Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: 8gWVqc3HW3SuDGKz9oH6yk3N+ML/HhJJhMK0UjfZVrg=
Subject key identifier: 7A:52:C1:AE:9E:08:DB:5C:38:66:C6:74:53:72:F8:F8:22:E5:F8:EE
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 0198496526321BB009F82AD3AC0AF4ABDD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:00:22 +0000
Manifest this update: Sun 27 Jul 2025 01:00:22 +0000
Manifest next update: Mon 28 Jul 2025 01:00:22 +0000
Files and hashes: 1: IB8EvDjqi0Zn77LVje6PtC4puP0.roa (hash: u2mlhpsMyeaxfE7W43n81b02+Y9NeSYXL6jdArkfvzQ=)
2: KhZxCrijEh6I5tUjdOiH08SDAlU.roa (hash: d7J/i0PvapKbq1ZXNQfO7tB9y3eyZqeGbgRInR/S46w=)
3: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: xMZbdp/mQPq4hmrdACcgCTIgWd8O8IPys1lrltkpSD0=)
4: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:26:32:1b:b0:09:f8:2a:d3:ac:0a:f4:ab:dd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Jul 27 01:00:22 2025 GMT
Not After : Jul 28 01:00:22 2025 GMT
Subject: CN=7a52c1ae9e08db5c3866c6745372f8f822e5f8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:4f:79:1a:a9:aa:5d:28:a7:ad:1e:72:70:
45:3c:e3:ba:80:d0:e5:5a:2b:a9:67:5f:97:21:de:
b9:23:62:78:cf:ce:21:f8:87:3b:2e:fc:8d:3b:83:
68:1c:8c:df:6f:3f:32:81:a8:51:24:7d:c4:e2:d9:
84:47:7d:54:7b:a1:7b:cf:26:4c:94:6d:d6:db:26:
08:25:a0:08:ce:11:b2:e3:2f:e5:42:70:f4:2d:c7:
14:33:7c:b4:3f:5c:5f:e4:1b:22:43:0e:c9:44:56:
f0:f8:3b:ff:b7:93:7e:65:70:f4:7b:df:dd:c5:b6:
8d:35:f2:95:e1:88:d0:18:ae:17:a7:fe:32:8d:65:
80:8d:32:7d:2d:67:8d:4c:fe:df:d4:f1:da:2b:33:
0e:2a:f2:d4:ba:19:c5:78:c0:78:6d:60:e4:b2:01:
e6:34:99:30:e7:c0:75:4f:03:91:42:c1:53:33:e7:
77:97:fc:42:5e:11:29:34:72:0b:3c:7a:3e:3e:4f:
75:4f:08:19:e4:a5:11:58:33:8a:80:08:67:05:a3:
4a:db:96:98:f9:8e:51:9d:3a:cc:dd:9e:a0:28:b2:
2e:8f:8e:50:93:33:2c:bd:0f:05:2b:5e:78:8d:dd:
37:95:df:c7:bf:12:cf:dd:cb:cd:a2:ad:7f:88:2f:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:52:C1:AE:9E:08:DB:5C:38:66:C6:74:53:72:F8:F8:22:E5:F8:EE
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:42:86:26:10:47:53:c3:bd:82:31:40:86:5d:fe:b1:74:40:
2f:44:e3:3f:6d:12:95:88:fe:0e:f8:38:61:52:be:ae:d5:89:
ee:54:26:9e:2f:6f:a2:37:d8:b9:43:58:b0:39:d2:1a:69:ba:
b9:2a:e0:7c:9f:8d:e8:58:cd:2c:9f:17:78:b0:a4:7e:42:9d:
ad:59:4a:7d:a0:1d:95:23:88:fc:2f:8b:af:5a:92:f9:33:05:
ff:43:77:ea:4b:fe:40:8f:1b:44:e0:6b:23:b8:85:82:2f:13:
a1:44:17:82:41:bd:ac:2a:fc:0f:70:3c:8d:1f:a4:88:72:ef:
ef:ba:d8:dc:f4:28:f6:83:05:be:d2:39:0a:4a:d8:a8:1c:94:
81:1a:31:f9:0e:16:01:8c:23:05:75:10:0e:f4:3f:f4:f0:49:
9e:da:ae:78:b3:e2:21:69:74:dc:15:c3:9c:47:d5:8d:0a:3f:
cc:b2:f5:bc:d7:3a:80:cc:6d:70:e8:60:c9:c6:b5:aa:7a:f3:
f0:22:8c:cd:b2:bb:a1:8b:19:ef:74:6a:a3:fc:e9:15:84:2e:
43:85:f4:5f:54:b9:b2:d9:09:01:1f:f6:6b:20:ef:78:1e:c4:
de:29:0a:f3:9e:dd:93:72:ac:97:76:29:a2:32:36:c4:c0:c6:
70:26:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:53:16 2025 by rpki-client