Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: XZmlXYSTcqXqYIST0flZB5Kjwckiu3HDqZ8dExgYISs=
Subject key identifier: CD:22:F3:35:59:36:26:33:B1:6F:6A:E3:F2:92:0A:9B:85:8A:65:28
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 0198578F119AAE677DCBD0496F5146343E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 07CD
Signing time: Tue 29 Jul 2025 19:00:50 +0000
Manifest this update: Tue 29 Jul 2025 19:00:50 +0000
Manifest next update: Wed 30 Jul 2025 19:00:50 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: jM1HsLPEghoHGYlpJio09GJzWYTCaIXDF6/DHhvCqto=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8f:11:9a:ae:67:7d:cb:d0:49:6f:51:46:34:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Jul 29 19:00:50 2025 GMT
Not After : Jul 30 19:00:50 2025 GMT
Subject: CN=cd22f33559362633b16f6ae3f2920a9b858a6528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:c2:36:d2:a8:07:8e:a7:9c:05:f9:fa:33:
90:6f:ef:1f:93:fb:00:e5:36:aa:9a:37:7e:83:4a:
db:7e:ad:4f:5b:a8:b0:02:a7:f3:ec:e4:9c:6c:26:
97:63:35:a0:c2:a9:ab:38:a1:77:3b:d7:6b:31:9a:
0b:5d:30:0b:72:2e:10:0e:b4:04:29:26:2d:32:f6:
ac:48:3c:c5:af:1e:0f:81:f1:09:92:a6:cb:e6:18:
32:88:67:fe:4d:af:83:5b:55:3f:44:41:ba:59:e5:
96:9d:b2:58:80:be:05:3b:01:e5:a2:7a:35:b7:c4:
df:a9:db:17:5e:c7:a7:fa:2e:ce:c8:ce:96:5c:40:
a6:9f:c1:07:89:1b:3f:cb:04:75:d9:31:30:f4:79:
6d:8f:ab:3d:06:03:76:b2:68:14:20:14:e5:71:3c:
94:e0:6e:6e:10:d4:6a:8e:14:b5:c2:cf:9c:fd:1d:
84:4b:76:64:a0:ef:90:cd:ec:5d:e6:2c:5d:a1:b2:
3b:79:89:bb:05:fc:92:97:0a:52:f8:b1:72:08:9f:
41:a5:9e:f6:06:25:8f:59:9d:e0:93:88:73:cc:8f:
a4:a0:65:a1:37:10:18:f2:7d:ba:ff:ec:f1:f5:a8:
db:85:e5:69:6d:57:5f:be:46:7b:e9:6e:df:27:ae:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:22:F3:35:59:36:26:33:B1:6F:6A:E3:F2:92:0A:9B:85:8A:65:28
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ad:cf:64:2b:63:74:91:d5:22:a5:19:b5:20:15:7a:28:3f:
04:31:70:11:c2:b1:e2:6d:85:95:20:b9:86:75:03:45:0d:03:
49:dc:d5:cd:ec:59:97:f1:e0:c8:25:08:cf:0c:81:c3:28:f8:
a9:e1:6b:fc:0d:82:fb:08:ee:f3:89:da:87:04:a6:3a:30:64:
da:2b:1a:ea:91:30:b2:45:43:53:af:ee:d7:0e:8f:8c:49:9f:
e4:b5:6b:b1:c4:7b:92:0c:47:95:a3:02:39:ff:31:5e:d3:2f:
6b:1a:77:eb:9c:e7:85:e3:fa:1b:a8:1e:d4:ab:6e:16:49:e8:
97:77:06:90:6a:d6:b4:a1:fc:bd:20:a0:e5:a5:b1:52:ff:f0:
c1:7f:9f:d8:58:56:05:34:de:d1:57:f3:94:b6:c4:f9:a5:ac:
14:80:8d:d7:ba:66:c2:47:77:76:69:74:9e:79:29:12:4e:f7:
f7:74:34:86:e5:5c:9a:be:5a:1a:8a:85:d3:c3:b5:75:0b:63:
52:eb:e0:10:30:b4:68:19:10:3b:4b:de:aa:97:3a:11:9b:81:
13:75:20:14:45:18:81:15:00:f4:c9:74:c8:85:3d:10:52:fd:
92:47:63:5d:d0:3a:51:85:5f:dd:0d:3d:32:c4:18:c2:d4:84:
43:5d:0f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:39:51 2025 by rpki-client