Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: wP5rzEocx2Ra2a7ix4PQasiF4fXqoRbEXhHiqVRIYQ4=
Subject key identifier: 49:54:6B:D3:71:2D:F0:F8:76:C0:47:3F:6F:32:42:96:01:DC:24:6E
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 01989FA7D7039D2388E7657870A65921E9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 0F56
Signing time: Tue 12 Aug 2025 19:00:33 +0000
Manifest this update: Tue 12 Aug 2025 19:00:33 +0000
Manifest next update: Wed 13 Aug 2025 19:00:33 +0000
Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: erOUdB30S6t9gGD17lHGBA0gqIWl6mi92J82SVPevKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a7:d7:03:9d:23:88:e7:65:78:70:a6:59:21:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Aug 12 19:00:33 2025 GMT
Not After : Aug 13 19:00:33 2025 GMT
Subject: CN=49546bd3712df0f876c0473f6f32429601dc246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:0f:e5:12:f9:66:9d:2d:e5:c1:ca:8a:2f:
1a:78:cc:2e:5b:bf:bc:96:9f:2b:1c:7d:c0:7c:5c:
c3:19:fc:9f:c2:19:44:e8:5c:74:37:9f:d6:1b:fa:
2d:8b:62:85:bd:e3:c3:50:13:66:0f:99:6e:9e:62:
f5:48:06:7e:30:dc:a0:ec:26:3c:f4:53:eb:f5:9f:
6e:8a:79:33:69:38:fd:fc:20:3e:20:3a:bf:61:d7:
1b:6e:b5:67:d0:cd:a1:c2:67:db:85:6d:8d:d9:28:
4a:a1:2f:a4:f0:73:43:59:4c:65:07:19:8a:2c:78:
e3:f6:a9:14:82:3a:79:57:52:d6:e1:6a:f7:20:d9:
56:e9:3a:70:51:19:8e:d1:26:c7:8e:b0:ec:d8:40:
01:d4:fc:be:09:80:60:7f:d5:e7:aa:93:35:34:c1:
ff:a9:72:27:fe:92:f1:d3:4e:5b:1f:1b:2a:11:3c:
f4:28:23:3f:c4:c9:09:95:58:7e:a5:b7:8f:41:1e:
e6:19:1e:be:ae:91:22:e7:9d:32:8d:80:e4:f3:cc:
80:8b:15:e5:f7:a2:51:ef:37:06:6b:50:8f:dd:0e:
72:1c:13:71:a3:bd:0e:c5:87:88:1a:c4:ff:42:d6:
e2:3f:1c:79:02:a7:cc:41:ed:4e:f9:98:21:95:be:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:6B:D3:71:2D:F0:F8:76:C0:47:3F:6F:32:42:96:01:DC:24:6E
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ac:8b:15:81:3f:cf:f5:dd:1b:fc:9b:b2:a7:97:ba:83:09:
a8:b5:ac:f8:00:86:21:c6:12:91:2d:2c:4a:e0:4f:77:ca:7f:
57:b7:20:4b:c0:5b:e5:da:c9:5d:89:ee:1d:6d:8a:bc:00:bb:
d9:f4:2a:7c:39:30:4b:ae:91:9d:97:64:74:ed:4b:47:a2:53:
69:b3:f8:f7:ca:21:76:1f:6c:0f:cb:a1:82:c0:49:c8:09:9d:
45:4d:92:23:5a:75:11:00:b6:2c:02:fc:c1:fa:eb:e7:17:e0:
70:64:e5:b3:09:94:d9:9c:9f:fe:4a:5d:f7:ae:ac:5e:bc:19:
54:82:f6:4d:8a:f0:f8:2d:93:f7:a2:d3:d5:b6:7a:5d:92:3f:
04:6c:9c:b9:7a:72:53:86:1e:6e:c8:48:f9:e5:22:9b:25:76:
93:4b:f7:65:cb:c6:f1:29:e9:0a:e6:89:d0:7f:65:5e:04:83:
28:c4:4a:b9:46:83:c7:63:2e:cd:30:b2:20:20:25:e6:fe:5e:
b5:00:32:c0:96:df:e8:12:13:8e:5d:39:b5:4c:22:9c:7b:82:
6f:31:9a:db:e8:a4:a2:72:56:37:9c:87:52:29:b0:de:4a:fa:
7a:a1:7c:02:6b:00:ab:b4:21:06:08:67:22:75:e3:33:47:ed:
46:60:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:40 2025 by rpki-client