Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: T5E1/5ROiUodSm2ONOEd4+qvUIeBHTf8hbTJY4AAyFk=
Subject key identifier: 36:35:CD:4D:A5:49:F3:F6:FD:AF:6D:87:F8:C8:88:8B:36:2F:83:F6
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 0198906BBC4C8BC207716AABC79C43CEA326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 1571
Signing time: Sat 09 Aug 2025 20:00:36 +0000
Manifest this update: Sat 09 Aug 2025 20:00:36 +0000
Manifest next update: Sun 10 Aug 2025 20:00:36 +0000
Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: 5SiKauUcm6aZ0lCuP8axCJX6eHqqrGEKbmKgQCpUcGg=)
2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:bc:4c:8b:c2:07:71:6a:ab:c7:9c:43:ce:a3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Aug 9 20:00:36 2025 GMT
Not After : Aug 10 20:00:36 2025 GMT
Subject: CN=3635cd4da549f3f6fdaf6d87f8c8888b362f83f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:f9:77:8f:9a:94:d3:ea:8f:01:f0:43:fc:
2a:27:ec:53:a6:9b:f4:5a:0c:ce:5f:8d:31:0b:7e:
b0:52:81:4e:68:b4:1b:d6:28:c9:c2:38:38:93:94:
1a:57:25:be:fc:76:e3:9f:30:70:4f:1d:75:23:45:
44:76:26:45:94:14:35:92:fd:88:e4:56:d1:a6:2d:
37:17:c9:b8:c3:d6:4d:91:ed:9f:a9:eb:b1:26:f0:
f7:63:37:cb:b4:e1:9b:ce:74:bd:e2:97:fe:95:55:
3b:a5:8f:c0:1c:a1:08:71:9d:75:f8:1a:31:af:08:
93:87:5d:48:8f:6c:39:13:ff:d0:07:da:80:03:7f:
7d:6a:08:11:64:c3:7f:27:cf:fa:6d:c0:ad:53:cc:
38:6b:b5:b6:35:3c:b8:96:d6:7e:cc:6f:82:d8:2c:
0f:dc:c2:c8:0b:cb:94:d7:f2:2b:06:dd:71:86:b1:
a6:74:a0:9c:2d:11:38:07:1d:fb:dd:17:41:cf:9d:
f3:06:56:18:ca:fd:61:1f:8d:71:af:54:b1:cd:5d:
a7:fc:e9:35:95:f9:b3:b6:ea:d9:c6:5f:b8:c1:e9:
b6:8f:16:75:56:f3:2c:5d:82:cc:87:63:1c:ea:e5:
51:50:c1:c6:da:fc:bf:7b:f4:49:10:ea:e2:35:0a:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:CD:4D:A5:49:F3:F6:FD:AF:6D:87:F8:C8:88:8B:36:2F:83:F6
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:76:3b:64:f6:5b:a4:e9:8c:4c:a0:84:86:b5:41:b6:d6:a8:
ef:55:b6:b5:02:ca:d4:d3:70:d6:43:29:b7:af:96:eb:04:da:
b6:a8:03:5f:ca:68:33:e1:30:b6:39:43:72:9f:af:a6:73:4a:
f5:eb:88:65:ec:68:81:53:65:36:42:18:f7:f5:32:3c:7f:58:
7d:cb:ec:e5:a7:0e:04:c4:5e:67:ff:3e:22:5b:e2:51:7a:90:
47:92:16:f8:1d:25:9b:00:c0:d9:af:44:bb:61:db:5b:48:95:
9e:d5:10:04:14:4d:e2:60:ad:6f:7d:c9:a3:a1:84:f3:92:6b:
87:32:ff:05:ea:0b:4e:f6:01:42:c6:33:72:f1:67:f2:4a:49:
23:8e:e3:67:d7:48:ea:db:d1:66:3a:2d:45:45:82:a2:cc:3b:
4f:63:96:4b:b2:d2:ca:77:86:bb:33:98:68:ff:12:c6:37:ce:
86:a3:52:4b:ad:ce:f4:32:23:64:e1:28:f8:7e:52:95:73:19:
9b:b6:1a:36:ad:b3:1f:9b:80:56:b3:26:7f:9b:65:4c:68:ec:
c5:f8:6c:47:1d:e9:8f:d3:57:ef:92:c4:53:6d:e0:82:47:60:
44:b6:04:c4:ec:9a:24:ed:b9:22:0b:8a:5e:bd:9f:75:57:d6:
f7:96:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:53:23 2025 by rpki-client