Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: 2YTSbNnxnO70HcLhxzTwlqbYiKAhyP0E5KNUgCrxcU4=
Subject key identifier: 15:F3:83:4E:50:05:FC:FC:86:E4:5F:FA:A7:EB:AF:FF:F8:CB:AF:85
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 01987E9C635A5D920D7E54B442E5D9E5695C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0310
Signing time: Wed 06 Aug 2025 09:00:34 +0000
Manifest this update: Wed 06 Aug 2025 09:00:34 +0000
Manifest next update: Thu 07 Aug 2025 09:00:34 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: /ZDLMKyWXCCMLJiNWpGOMJ0f1oPDtCJ/6j37u/enLZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:63:5a:5d:92:0d:7e:54:b4:42:e5:d9:e5:69:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Aug 6 09:00:34 2025 GMT
Not After : Aug 7 09:00:34 2025 GMT
Subject: CN=15f3834e5005fcfc86e45ffaa7ebaffff8cbaf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1b:55:67:16:7a:98:5d:1b:44:84:8f:af:14:
70:bd:46:a0:57:46:ff:cc:4a:e5:94:38:f5:14:b9:
ae:b8:99:a1:c9:85:b2:39:aa:f4:a0:ed:f8:a5:2e:
a9:7b:d0:5e:4f:44:30:5d:48:08:a6:7c:b7:59:71:
02:b9:93:37:e2:d7:b0:4d:4c:c8:a6:4a:45:2f:00:
d1:23:e6:26:91:35:d2:d1:7e:3a:af:64:e1:ac:4f:
a2:cb:9b:08:2c:d4:e5:67:2b:7e:5a:1d:a0:fe:50:
5d:35:ca:07:67:9c:48:3d:40:1b:4a:70:79:b0:87:
2d:0b:53:c4:d8:ea:ce:9b:ef:19:c1:b4:29:91:df:
01:1a:bc:50:b4:4a:eb:04:56:6a:e8:7b:2a:a1:e0:
4c:93:88:7c:c2:08:56:b6:b8:7d:b1:a6:57:96:52:
83:63:12:a0:d9:08:9d:4a:04:cd:40:f5:be:aa:d4:
30:c4:37:62:ce:0a:3d:7d:17:12:44:f9:11:2f:78:
54:2b:a0:7d:a7:c4:fe:16:f4:7d:b0:b9:d8:42:3b:
bf:23:ab:de:7e:5d:27:9b:55:25:1f:10:6c:19:de:
73:2c:bc:08:8e:95:9b:4e:7e:61:61:0f:b6:7b:43:
3c:5a:a4:05:01:35:55:71:07:d8:16:0a:44:91:9b:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:83:4E:50:05:FC:FC:86:E4:5F:FA:A7:EB:AF:FF:F8:CB:AF:85
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:54:c8:cb:28:45:d1:bb:bc:ff:a5:3d:7a:77:6c:ec:18:26:
d4:b9:0c:7b:76:ab:7e:7b:ab:26:14:a5:9a:e3:1c:e8:50:56:
db:94:06:5c:24:82:40:e9:3d:2b:57:e6:80:14:4a:b7:d9:a8:
5a:75:ae:24:c0:38:7c:3a:d6:f7:38:fe:19:60:fa:b7:a9:42:
7d:77:8a:00:55:73:bb:b5:17:51:3d:28:92:77:ff:84:04:32:
27:16:f8:a7:e5:45:eb:a9:10:b0:06:12:46:8e:e3:81:2d:ca:
f4:36:92:a1:b1:df:c3:f2:1e:b8:76:3d:c4:a0:44:b8:4c:f5:
0a:28:ba:cd:f8:fb:78:ea:3e:4d:47:d9:cc:50:32:1d:0d:b3:
02:e7:08:8a:e0:97:7d:3a:59:9b:e8:36:35:7f:63:d4:2e:4a:
64:d0:c7:d7:5d:67:83:16:a0:8f:fc:67:a9:a4:e1:49:4d:e7:
60:73:7f:36:93:c7:1f:c0:fb:c0:62:57:37:98:be:c4:31:96:
d4:ec:6f:15:58:c9:55:a9:17:a4:3c:28:32:36:99:9a:c0:bb:
0d:77:c7:db:23:ee:bf:67:06:ea:4f:bd:7f:91:06:69:e8:9e:
e0:e9:22:61:3f:a6:c9:c3:52:b2:5b:9a:94:a3:d2:7e:07:ed:
d2:b5:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:30 2025 by rpki-client