Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: MlphQWtAj2eufL1UzH55D/es+jnfOq9O0+VbkDM1OOU=
Subject key identifier: 40:0C:89:7D:7C:12:37:55:A7:53:66:E0:6D:74:7E:A9:4D:4E:5B:C9
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 019848F7A0DAB454C1BCDE49EFCD3654CA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:44 +0000
Manifest this update: Sat 26 Jul 2025 23:00:44 +0000
Manifest next update: Sun 27 Jul 2025 23:00:44 +0000
Files and hashes: 1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: zGl9gU8oCTe6IkJoTihQzhJoaQ+b4FXnLRnmPfEeUXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a0:da:b4:54:c1:bc:de:49:ef:cd:36:54:ca:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Jul 26 23:00:44 2025 GMT
Not After : Jul 27 23:00:44 2025 GMT
Subject: CN=400c897d7c123755a75366e06d747ea94d4e5bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:78:e3:a0:3e:da:f4:5b:9a:70:d3:8e:21:
da:a6:af:89:47:e2:8f:e5:3c:8c:10:9b:e5:99:a3:
ea:4f:d1:7b:f2:6a:2c:d3:64:d1:bf:ad:a7:1b:28:
a3:27:4a:c9:17:fa:6f:49:18:3d:49:5e:84:a3:6f:
d2:36:93:d3:ba:e9:d9:c4:de:a0:0d:b3:57:ba:47:
3a:b1:7b:ca:ea:51:dd:9b:56:b5:c7:6d:67:f3:01:
84:3f:75:ef:bc:9c:78:ce:db:3f:0e:4c:14:a1:1f:
ac:12:3d:05:bf:f4:03:60:fe:fe:4a:84:3e:8c:f0:
93:e3:d9:22:41:7e:ca:67:93:e1:76:7d:4a:dd:5f:
c1:ec:da:b1:20:f8:52:4b:5d:f6:e9:60:6a:51:dc:
2a:da:9b:ca:7b:fe:90:cb:62:ce:0a:99:ce:3d:8d:
be:c3:49:ee:5b:d0:e0:3a:58:63:f8:a2:0e:0c:94:
28:38:f8:79:89:67:80:0f:84:69:88:b8:77:46:d6:
d2:3b:b5:1c:a2:ef:6d:a9:d0:cd:e5:a0:e3:c2:03:
76:96:ee:56:7b:05:fc:a5:bc:67:77:26:d8:e3:32:
a5:34:47:e2:70:db:59:6e:9f:ee:7d:7f:6a:d9:f2:
49:ea:21:d8:94:b0:a2:74:b3:ba:3c:39:a6:85:01:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:89:7D:7C:12:37:55:A7:53:66:E0:6D:74:7E:A9:4D:4E:5B:C9
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b7:60:55:c5:b6:52:3b:fb:65:47:55:49:1a:10:09:46:82:
77:ba:ec:ec:cc:96:26:fe:4c:27:45:a1:92:7e:21:44:13:4a:
8c:3c:2f:24:8b:60:5a:32:a7:e8:c0:c8:5d:3d:9f:f7:70:bc:
11:15:a6:7d:9e:b3:bd:2b:38:99:44:1e:6f:c6:50:0d:d4:15:
e1:ea:bf:b4:2d:a6:c2:d4:50:b5:8e:b4:3c:43:23:fd:7b:b3:
fb:91:da:12:19:b1:3b:e6:e5:13:b8:26:62:9f:f4:0b:98:a2:
16:1a:02:dc:65:44:2e:b2:fb:f8:20:58:3f:55:d2:90:1a:1d:
36:2a:e2:d4:13:41:ec:7c:c7:bc:0a:bb:d0:3b:17:c5:ab:6d:
f4:36:4c:3b:df:ec:8c:dd:01:b1:86:bb:0d:04:40:b4:9b:ad:
66:c3:d1:c7:66:a0:fc:b7:d0:b4:54:fc:aa:df:78:66:2b:09:
b0:bd:03:b9:e3:8b:d7:02:a5:d2:b4:1b:79:c7:25:59:58:98:
3f:e3:80:94:ed:ba:a6:13:4f:ee:3b:c5:86:1e:61:76:92:2b:
73:bd:bb:0c:79:e7:da:27:0c:5c:af:f8:cf:08:b3:67:46:4d:
a9:3f:68:3e:6c:4e:9b:4b:c6:c0:0f:4d:9b:02:9b:a2:69:f7:
9b:47:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:34 2025 by rpki-client