Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: A5uPypIl/lv3e1A0BrW+r3FatEPZ8ZDOyH0lpUszJtA=
Subject key identifier: D5:B6:3D:46:87:F3:1C:12:93:C6:02:4C:3D:4D:16:E2:84:51:D6:36
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 01987FAFB697A67426AB2C85E4CDC73D2D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 1336
Signing time: Wed 06 Aug 2025 14:01:18 +0000
Manifest this update: Wed 06 Aug 2025 14:01:18 +0000
Manifest next update: Thu 07 Aug 2025 14:01:18 +0000
Files and hashes: 1: D7IbZMa3P-hRRIAm78DqK4wNZ34.roa (hash: 3Rvd3MmyWPzVOpIFhMlT5LNPsKGSgahML9FUxKiCMwI=)
2: O7r63uTdFaICg1i90uf5cyEl-h4.roa (hash: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=)
3: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: 39Nj972Vu7Orv7D+4E8cKmnUNFz68C0R/eUkJGE7xFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:af:b6:97:a6:74:26:ab:2c:85:e4:cd:c7:3d:2d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Aug 6 14:01:18 2025 GMT
Not After : Aug 7 14:01:18 2025 GMT
Subject: CN=d5b63d4687f31c1293c6024c3d4d16e28451d636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:6a:c2:03:b3:06:4d:47:f9:a5:b3:74:8a:
f1:39:3d:a7:81:f9:c8:47:31:9e:9a:53:7a:53:4c:
03:ab:b5:7c:2a:2e:d8:f8:e4:3c:b1:2b:71:df:0f:
79:d3:3f:9d:fd:97:bb:08:95:83:e5:05:eb:19:27:
96:2e:2e:71:9c:5b:92:06:fc:ee:a9:30:1c:9f:4f:
01:b8:94:34:d9:89:f1:b4:db:21:6b:a8:b2:9a:78:
b8:47:61:37:67:22:82:b4:ca:98:de:6b:99:24:93:
8d:cc:33:11:a6:37:f2:81:6b:c4:40:5f:bc:bb:40:
ac:ae:16:1a:98:9f:c6:94:92:01:b5:ff:d3:eb:48:
cb:45:07:f5:c7:d7:9a:13:83:f7:4b:de:9c:95:da:
42:e6:22:6e:65:2f:24:94:b0:8c:1c:40:70:8c:bf:
d1:7c:f8:54:83:19:33:ef:f8:90:a9:ec:2e:79:6a:
01:60:97:78:7c:9d:80:be:b1:50:97:ba:9c:1e:81:
03:17:59:7e:56:57:0d:a5:ff:80:40:fc:49:7b:54:
7d:1f:85:30:00:34:82:ee:61:1a:63:92:27:e1:39:
d7:b2:4e:54:45:e4:79:3c:2b:1c:42:7d:bf:70:b1:
b4:dd:1a:53:f1:69:77:35:d2:50:5f:34:df:9a:c1:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:3D:46:87:F3:1C:12:93:C6:02:4C:3D:4D:16:E2:84:51:D6:36
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a9:03:9a:a3:1f:5a:9d:48:0c:6d:04:d2:a4:27:b4:dc:ae:
cc:5a:a5:63:6e:32:31:69:4e:cd:a9:0c:5b:b9:8a:52:f2:fc:
43:b6:9d:c3:07:c4:f8:89:fa:a1:6a:f9:d1:37:1c:7a:06:12:
aa:fd:1f:a6:a1:c2:79:2c:68:b1:43:ba:0b:4f:7a:2f:ad:78:
97:ba:a2:2f:9c:ed:d1:ea:fe:0c:37:03:0a:ed:88:1b:d6:74:
cc:1c:50:ac:4d:16:96:41:01:35:77:be:4b:45:52:34:d5:c5:
57:42:82:ab:13:70:23:18:a3:b3:e8:43:f4:cd:ec:bc:97:4d:
f4:2a:0d:34:ed:72:24:85:fb:24:ba:a5:b2:d4:25:21:a8:af:
2e:33:76:b4:25:2a:3d:9f:8b:d2:e6:e2:c0:07:41:39:e9:3f:
09:7a:44:3e:8a:ac:14:2f:24:fe:75:05:88:56:1d:31:02:8e:
1f:fa:e4:1a:24:2c:84:4a:4e:0b:83:99:4b:24:53:1e:77:69:
4a:4a:c6:7e:ca:ee:c3:7a:b3:8d:0a:af:59:bc:b6:11:2b:94:
e2:71:f4:b5:b6:5c:f4:94:08:a5:53:83:34:f6:65:ef:bc:2c:
5a:75:4e:22:ca:8e:81:93:e5:ec:ca:cb:97:27:44:f1:ce:dd:
d3:8d:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:25 2025 by rpki-client