Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: 8faA040JP4JJ5y7RoELTlHz77OyBv4zEY8NeGhf0Pt0=
Subject key identifier: 69:F9:8C:24:BD:02:98:82:3A:FC:8D:20:EA:72:75:4A:D9:C9:6F:A9
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 01988EEC8623CF3B5425702603D7064BD41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 04CE
Signing time: Sat 09 Aug 2025 13:02:02 +0000
Manifest this update: Sat 09 Aug 2025 13:02:02 +0000
Manifest next update: Sun 10 Aug 2025 13:02:02 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: UhSmRqenLG+/9Jo84p8OM41S5fyiePuFoOaOXPeBKpc=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:86:23:cf:3b:54:25:70:26:03:d7:06:4b:d4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Aug 9 13:02:02 2025 GMT
Not After : Aug 10 13:02:02 2025 GMT
Subject: CN=69f98c24bd0298823afc8d20ea72754ad9c96fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:96:d6:c2:d8:7b:b3:cf:f3:81:51:93:46:
01:26:92:a0:eb:e1:06:2a:b9:6e:7d:29:31:93:05:
22:8a:c3:07:ef:7b:00:9f:55:9e:a4:85:db:ca:64:
08:c0:81:34:7b:f8:a3:ed:6e:f1:ac:58:73:13:e3:
f6:41:af:01:7e:0f:70:38:56:94:9a:c1:b9:b9:a4:
fc:86:92:57:7e:da:b5:1b:6c:a8:b5:21:e9:3f:87:
ec:1c:26:71:34:91:66:9b:a2:52:a2:84:66:0e:41:
26:dd:1e:a2:e2:2e:e4:a7:c6:d0:a2:37:b6:9d:4c:
ca:09:c3:9b:2d:09:49:00:80:c1:b0:d5:0e:0e:09:
1d:e7:56:17:bd:a9:1b:40:bc:89:b7:22:ce:54:23:
44:aa:90:31:c9:bf:47:d8:52:8b:13:15:6c:60:53:
ea:9d:32:93:5f:38:ef:fc:f7:fd:8c:9c:8a:de:ef:
da:5e:f6:48:87:5f:92:6c:6e:bf:38:ce:50:24:81:
ac:1b:a4:eb:21:78:d2:e8:cd:26:f6:7d:06:23:e1:
41:c5:3b:ea:eb:6c:06:76:ef:10:e5:a5:a9:7f:4f:
06:83:d5:07:d8:98:af:1a:aa:21:67:d8:b5:61:d5:
00:9a:05:51:75:aa:ca:df:df:77:7b:cb:86:75:79:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:8C:24:BD:02:98:82:3A:FC:8D:20:EA:72:75:4A:D9:C9:6F:A9
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:a4:02:21:4e:30:ea:b5:66:95:54:85:6c:e5:01:63:ed:
57:12:18:18:87:39:53:a0:98:e9:bd:46:f0:a9:be:b9:c0:45:
d6:21:96:22:65:9d:ea:4b:8a:37:08:45:63:f9:3c:5e:0d:f5:
c0:0c:c0:33:b8:69:75:72:ed:4c:2c:ce:e9:fe:f2:66:cf:3a:
d4:66:10:80:3b:1f:40:08:f0:15:22:55:3e:e1:b7:ec:50:7f:
78:4e:b1:a7:e2:85:01:f3:73:8f:84:30:b6:f8:3a:6e:52:9b:
4a:89:a3:24:80:2f:e4:3c:58:4d:9b:1f:72:68:d1:b0:1d:cc:
e1:9d:41:5d:5d:0c:a9:c8:4b:b5:17:98:0f:0d:aa:1b:dc:3c:
de:8b:a2:3c:aa:41:38:28:0e:fa:ba:5f:71:9f:a1:a4:fa:da:
30:86:91:20:f5:7a:29:36:6f:0a:5c:aa:ce:52:2c:b7:cd:17:
d6:c3:76:3d:d1:70:90:d6:d3:64:04:65:4f:af:aa:8f:4e:a0:
8e:c7:75:10:f3:51:4a:2d:0a:ba:27:fc:5a:10:b3:65:5d:b7:
c8:0b:c3:d6:c5:91:73:2a:bc:0b:c0:a2:99:c6:ce:56:ba:63:
01:c9:7b:67:3c:15:28:e9:7c:69:c5:12:a6:ad:68:5a:9a:35:
87:61:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:39 2025 by rpki-client