Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: YH8WJjx0IfjiN//NY8qQYt93PP+YK81Qd3DoHukbOAo=
Subject key identifier: A9:31:50:11:1A:91:1C:B4:15:8E:23:EF:D8:77:FE:DB:04:AC:C8:AA
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 019849653F168FA3341304DD428EB7394524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 1592
Signing time: Sun 27 Jul 2025 01:00:28 +0000
Manifest this update: Sun 27 Jul 2025 01:00:28 +0000
Manifest next update: Mon 28 Jul 2025 01:00:28 +0000
Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: jj78T0Fcz4yOD5r0cE85ZJm/pk0g0G8PvokIs58HN2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:3f:16:8f:a3:34:13:04:dd:42:8e:b7:39:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Jul 27 01:00:28 2025 GMT
Not After : Jul 28 01:00:28 2025 GMT
Subject: CN=a93150111a911cb4158e23efd877fedb04acc8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:d4:22:a6:62:de:5c:04:7d:cd:99:22:8d:
66:b9:c4:bf:5e:68:e9:15:c7:bf:3e:38:da:fa:3b:
31:99:9b:9c:33:2e:6c:6a:c0:a1:b1:74:9e:5a:f8:
d6:4f:40:03:38:6f:50:3b:70:55:4c:28:b5:86:3e:
16:0a:a7:cb:4b:8b:53:92:a0:e4:12:5d:2f:7f:40:
8c:56:2a:94:db:66:42:80:40:61:c9:9c:98:78:ee:
d6:4a:57:4b:3d:ee:e3:44:71:92:6d:ef:6f:f9:d0:
d6:6e:9f:18:4f:fd:53:17:37:57:8a:16:0f:54:a0:
25:bd:a4:a4:6a:ae:99:c8:16:8a:f1:d9:cb:de:af:
66:d7:4c:27:be:82:a3:b1:d5:17:14:1d:5c:69:77:
15:ba:58:ca:85:b8:79:82:ef:5a:bf:30:bf:89:27:
0f:32:59:3d:18:b2:3d:9c:c2:17:84:a1:d4:53:07:
a0:6a:28:68:00:5f:07:e0:3f:f7:d9:80:d1:20:be:
f7:7d:0f:5b:03:a0:84:3b:df:71:fe:3d:76:bc:cc:
9c:8c:4b:3a:53:e1:dd:83:af:12:e1:fd:e5:51:b9:
45:8e:fc:67:d2:6e:38:b6:c4:f5:fb:2b:31:d1:f0:
d4:1d:67:b5:7d:df:6a:19:a0:d2:c8:c5:95:01:1f:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:31:50:11:1A:91:1C:B4:15:8E:23:EF:D8:77:FE:DB:04:AC:C8:AA
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2b:dd:78:2d:89:9c:9a:05:0b:1b:e4:41:ec:c1:78:6a:73:
66:71:15:26:f8:24:df:50:24:7a:39:52:ad:33:9e:0a:78:bb:
77:85:b1:6c:fc:ee:f7:8d:ed:36:5f:bd:65:dd:46:db:71:8b:
00:fe:1e:15:a2:d5:92:67:1a:4e:b1:0b:99:64:62:97:ea:4e:
9e:e2:38:92:21:07:ec:d3:93:96:20:5d:19:59:a8:c7:14:99:
73:4b:0f:c8:b9:56:ca:65:da:4e:9c:cc:e9:0e:6c:76:b3:a3:
dd:5e:b7:22:a3:47:93:8c:4e:f6:35:9d:23:a8:92:63:26:9a:
71:d9:8d:c8:c4:65:29:e2:89:c6:f4:53:65:f5:f3:d5:a1:ba:
9c:f6:87:9a:23:b3:01:90:fa:56:54:69:f2:5c:24:ad:81:de:
95:58:58:46:50:d8:b5:10:e9:f5:f3:f4:9a:63:b8:1d:49:aa:
6f:fb:cd:7d:da:db:fd:b2:02:c0:e0:4d:7a:2e:b1:ca:7e:33:
2a:c6:54:e5:c6:3c:67:a2:2b:8f:97:4f:ee:62:59:c8:83:e5:
31:5b:83:5a:34:ef:a2:a6:8b:8e:ec:e7:a7:2f:4b:cb:05:72:
2b:98:48:26:b5:38:f2:04:b9:d0:d3:df:90:89:56:c1:b3:29:
07:27:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:04 2025 by rpki-client