Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: oIolhtRxvawFG2BxI/DcDMG3DI7l2Ntht3ToULXKcU0=
Subject key identifier: 01:02:B9:55:C8:50:65:42:CE:44:B3:ED:18:BF:23:58:B2:D1:13:DF
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019895928130CE388B09737C87A5CBDC5939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 055E
Signing time: Sun 10 Aug 2025 20:01:03 +0000
Manifest this update: Sun 10 Aug 2025 20:01:03 +0000
Manifest next update: Mon 11 Aug 2025 20:01:03 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: NlULFA/3BstMWPVMDYsZOgD4HInvHo4i+kP96aTGyiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:81:30:ce:38:8b:09:73:7c:87:a5:cb:dc:59:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Aug 10 20:01:03 2025 GMT
Not After : Aug 11 20:01:03 2025 GMT
Subject: CN=0102b955c8506542ce44b3ed18bf2358b2d113df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:81:72:b4:7f:fc:10:27:14:4a:0e:43:d5:
18:4d:54:a1:18:9b:8b:01:b5:cc:a5:cf:dc:5e:f2:
3e:63:f3:2e:b5:8b:35:45:7a:69:20:7c:f1:f9:09:
b1:10:92:9d:61:4c:36:d6:b0:0c:69:3e:19:aa:e2:
6e:06:80:b0:43:12:e7:4e:1a:32:36:49:05:62:5e:
f0:eb:a0:71:5a:c9:9a:e3:26:19:e2:ca:f8:b1:3a:
da:09:25:73:f5:33:88:4e:f9:19:de:bc:eb:34:61:
34:d9:09:b2:4e:24:08:ed:de:1c:d6:3a:1d:94:de:
1f:80:94:03:1f:b1:03:fb:d3:1f:7c:86:7a:8f:a4:
a6:9f:df:2b:e0:e0:9a:f0:d5:6a:0f:b5:78:3a:89:
56:45:d8:04:c2:85:3a:b4:ac:25:59:2e:22:1b:4d:
e0:2c:f2:d9:47:ca:ff:0f:db:95:c4:52:9f:bf:bb:
26:99:a6:82:ec:1d:5f:44:b4:0b:b2:78:f7:61:cb:
a2:dd:ab:61:ed:51:7e:8d:5a:a6:b9:68:bb:51:b4:
b6:4c:32:ed:7a:dc:24:03:50:df:10:70:ed:82:35:
83:35:50:a5:1a:85:a7:7b:92:ad:23:67:b3:67:d0:
ec:3f:42:62:52:8c:f1:df:e5:eb:a4:ba:79:c6:20:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:B9:55:C8:50:65:42:CE:44:B3:ED:18:BF:23:58:B2:D1:13:DF
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:26:7d:f8:c9:dd:5b:ae:03:ff:56:84:0b:6f:e4:69:ab:f3:
c7:06:a8:20:7b:0e:9d:84:1b:f3:8b:dd:71:58:0c:8e:e3:6d:
08:cc:b3:7f:dc:5b:1c:7c:2d:4e:7d:d7:11:a1:12:84:c5:e7:
ed:4d:ec:b8:ce:64:48:87:e7:6c:0d:4c:e0:fe:5c:df:54:a2:
ee:ae:d8:96:dc:27:e3:84:86:26:46:16:9b:e3:0b:83:c4:47:
6b:30:c8:f3:d9:6b:77:36:e9:23:1f:a6:35:b3:36:68:a8:26:
e7:83:6f:f2:b8:3d:af:00:f9:b0:5d:41:46:2e:83:fa:f4:4a:
00:f2:0c:de:28:2b:53:61:87:78:35:2f:b1:07:aa:c8:8f:9a:
e0:00:37:65:32:7a:6c:95:a5:39:d4:65:ea:d1:43:96:86:bc:
86:c1:3e:70:ac:49:da:e4:c7:ca:b5:62:07:11:6d:f5:b9:85:
3b:90:3c:51:0a:ca:8d:04:4d:62:d2:94:46:6b:18:50:d1:4c:
f0:29:4e:eb:d7:39:57:9f:79:da:41:ab:ab:89:18:09:95:be:
e2:1a:8c:2b:7b:02:65:06:00:2f:94:8d:f2:8c:00:b3:90:18:
68:37:39:fc:67:c7:1f:46:a5:0f:81:f5:96:80:11:41:be:20:
6c:1f:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:49:19 2025 by rpki-client