Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: sgW76tH3fQD/XiYXV3y5yDeRCp7DmY+TDfuQonKyqMU=
Subject key identifier: 76:97:34:6C:8B:29:25:7B:F2:2F:CA:66:12:FC:3A:84:27:7C:D0:2B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01987306FCD95CCD9557BE1DC57662B58584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 1624
Signing time: Mon 04 Aug 2025 03:01:34 +0000
Manifest this update: Mon 04 Aug 2025 03:01:34 +0000
Manifest next update: Tue 05 Aug 2025 03:01:34 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: WioUH43KuYlnGTpEXfvVwrmjIUESfsjw7nJWJ8azBm0=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:fc:d9:5c:cd:95:57:be:1d:c5:76:62:b5:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 4 03:01:34 2025 GMT
Not After : Aug 5 03:01:34 2025 GMT
Subject: CN=7697346c8b29257bf22fca6612fc3a84277cd02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:30:e8:1a:01:58:a5:46:72:a5:89:49:02:f7:
64:88:0d:c2:62:42:b2:c1:ac:a4:8b:92:5f:dc:97:
c5:2b:de:e9:2a:3f:11:f7:15:47:ae:d7:2b:2f:98:
26:ed:c8:b8:ac:f5:7e:1f:11:6b:fe:a8:53:06:49:
5c:6c:42:c3:63:db:04:40:2b:5c:82:38:92:59:cd:
3d:1a:35:ed:0d:6d:07:90:14:5d:70:4e:b6:ad:61:
a9:d7:4d:1f:b7:07:e5:55:2f:68:fd:dc:de:c5:54:
a3:71:5f:b1:70:3f:16:66:16:fd:1a:37:cf:a6:4a:
26:25:35:99:cb:b2:bc:78:02:1a:ac:1f:d8:16:44:
14:f9:52:35:d0:bc:4f:8b:ea:50:4e:cb:93:f8:b3:
4c:29:92:db:15:a8:56:ed:3f:da:e9:bd:0a:a7:75:
d1:0a:7d:08:6f:c6:81:9b:00:23:cf:8d:6d:57:e6:
c7:61:ac:66:75:06:8f:ff:71:f7:75:21:5d:f6:0a:
27:cd:a0:9e:1a:cd:ac:4d:48:ef:e7:1d:b1:b9:34:
17:fd:09:5a:0e:5e:01:e5:eb:ab:e6:9d:9c:c1:d8:
94:e8:31:24:31:3a:ef:33:81:3f:f2:ed:17:70:88:
6d:c9:e0:d1:23:82:61:60:83:37:43:dc:6d:5e:54:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:34:6C:8B:29:25:7B:F2:2F:CA:66:12:FC:3A:84:27:7C:D0:2B
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4a:82:b1:79:1b:cc:f4:f1:f1:52:20:df:35:10:f3:98:74:
f3:84:68:97:61:bc:ed:1c:7a:2f:e0:e3:ea:01:fc:16:6f:ca:
25:13:f0:59:15:7a:4d:1b:60:54:5d:36:e3:1b:57:3b:ab:f7:
18:4c:8f:8f:94:86:8a:7b:87:ab:e6:be:3d:cd:9f:2f:0d:b9:
93:30:01:4e:a9:3f:e4:2c:0b:13:f3:a6:6b:d6:d0:3b:f3:79:
c9:1d:07:19:c1:f2:e9:62:10:e4:c1:ac:f7:77:32:3a:02:f6:
1f:d6:68:a1:6b:f4:3c:2d:49:38:a7:f6:d2:43:42:6a:50:83:
0b:61:41:22:e2:18:ac:6e:c2:fd:94:e4:05:b7:73:bf:69:da:
d7:55:a0:a4:c1:72:70:b1:35:b7:15:6d:98:e7:50:42:14:c1:
ad:8d:e4:24:b2:49:46:52:fe:17:2b:e9:85:f4:9b:2e:2f:0a:
f8:37:94:56:70:1e:b7:01:8b:22:71:30:89:ea:5c:61:cd:66:
4e:70:15:49:3c:54:73:02:88:44:ff:bb:54:07:62:f9:dd:8d:
d2:a0:f4:dc:e1:a4:f1:55:9f:65:bc:62:42:cf:1e:f9:21:ad:
9d:19:58:40:00:d4:c4:51:8d:f3:28:6e:01:6d:7d:ca:76:6b:
ad:ed:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:08 2025 by rpki-client