Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: cl7jS3NR23IQkt0TLl3pcPtnUZtnl5f5Zb/3XBAZL54=
Subject key identifier: 39:47:4E:80:6B:36:00:68:03:24:D9:E1:9B:73:81:62:45:1E:36:8A
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 019893DA9082ED02FCE5FFF7862591B9FFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 0460
Signing time: Sun 10 Aug 2025 12:00:31 +0000
Manifest this update: Sun 10 Aug 2025 12:00:31 +0000
Manifest next update: Mon 11 Aug 2025 12:00:31 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: w6z5cQywMtbySbIjMFLdCT9yU+ix2XpHyzkye4GQu/o=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:90:82:ed:02:fc:e5:ff:f7:86:25:91:b9:ff:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Aug 10 12:00:31 2025 GMT
Not After : Aug 11 12:00:31 2025 GMT
Subject: CN=39474e806b3600680324d9e19b738162451e368a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:91:b4:d3:f4:47:39:d8:a7:d3:86:63:32:
76:10:34:92:a9:9f:64:0e:b8:2a:3e:21:e5:12:c2:
31:92:d6:f2:09:e9:1d:72:97:cb:fe:8f:cd:57:e7:
27:14:ef:5b:0f:ef:27:5d:23:92:75:43:3c:82:2b:
4b:33:0a:7b:73:b6:58:64:dc:d0:e1:95:7d:57:cd:
2c:3f:b1:11:09:9d:a6:21:ae:1d:a0:6f:9d:fd:62:
bd:5f:85:53:07:c6:be:3a:f8:8d:06:c7:a8:c6:ba:
97:3b:2e:61:41:8d:37:a5:e4:2a:a5:f9:80:79:52:
a3:af:d7:55:8c:d0:47:c9:c7:85:bf:48:20:c1:83:
00:ff:f6:c9:30:30:83:e8:dc:67:49:8f:d5:f8:3e:
cc:d6:4a:43:12:54:a6:10:18:de:01:75:c1:e0:42:
8d:85:3c:95:3e:03:d7:e4:3a:16:7a:74:72:35:94:
98:c1:a9:bd:75:cc:5f:4b:06:b5:e4:be:c3:52:8c:
ed:8e:3f:4c:37:7d:e6:a3:1f:d8:42:d0:ef:b8:b6:
6a:c9:ca:7a:6a:b3:27:ea:77:90:ed:bf:81:7e:90:
30:14:4b:f6:24:27:83:4b:2c:27:de:7a:8e:57:82:
24:12:42:a1:ff:e1:63:7f:75:bc:d9:62:d1:86:9a:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:4E:80:6B:36:00:68:03:24:D9:E1:9B:73:81:62:45:1E:36:8A
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:65:61:c2:a2:87:f0:d0:1c:c7:07:0e:e7:dd:36:b4:dc:b7:
2b:23:85:f3:8f:f4:79:15:13:72:dd:3d:97:0d:8a:55:95:9e:
71:8c:80:2b:c7:93:20:95:89:dc:58:71:61:22:a2:1a:92:8b:
2e:8d:6e:70:0f:fa:2d:df:56:45:8a:85:c8:f4:73:df:81:7c:
ca:f1:87:c5:94:73:2d:e3:3f:e4:95:a5:55:f9:6e:14:43:fd:
12:70:98:9f:fc:ff:e3:5d:a5:ca:58:85:c7:90:8a:27:1f:09:
6e:e5:c6:a9:15:b6:90:4a:e9:36:41:8b:d1:0d:95:8f:af:93:
aa:25:a5:1c:12:ca:68:b1:b0:8d:95:c7:fc:62:e4:7b:7d:1d:
a4:35:03:49:92:59:51:11:a6:34:01:45:ca:78:ad:d6:32:79:
c4:ab:d8:cc:36:0f:17:55:c9:25:7a:f1:b9:4d:11:33:4f:8d:
3e:78:3c:1b:07:2f:e2:08:b1:8a:3e:ab:5a:fd:4f:b4:1c:7a:
a4:ce:2f:46:5c:9c:f1:7e:8f:de:6b:dc:e8:ae:d7:6b:8f:30:
27:f3:71:17:69:76:09:5a:17:75:38:cf:db:76:5c:84:d2:f0:
14:a0:7e:9f:c8:db:9f:43:f9:3f:f4:ef:47:96:e6:ce:71:01:
31:da:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:59 2025 by rpki-client