8e:fa:e0:4f:16:ed:e9:ed:
d1:64:e7:9f:cd:8a:e5:e4:23:2f:99:32:10:30:2c:
94:a8:99:63:7a:02:bd:cd:81:1e:19:3c:aa:8f:7a:
8a:87:bc:20:bd:5a:6b:a6:8f:2d:a5:ff:d8:96:99:
59:7a:53:9c:e4:87:36:bc:d7:c4:dd:58:8b:6b:e0:
c3:d7:ae:18:37:4f:3c:13:92:51:84:95:fe:22:a7:
4e:bf:f3:76:fd:d3:ba:50:92:07:b2:8f:8e:99:b6:
a6:a4:82:36:a8:92:83:d3:8c:d5:ec:29:ef:af:88:
86:3d:cc:35:c3:ab:a6:29:9c:69:14:a9:7f:50:94:
30:5b:13:b5:2a:97:f0:80:86:a5:2b:df:fd:f7:1c:
63:d1:64:24:aa:86:57:6b:8c:83:11:8c:68:05:3d:
69:b7:9f:3d:99:46:a9:d9:c3:63:ca:94:6e:3c:1d:
d9:80:00:ee:3e:10:ea:0a:46:fe:bd:29:a0:1d:a0:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:B5:5D:60:33:E6:B4:F4:9A:C2:26:38:CC:49:20:0B:86:B9:98
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0d:71:57:8b:a7:42:92:d0:97:83:b4:1f:4b:e5:ae:8e:3b:
e1:87:11:5f:3c:bc:f4:fb:94:67:58:d6:fe:97:f2:af:8f:0a:
e3:de:0d:88:b2:b4:f7:fa:0f:95:a0:ee:91:6a:aa:e6:39:c9:
23:81:13:6a:63:a3:07:6f:b8:20:6d:34:f7:91:86:ad:0c:99:
57:ee:a3:c8:5e:e3:72:1a:5e:24:f6:65:b2:40:56:43:49:97:
d7:6f:71:b3:ae:49:a0:26:33:65:25:9c:79:c2:78:26:a6:11:
26:df:e3:49:22:e4:b5:19:25:c1:17:e1:89:37:ba:be:83:3f:
ed:75:c6:8c:0b:21:3d:7f:ca:b4:34:03:17:74:af:52:bb:6d:
2d:91:a6:65:a9:d3:bd:e1:84:c2:aa:7b:5e:25:b6:11:a0:f7:
21:a3:8d:0e:ff:96:5b:25:c6:61:7d:55:ae:5d:c9:68:22:c4:
6b:ee:80:58:b3:8e:ee:3f:ac:e0:af:09:10:96:8b:d7:d6:0b:
c6:eb:49:7c:34:48:e6:37:6d:82:52:df:41:95:7d:65:43:a1:
6c:ee:f7:a6:04:cd:39:55:4f:22:e3:6b:a2:0a:ce:ae:6c:32:
ed:ae:08:61:62:b0:44:83:25:ea:f0:ca:97:2d:0d:0b:30:b8:
da:b2:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:22 2025 by rpki-client