Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: 5trzsZ8abAcn4wPJhJ1CCk2cCo0f3XvrDLvF7G0UnNU=
Subject key identifier: CA:E9:54:50:67:39:EA:FE:48:C0:8D:84:38:95:7E:FD:D7:A8:83:53
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019922FA615F4FE00D15C1814DE1EB4BADF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 0577
Signing time: Sun 07 Sep 2025 07:00:58 +0000
Manifest this update: Sun 07 Sep 2025 07:00:58 +0000
Manifest next update: Mon 08 Sep 2025 07:00:58 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: hJD8rwr0ybynY7cY9kV+kbctCbd5JOExJ8q9omGlCFc=)
3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:61:5f:4f:e0:0d:15:c1:81:4d:e1:eb:4b:ad:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Sep 7 07:00:58 2025 GMT
Not After : Sep 8 07:00:58 2025 GMT
Subject: CN=cae954506739eafe48c08d8438957efdd7a88353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:17:c4:29:4f:27:b6:82:d8:f2:c9:82:bd:
0b:28:55:28:d0:90:d0:65:f9:0e:b6:c3:b8:f3:77:
b9:be:54:7a:d1:56:13:2b:da:0b:fe:29:b3:59:66:
98:3b:fc:a4:70:4c:ef:fd:28:c0:56:37:14:1c:3f:
3b:5b:f1:74:26:67:c4:bc:d1:4c:53:5f:b1:78:e2:
7f:8b:86:61:f2:e9:dc:41:5c:a0:e3:4e:00:c1:c7:
6c:e3:16:c7:0b:f8:c7:ed:1f:39:a6:0f:9a:3a:53:
b8:75:b1:d8:93:c1:b0:77:01:f2:91:84:8d:3b:56:
af:6e:ac:f0:78:58:3f:31:85:8b:cd:f8:76:00:9f:
7a:ca:c4:b1:83:c5:1b:28:4c:3f:71:58:ae:aa:48:
fc:18:0e:12:e1:cf:39:1c:f9:2f:2a:d4:c9:24:8b:
ca:af:f8:da:46:19:99:a1:a4:f6:c0:3d:d8:bb:a0:
31:3b:21:52:47:e8:25:4d:c9:53:47:1d:35:80:c4:
84:52:88:66:ee:02:64:9d:ca:69:46:fe:b0:50:e6:
1a:a1:ed:88:d1:d3:a1:18:c9:2a:55:e2:b5:3e:9b:
80:ac:1c:a9:7b:d3:d0:8c:1b:a1:b2:91:db:3f:a5:
a1:b2:f6:fb:6c:72:63:10:9a:9b:f1:b8:4c:a3:3f:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E9:54:50:67:39:EA:FE:48:C0:8D:84:38:95:7E:FD:D7:A8:83:53
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8d:43:e9:6e:05:a7:12:8d:c0:e6:7a:1b:b1:31:31:ab:c1:
c0:3c:8a:f0:7d:c5:3b:6c:82:cc:0f:2b:47:1f:b8:e3:35:3f:
67:1b:d1:80:2f:41:ee:a1:3e:9e:83:d8:ea:50:21:68:34:bc:
9b:7c:e3:0a:ed:a3:29:2c:fc:b7:c4:0e:b5:96:92:9e:64:87:
f1:15:50:b6:5f:eb:f0:5a:73:c2:f0:28:d8:3e:4e:1a:cd:2b:
7a:7c:e1:10:3b:b6:16:97:53:f3:14:ed:6c:43:dc:56:1c:8b:
61:d0:68:dc:4f:d3:03:47:9c:9d:09:c6:9f:f8:68:9e:5a:0e:
b9:6a:ed:12:66:c2:59:a9:5c:53:f3:a7:ac:92:87:ba:1d:8c:
d2:58:05:96:af:90:3d:ef:d5:d7:3b:64:c5:3c:6b:3c:02:7a:
d1:cd:74:e1:f0:eb:ca:18:f8:84:2b:73:26:b9:31:b8:d3:c8:
a5:f2:d6:c8:99:9c:d5:85:e8:95:0f:6e:16:d0:95:87:2f:48:
4c:d8:96:c8:c3:77:c0:7e:10:cb:47:b6:c8:dd:96:7f:10:31:
24:10:9e:d9:ec:23:0c:8f:27:70:99:c1:c9:3b:40:9d:f8:45:
75:71:44:84:42:91:93:58:74:d6:f4:a1:55:12:d1:6b:11:df:
32:13:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:21 2025 by rpki-client