Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: tIHr1f3dViRAb9jXuMntWl+kk8oITXMxu1QT7SdI0lw=
Subject key identifier: B6:B0:E1:9B:CA:16:23:BC:31:4A:97:B1:F2:D6:8B:B7:60:32:AE:F8
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 019922C3799F33780C542F4547FE6AFFBA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 04AA
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: MgNfHkWf6ZUNPxI/u+pSuquPu64ZLXlT4gtnVQCIc6Q=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:79:9f:33:78:0c:54:2f:45:47:fe:6a:ff:ba:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=b6b0e19bca1623bc314a97b1f2d68bb76032aef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:5f:2a:e9:c2:8e:27:cd:e9:a3:e5:19:3d:
26:7a:ab:57:3d:29:ff:09:1c:d2:da:db:16:ff:9f:
b4:a3:4d:71:87:a3:d6:f1:34:db:eb:f6:36:25:40:
42:2c:df:4b:bc:73:37:e6:71:c7:ec:54:fd:d9:43:
f0:9c:90:74:d2:b1:c7:53:a0:7e:d1:c7:45:96:ed:
26:ad:cf:c4:7f:78:3a:db:25:f1:49:52:87:8c:18:
55:b4:d2:56:5e:fd:4b:42:a0:3a:b6:ec:74:69:ea:
7c:1c:0c:cf:fa:54:de:37:a8:04:04:80:61:af:e0:
70:69:65:e9:c9:53:96:cc:ae:d9:f3:d5:6c:8f:7d:
0e:70:46:15:57:f1:26:3d:7d:70:80:cb:91:51:e8:
35:ba:d3:2f:fe:56:b5:4f:2a:8f:7b:a8:4f:1b:67:
8c:a4:3c:f0:35:da:01:2a:1c:14:75:87:1b:b3:9f:
e5:56:e4:58:19:90:e9:7f:16:75:41:4c:0e:46:c5:
d3:f9:9a:17:45:78:ef:c1:09:17:7d:e2:b3:a1:67:
68:68:b9:db:c9:a7:65:8c:76:8f:6f:ae:93:be:02:
43:89:5a:f4:31:5a:26:ee:9c:5d:8c:9b:ac:3c:15:
80:ad:02:ef:53:cb:e5:db:f2:f6:d1:e8:79:2c:cb:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B0:E1:9B:CA:16:23:BC:31:4A:97:B1:F2:D6:8B:B7:60:32:AE:F8
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:31:d8:0f:a6:85:fc:83:b2:50:a1:78:ab:c9:b1:0d:47:56:
05:36:c4:eb:37:a9:b5:93:32:e2:b9:a9:e3:8a:0d:84:6d:3a:
67:44:8e:da:2a:52:b2:cc:92:40:d0:ea:a2:ba:92:38:0e:f4:
f9:6a:3f:77:dc:8a:d3:0a:ea:dd:53:32:4b:03:32:ce:25:fe:
90:a1:79:94:a3:20:14:4b:74:d8:be:78:62:5a:63:3f:11:02:
65:0e:ad:3c:78:d5:2f:4c:21:6d:09:03:71:89:36:b2:7c:a7:
9a:09:12:15:20:aa:3d:90:fa:b5:fc:60:c5:d7:22:fe:0b:67:
49:8f:8b:6a:be:d0:1d:cc:b1:da:be:60:ed:1f:81:52:c7:7c:
9e:e9:fe:e2:61:02:01:4e:19:b8:c9:23:5e:38:35:f3:9e:7f:
49:2d:ac:fe:a2:5e:a1:dd:75:8e:6e:7c:aa:ad:96:70:56:ef:
2c:0d:71:5b:e0:c3:de:a0:e2:00:89:c1:9b:0d:9b:74:62:ab:
a9:ad:50:d7:c0:d1:ca:80:45:e6:d8:85:08:09:0d:17:a5:3b:
2d:4b:80:c1:36:e2:f3:4d:35:7c:c5:ab:7e:cf:70:69:30:49:
49:42:8e:d3:ad:df:87:72:1e:fb:03:1c:46:86:bb:86:72:80:
cf:19:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:36 2025 by rpki-client