Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier: kV82JGIty5oxJDAoU7QMcZejbsBg/GilDxn5GGY1lOY=
Subject key identifier: DE:33:EB:A5:F8:7D:0A:5A:08:BE:3E:01:5F:E3:85:93:81:98:31:70
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 0199221E4E1CAC3433BCA95555A8698AF3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number: 13C7
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: soT7qJdsqK2mTeBFB2RBnvMb39U1g8NEroQkm0n5E6w=)
2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4e:1c:ac:34:33:bc:a9:55:55:a8:69:8a:f3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=de33eba5f87d0a5a08be3e015fe3859381983170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:14:6c:13:ae:1a:a8:fa:2c:80:45:11:fa:
a6:02:ec:b2:43:ea:76:e3:d2:96:ce:c1:7c:9f:af:
c2:78:8b:7f:85:d1:fb:a3:2b:bc:29:43:fe:86:21:
c9:d0:ed:55:eb:be:02:ac:6a:4a:a2:3d:c5:23:58:
bd:22:4c:92:53:b8:2e:58:65:41:2a:9a:c1:83:7d:
ad:6d:26:08:30:d2:dd:5b:6f:52:86:0b:8a:d5:fe:
3a:08:d9:11:83:73:b7:c0:e9:75:6d:72:70:4e:ba:
2a:5d:4b:a4:72:65:89:30:3d:f1:77:b5:39:37:23:
a9:f6:8c:71:bc:f7:3c:ea:c9:85:e5:b7:16:f0:b5:
35:49:78:fb:43:f6:4e:17:5a:55:86:a2:73:ec:7a:
f3:31:88:97:39:6b:82:6b:f3:3a:fa:de:e6:c7:7c:
6f:6d:be:26:f5:ff:41:12:7c:fb:93:3f:ce:c6:17:
ea:0b:a5:3f:ee:40:c4:1c:3e:a3:07:f1:6e:c4:88:
5a:0f:74:d7:dc:39:8a:e4:08:43:e3:f4:68:0d:99:
ba:68:a4:2a:79:31:95:7d:df:f8:1e:1d:3c:32:de:
8b:6d:4f:4c:9d:30:27:74:9d:9e:b8:fe:f7:76:46:
e9:17:46:88:44:7c:2a:5e:fd:0a:20:92:66:50:01:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:EB:A5:F8:7D:0A:5A:08:BE:3E:01:5F:E3:85:93:81:98:31:70
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b3:f1:c1:c0:40:5b:a5:3d:0c:28:f2:ee:ec:f0:e1:e0:5e:
13:0e:40:9b:31:63:fd:79:5e:bc:38:4a:04:8a:8b:2f:4e:7d:
c8:38:f3:c9:a4:a2:fb:ac:f1:9d:46:25:42:ca:0d:a1:a2:3c:
27:60:a6:4b:e3:37:ad:57:62:7b:d3:17:1f:11:b7:3b:8a:22:
f7:5f:4c:89:3e:97:b7:6d:5c:4d:44:7d:c4:c2:c3:b4:2c:00:
01:78:03:52:83:a4:76:44:bd:a5:72:4e:c6:66:79:bc:f8:30:
85:a2:80:95:e5:2f:8e:19:e5:8c:41:32:d4:46:92:3b:62:7d:
48:a1:2f:97:2c:cd:be:32:84:5b:fa:a2:1b:1d:4a:ab:91:ec:
55:e9:e7:17:76:ba:fc:6d:e3:88:57:b9:09:2c:51:d3:ff:20:
ac:8a:94:85:71:9c:ed:45:4a:eb:77:8f:d4:be:49:47:fd:13:
e4:65:1c:b6:82:a1:4f:ea:fc:4a:eb:ba:a7:c9:a7:99:94:37:
9c:60:81:51:d6:12:b5:b3:52:9e:d0:81:85:8b:12:60:a0:c3:
b3:77:62:b0:92:9d:2a:56:28:1f:90:d2:1d:22:2d:6f:70:c1:
47:15:02:fc:f8:cb:f4:d8:a1:d0:67:9b:ae:5a:0e:e8:50:fd:
c5:f9:5a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:10 2025 by rpki-client