Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: QvWVEUPLLfJF1yxbib1Ta4xYtwZ+DZjoKR1/za+B8Lw=
Subject key identifier: CC:8A:9E:23:8F:AC:65:34:5E:E5:E1:58:AE:72:2C:32:5F:2B:BB:2F
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 0198819E0E146B0703EBC29B02D716CEB8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 07B4
Signing time: Wed 06 Aug 2025 23:01:15 +0000
Manifest this update: Wed 06 Aug 2025 23:01:15 +0000
Manifest next update: Thu 07 Aug 2025 23:01:15 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: +LoAgELjTKouWCL9o81DthG9D8NQySG3roQ/ginDkUg=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:0e:14:6b:07:03:eb:c2:9b:02:d7:16:ce:b8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Aug 6 23:01:15 2025 GMT
Not After : Aug 7 23:01:15 2025 GMT
Subject: CN=cc8a9e238fac65345ee5e158ae722c325f2bbb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:1b:2b:4d:ac:48:27:8b:a8:8c:e3:22:97:
aa:2f:76:a4:7d:6a:34:47:8c:58:ce:22:0d:83:64:
ef:9d:06:f9:87:99:8c:cb:50:37:b2:e9:00:6d:e8:
79:61:b7:4b:0c:dd:b5:1e:da:db:e9:da:0c:1a:f5:
7a:fe:fa:4c:87:58:ad:4b:10:c4:f8:79:da:ad:e5:
4a:5d:ca:58:0b:8f:e3:5e:59:1c:ad:73:f5:79:0e:
7f:c6:e7:ae:be:7f:df:af:c4:8f:00:22:a9:01:eb:
d6:0f:ff:6b:bc:e9:83:d5:e3:f6:f6:e2:61:06:b0:
5d:f9:c8:48:11:24:a7:e6:20:c7:af:88:f8:59:e4:
18:74:e7:b2:0a:12:11:57:8a:89:14:6f:88:28:3c:
37:e4:69:83:6d:45:19:6e:c2:08:45:f9:f7:31:fc:
2d:cc:29:55:22:49:d3:d8:40:92:f6:b7:46:28:e3:
10:11:09:9a:a1:3c:57:bc:cf:e8:5a:14:bf:5c:9a:
24:be:0a:cd:de:2a:c7:84:7e:77:5c:b2:82:09:3b:
30:b1:54:83:43:fb:e0:fb:ef:88:a2:d5:90:d4:54:
b1:22:83:0c:ab:b3:89:e7:93:d5:c6:28:8e:ec:c6:
7d:6a:1d:77:f4:d1:fb:85:38:4e:6e:b2:78:2c:5e:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:9E:23:8F:AC:65:34:5E:E5:E1:58:AE:72:2C:32:5F:2B:BB:2F
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cd:4d:60:11:6e:16:40:6e:d0:13:38:fe:74:e4:3e:10:2d:
9a:f4:b9:9b:df:0b:55:e1:77:29:93:12:7a:63:04:b7:33:70:
61:c8:9e:15:c0:dd:b3:83:d4:ca:68:10:9d:0d:8f:58:26:ce:
a6:e5:07:73:fd:72:9d:e2:62:37:f8:4a:f1:c1:8d:1c:cb:f2:
75:f6:fe:af:5f:e3:58:32:50:d2:78:0a:3b:23:d9:c5:62:5e:
69:b3:25:7b:89:8a:1e:ca:1e:80:18:9e:d6:8f:a0:d5:55:33:
2f:a4:76:95:53:aa:a6:56:30:f6:7d:1f:43:0e:0b:7f:67:cd:
48:c2:0d:13:66:c2:8b:e5:b8:fb:b2:c3:66:a2:24:25:14:dd:
49:81:58:3f:8b:8c:a0:c7:fb:34:0b:a1:d3:55:05:51:12:ac:
2e:c0:46:99:3c:9b:88:5c:56:b4:ce:2a:2e:f8:8b:6d:3f:d0:
81:e5:1b:df:c6:17:cd:64:42:72:48:e3:0c:97:89:34:f8:90:
dd:86:88:2c:64:1c:6a:f7:fa:8f:a8:0d:06:1f:be:a5:fd:82:
9d:ff:9a:a5:d0:e4:ee:d1:9c:ea:34:77:c8:1b:39:27:e4:53:
2e:2e:a3:31:67:53:79:0a:43:d3:54:ea:11:4f:2f:f3:84:47:
97:2f:28:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:28 2025 by rpki-client