Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: U63DSU53o/P5CBbUE8zoS/YxO94ylNnXKu7d/hbksP0=
Subject key identifier: C5:BF:1C:AF:CC:60:C9:6A:CF:AA:85:C5:D6:8A:87:6E:8D:C4:DE:CF
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019894489F8499091E4C9DF2545DA77148B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0CBE
Signing time: Sun 10 Aug 2025 14:00:44 +0000
Manifest this update: Sun 10 Aug 2025 14:00:44 +0000
Manifest next update: Mon 11 Aug 2025 14:00:44 +0000
Files and hashes: 1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: Te4FriEqKm5JfRr8AjpigLoCdeQjlc7tPVAX1RRDW6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:9f:84:99:09:1e:4c:9d:f2:54:5d:a7:71:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Aug 10 14:00:44 2025 GMT
Not After : Aug 11 14:00:44 2025 GMT
Subject: CN=c5bf1cafcc60c96acfaa85c5d68a876e8dc4decf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:d7:b1:4a:6f:23:11:1a:1d:8b:65:03:fd:
19:34:02:06:01:4c:9b:20:19:f4:74:e8:57:81:66:
58:ef:aa:0b:14:43:6d:d0:62:f5:05:f2:e6:67:2c:
00:b9:a1:17:5f:b8:0d:87:f0:d1:70:fb:43:c2:4d:
02:7f:76:5e:75:eb:18:ac:cc:71:6e:d7:7a:f5:6a:
4f:a2:e6:b3:26:21:eb:54:48:7e:51:e8:92:6e:69:
67:d1:c1:d7:7d:37:4e:5c:a4:44:77:de:bc:64:f9:
bf:45:c3:24:f0:32:89:e6:9a:6f:49:6a:06:cf:08:
8f:48:a5:af:66:10:d0:28:2b:b8:df:c7:0d:65:4b:
76:19:2d:4c:fa:9f:1e:7f:63:19:48:3c:e7:08:ad:
90:f8:b1:0d:8c:b4:68:d0:20:8e:e0:89:d4:ab:b1:
5f:c3:a1:1c:15:ec:47:9b:00:18:f9:3b:02:2d:cd:
9c:3b:a0:30:0c:8a:98:05:c1:63:b1:65:ea:af:55:
fb:32:e1:de:63:1f:1b:63:a4:45:7b:7e:d1:64:2b:
0a:b9:f1:ad:51:b1:e3:e4:3a:a4:20:89:05:5d:e1:
7a:e4:d8:c5:0c:c1:96:a6:58:b9:f4:16:46:28:be:
19:94:82:c0:e8:e3:69:6e:85:23:da:f1:42:c7:24:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BF:1C:AF:CC:60:C9:6A:CF:AA:85:C5:D6:8A:87:6E:8D:C4:DE:CF
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:79:a2:c5:76:e6:2e:bb:61:b0:46:19:62:1f:a8:5b:f8:54:
ca:5f:4d:b7:de:cf:8b:b3:bb:69:74:0f:e3:e2:8f:d3:23:f2:
1a:44:67:86:60:e1:c9:85:a2:a6:8b:9a:ab:30:34:d2:d4:7f:
6d:bc:55:75:8d:bb:1b:57:10:c2:c9:38:fb:62:8b:94:7d:32:
ec:45:e3:77:1f:71:01:6b:3c:12:27:ca:9c:fb:96:d9:7f:a0:
e1:d9:db:8e:db:41:cf:31:75:41:72:c8:78:44:87:ea:3a:0c:
7c:e2:31:18:fa:b0:75:1e:fe:a1:70:c2:f2:3c:e4:09:4a:40:
c6:39:65:08:fb:03:dd:ea:be:35:2a:a9:54:81:eb:0e:36:5a:
ae:df:15:3e:9b:30:75:18:9e:88:09:18:b7:0b:f5:38:06:cb:
2b:86:55:e8:1f:09:0a:af:06:6d:d4:10:97:19:75:e9:51:14:
d3:66:bf:0d:03:38:1d:bd:6a:26:7c:13:16:80:3d:50:0a:a3:
d3:44:f9:27:17:94:84:7f:f7:cc:6d:64:2e:30:1c:36:93:71:
b9:ba:e2:0f:e3:99:30:1e:34:ff:c1:a7:5d:0d:41:4e:da:1e:
d8:aa:d7:7d:1b:ca:fb:af:3e:59:17:be:c7:c3:f9:e8:96:22:
b2:a1:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:31 2025 by rpki-client