Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
File: Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft (raw, json)
Hash identifier: fcsvqhsUQov9+ue56XZFY6AXh0pJAg1KAD42daVjxFY=
Subject key identifier: EB:95:64:86:94:04:D0:FC:EB:BF:88:B3:FB:52:F6:07:E4:28:0D:20
Authority key identifier: 43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
Certificate issuer: /CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Certificate serial: 01989FDEDEA2B8C2ABEF433F504526D23829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 20:00:39 +0000
Manifest this update: Tue 12 Aug 2025 20:00:39 +0000
Manifest next update: Wed 13 Aug 2025 20:00:39 +0000
Files and hashes: 1: Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl (hash: 0MX1NpV00ylrOu2peM3nL6ZkqI8MLzJyjhghITr4zAU=)
2: tBcUVtef6rZ0kSSzgGFNQ0aGmXk.roa (hash: axGcXX34atfoTeccVW4HcK4Aoj164U97BqMvxhWQBsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:de:a2:b8:c2:ab:ef:43:3f:50:45:26:d2:38:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Validity
Not Before: Aug 12 20:00:39 2025 GMT
Not After : Aug 13 20:00:39 2025 GMT
Subject: CN=eb9564869404d0fcebbf88b3fb52f607e4280d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:79:5f:8d:89:fd:af:87:ff:07:d0:16:b1:
4c:54:ed:a2:cc:bf:a8:0d:cc:cf:1f:b6:2d:14:b7:
c9:4a:7d:c7:5c:51:de:dc:08:86:72:31:29:7c:55:
11:ce:49:e3:5f:e7:6f:70:dc:7e:a9:21:30:60:7f:
70:17:c9:60:89:96:f9:4d:3b:9b:b5:f0:70:1c:76:
9d:f4:ca:66:6d:35:aa:9e:b6:b1:44:c0:17:ba:ac:
25:5e:4a:14:0f:b4:4c:3a:f8:1e:6b:36:52:33:5a:
a0:bd:b5:3e:3d:75:90:bd:16:2b:e7:2b:b4:c3:7b:
55:bb:da:e6:9f:a6:4c:13:14:08:22:26:44:8c:39:
20:be:2f:d6:b7:11:2c:b5:1a:0d:e6:51:cb:73:cf:
3b:59:80:1f:89:4d:de:cf:c7:b8:e5:a0:73:26:e8:
5f:5c:71:1f:e8:5b:4d:4d:94:ad:b3:6c:02:71:1d:
1a:2b:66:bc:0c:09:6d:c9:80:ab:4b:d3:82:b7:b7:
d7:41:f3:6a:de:ef:d5:b7:0e:50:be:d4:35:c3:4d:
f3:e5:c7:de:90:cd:f8:af:e1:81:95:09:fc:0f:ef:
ed:7d:fc:cd:e3:91:8e:dd:6a:5b:2f:d2:f9:ff:63:
32:96:aa:28:af:38:bc:3e:dd:71:8c:a7:23:69:34:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:95:64:86:94:04:D0:FC:EB:BF:88:B3:FB:52:F6:07:E4:28:0D:20
X509v3 Authority Key Identifier:
keyid:43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1d:f2:f7:fb:16:39:4d:49:d9:71:36:ca:d0:80:fb:30:e1:
d9:9a:b5:05:df:75:61:94:fa:c3:51:d6:dc:1e:42:a6:85:94:
7f:7b:38:d2:ca:43:77:2c:fd:79:c9:49:11:b4:02:08:a6:66:
15:b1:5d:6f:e3:f1:c5:98:a3:49:49:36:46:13:e0:05:c1:e4:
9a:11:29:3e:05:ae:78:84:60:20:fa:d9:a6:3e:57:3a:71:c9:
8f:37:cd:62:d4:9d:d1:ba:77:41:22:7a:89:d7:a9:8a:50:38:
8b:e8:75:9f:e9:7f:5d:cf:93:db:e5:06:a3:0f:f5:ac:74:26:
ef:db:30:0a:94:ca:bc:7c:07:a9:44:0b:89:66:2c:7a:d6:2b:
45:99:90:cf:75:e6:bb:ca:fc:2d:8d:01:ac:13:12:f6:b7:6d:
36:3f:a9:d0:55:9b:67:95:b2:e8:d9:b4:d0:2c:38:74:86:0a:
0f:34:10:ee:d4:28:6a:99:5b:81:15:86:ff:72:4e:57:c0:7c:
28:44:46:60:c6:89:40:30:32:d3:61:f5:12:ac:c5:c0:d1:ac:
c3:9b:e1:87:02:4b:2b:d5:77:92:93:49:32:85:2a:bd:ee:a7:
6e:97:9d:f9:b3:bd:d8:2c:9c:b5:0c:f2:1b:f1:64:fb:28:b1:
70:74:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:45 2025 by rpki-client