Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: fgXlckZgwBBIcEW4tUVMf0ab753YT8zuXOCCAd7RryI=
Subject key identifier: 71:D9:B6:67:55:21:F1:9E:AA:D0:37:EF:0C:BD:CF:32:4A:4C:88:5D
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0199172D004ACC6BD3E2D7B7A269491A6518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 1679
Signing time: Fri 05 Sep 2025 00:00:49 +0000
Manifest this update: Fri 05 Sep 2025 00:00:49 +0000
Manifest next update: Sat 06 Sep 2025 00:00:49 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: eJF0CvNBzHgOz8fxmrhjPOHCzpbwF2SHEp6FIHOYaIY=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:00:4a:cc:6b:d3:e2:d7:b7:a2:69:49:1a:65:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 5 00:00:49 2025 GMT
Not After : Sep 6 00:00:49 2025 GMT
Subject: CN=71d9b6675521f19eaad037ef0cbdcf324a4c885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:37:ca:d9:9a:f1:c8:b4:67:c5:a5:d0:c5:
bc:c0:f1:7a:e9:90:3a:b4:ea:9f:ef:a5:8b:f7:28:
5d:81:0f:47:43:b0:15:a5:bc:61:b5:4d:f8:4d:e3:
fc:6e:1c:2b:cc:0d:21:74:6a:3a:04:0d:99:dd:d7:
fb:7a:a0:09:54:c4:18:39:90:ad:8e:cf:8f:a0:f3:
38:4a:e2:84:9b:0c:37:43:44:29:ff:e6:69:31:fe:
7d:bf:8c:4d:55:f3:78:15:27:80:f9:df:61:b5:31:
16:7d:a7:7f:59:4e:cd:ca:fe:33:1f:54:2d:25:fc:
58:9a:c3:1c:63:06:7c:4c:84:5f:4c:d8:e8:2c:7f:
6d:e5:63:f6:c0:bd:58:e9:db:9a:a6:dc:a2:9a:c0:
82:0a:e5:5c:d8:cb:31:09:2f:0c:dc:24:a9:17:69:
17:37:74:06:e7:92:8a:0a:d0:97:c8:31:d9:e4:0a:
09:4b:06:18:61:3f:54:8a:3d:21:19:92:d3:29:69:
3b:33:9d:26:41:96:31:2a:e6:9e:a6:c8:c8:ff:6e:
8a:48:29:d8:3e:36:df:80:4b:42:bf:6b:c8:94:6b:
85:83:c2:44:0a:89:77:a7:18:0c:29:fd:07:bd:81:
ce:be:23:6a:b5:a1:7c:28:0a:83:44:bb:af:eb:51:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:B6:67:55:21:F1:9E:AA:D0:37:EF:0C:BD:CF:32:4A:4C:88:5D
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:70:30:0c:03:77:34:74:66:2c:7e:13:4f:84:2d:af:6a:87:
ce:61:64:0f:cf:b1:4a:82:d8:b3:33:e4:be:9c:0d:89:bf:bf:
29:cf:f5:96:56:a4:0f:21:50:42:e7:66:d6:47:11:b6:6e:1f:
53:2c:29:4e:dd:0a:cc:74:0f:95:86:7a:f5:dd:95:d4:e8:75:
9e:dd:5f:01:6d:38:ad:60:7d:ee:db:85:d2:66:0a:30:10:8b:
20:3d:b4:46:2d:0c:d4:11:db:4b:a3:2a:aa:41:8a:06:74:5d:
63:d9:b2:25:12:12:f3:4c:f6:b7:a7:b7:d7:d2:2c:ee:25:87:
6d:72:10:d2:d9:6f:27:3e:dd:21:5d:8f:37:e7:b1:e5:c4:74:
9f:68:ae:8b:86:94:c2:cb:38:c3:6c:42:46:d1:17:29:22:e4:
aa:f1:38:56:3f:52:6e:4c:24:37:79:51:7d:02:37:a1:a5:b6:
0e:15:d2:24:de:15:f4:84:1e:3a:9f:30:49:a5:d8:a9:72:3e:
2e:6a:90:51:98:c8:2e:d4:33:56:3d:97:f5:d9:9a:91:c9:dc:
99:4f:2e:2f:b1:ee:92:fc:54:af:ab:88:ef:44:4e:a6:57:ad:
ba:4f:f2:ee:90:44:37:8c:e5:59:32:48:c9:06:0d:e0:b0:d9:
ee:f7:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:49 2025 by rpki-client