Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: Dsc2mVUBXnOcZ0UZNbp9Snl8MeCmUvGH6QV1imZevJc=
Subject key identifier: A3:31:53:6D:75:43:7B:E0:BA:88:FE:AF:97:8E:A5:56:A1:AB:96:39
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 0198733D61274C0C623848668287096C0FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 1564
Signing time: Mon 04 Aug 2025 04:00:59 +0000
Manifest this update: Mon 04 Aug 2025 04:00:59 +0000
Manifest next update: Tue 05 Aug 2025 04:00:59 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: cLBHWO+zytTmZq9xhMl+uxnunWR7pokzo4e5r2nU5ps=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:61:27:4c:0c:62:38:48:66:82:87:09:6c:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Aug 4 04:00:59 2025 GMT
Not After : Aug 5 04:00:59 2025 GMT
Subject: CN=a331536d75437be0ba88feaf978ea556a1ab9639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:84:02:f1:98:84:c8:aa:6e:c0:09:d8:c0:
33:ea:29:3f:3b:75:bd:47:ac:f4:fd:d7:59:97:0c:
fc:c0:c2:51:9e:a4:57:4e:66:d9:97:c7:a4:2b:e1:
c8:6b:e8:2b:42:80:22:8b:49:cf:27:a8:2c:30:06:
a5:eb:04:c2:d5:8e:42:b6:ac:40:7d:e2:1d:0e:37:
eb:a1:2d:69:ce:2c:85:3c:9b:41:30:a5:56:6c:5d:
6a:ff:ed:75:5d:dd:cc:bf:24:33:f8:b4:c4:70:52:
51:67:72:43:fe:3f:4f:ad:a0:44:33:de:d2:b2:81:
88:f3:5f:a1:e7:cc:bc:35:51:02:80:04:e7:a6:c3:
93:45:87:14:96:82:42:96:aa:f4:a1:2c:0f:18:75:
63:fd:94:d9:8e:44:c8:46:8d:54:17:18:b3:b4:c6:
2a:c1:3c:d8:4d:a5:ef:a7:c9:17:a9:fc:c2:d2:72:
d0:85:0c:e6:5c:5f:ff:f5:e6:89:de:b5:66:16:a4:
ce:6e:65:db:13:48:00:c4:b5:a1:66:86:93:98:b1:
35:6c:e5:36:b8:37:f6:d2:40:fc:c2:03:d0:b7:f8:
80:65:6d:cc:39:04:8d:69:fc:55:1e:77:7e:43:db:
13:db:04:66:26:b9:4c:1f:d4:2a:56:37:16:0b:d3:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:31:53:6D:75:43:7B:E0:BA:88:FE:AF:97:8E:A5:56:A1:AB:96:39
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:8b:4b:9f:07:cf:4c:67:84:a3:e2:01:d9:13:11:5b:98:
d5:ca:92:4d:a0:4c:6b:c8:87:5c:40:8e:0a:d2:cc:b5:ca:34:
90:d2:60:73:29:91:b6:cd:58:be:36:b3:50:75:2c:d7:d3:ca:
f1:f3:8b:f1:c5:e8:e0:22:53:7b:05:02:f3:d6:c0:87:9d:e5:
a4:f8:19:49:66:90:f0:72:1f:b3:6a:df:c5:db:61:94:4e:c5:
8c:1c:a1:d9:9d:02:b2:8d:67:34:91:07:c9:43:ed:6d:25:86:
6c:44:f7:ff:4c:a3:2d:67:96:60:fb:4b:1e:59:b9:4b:61:42:
f7:d7:ee:f9:ec:28:4e:e2:88:dc:1b:73:d1:2b:76:ef:37:27:
97:26:d2:32:21:69:5c:e8:50:e3:98:5c:de:57:82:73:bd:12:
ce:f5:62:74:0d:54:c3:3d:c0:fd:88:78:5d:56:4e:ca:22:de:
bc:92:b2:50:73:cd:68:b6:3d:3b:a7:ac:e6:fe:a9:09:a6:df:
d3:34:0f:7a:d8:05:3e:4c:e6:38:9c:63:97:27:ed:d6:a7:0e:
8f:96:29:2f:e0:7a:cb:89:0f:28:a7:fb:d0:6a:04:e8:60:29:
2f:f1:ff:42:d9:39:82:d5:c9:d1:42:89:73:64:53:21:0d:22:
c8:e7:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:39 2025 by rpki-client