Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: IijSP99f8kgUHWBCdPXAQvnWh2O7rx6p13Q7d+mQFo0=
Subject key identifier: 81:55:C9:F7:1C:33:21:8A:2F:36:0D:74:E9:DE:D0:3B:0D:52:72:D4
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01987374644646AE56AC7FB7D5301151C6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 162B
Signing time: Mon 04 Aug 2025 05:01:04 +0000
Manifest this update: Mon 04 Aug 2025 05:01:04 +0000
Manifest next update: Tue 05 Aug 2025 05:01:04 +0000
Files and hashes: 1: M9YJnMZq-Qo4sKyFoXRkAaUtrDA.roa (hash: lb64jsKs0riSb1j7+rgbV5185uMxPtGDDu6H1Pf3T8s=)
2: P0fCccGAGT3P2tDw-rs5ORyPyrw.roa (hash: zsjstCOlxud3vr07JZ7SKJe39jYJRrodk6RlxTPhlQE=)
3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: rLTQReo+V/sgAjtNCTxIJid9vv58NIbChLgpyBReh8o=)
4: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:64:46:46:ae:56:ac:7f:b7:d5:30:11:51:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Aug 4 05:01:04 2025 GMT
Not After : Aug 5 05:01:04 2025 GMT
Subject: CN=8155c9f71c33218a2f360d74e9ded03b0d5272d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ff:4e:76:b1:61:34:cf:ad:ee:66:6f:a9:9c:
c9:4c:81:79:7e:ee:dc:19:60:f8:a5:35:ca:6a:4e:
2b:e4:00:25:bc:2c:d2:78:0d:f2:e7:75:e2:07:60:
99:fa:16:95:49:a4:e5:18:fa:aa:59:43:99:75:05:
20:2d:d2:9a:bc:32:c7:af:03:5f:7f:0f:f7:6d:ed:
e8:8f:c6:5a:9e:df:5c:77:f6:4e:a5:86:ec:ea:77:
70:cc:51:63:84:ff:ec:a5:ee:28:cb:fc:f5:59:a5:
b1:45:b7:85:65:6e:0a:08:0e:c2:2e:f9:e8:51:9a:
7c:c1:d4:c8:32:3c:7d:62:54:5b:7e:75:69:e6:74:
fe:1e:c2:5a:c6:c2:a2:1e:71:3e:3b:13:eb:6b:05:
b8:27:0f:85:82:66:bd:fb:11:ed:ca:be:c9:00:99:
1f:54:86:52:50:29:a5:7c:85:53:b7:31:a7:03:9a:
c4:00:ce:28:70:06:a2:f4:c9:14:8c:2b:f3:f4:d0:
3f:e2:f7:7e:1f:75:03:e6:de:5d:5b:dd:68:1e:23:
bc:f3:fb:b5:ca:ff:d1:c6:d5:9d:eb:1b:43:12:49:
59:87:d3:2f:8f:63:0e:ce:13:d8:5d:c8:e3:ea:c3:
7b:25:20:0d:88:46:b2:0f:5d:e2:62:02:0c:27:61:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:55:C9:F7:1C:33:21:8A:2F:36:0D:74:E9:DE:D0:3B:0D:52:72:D4
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:38:78:8a:41:be:89:42:c7:bc:6a:5c:99:49:64:75:10:20:
39:29:a9:5f:de:9b:17:6f:f2:f1:99:59:1a:44:5e:d2:3b:07:
33:fc:23:a4:85:84:6b:0f:0a:06:0d:18:c7:85:a7:50:81:73:
db:5f:96:3d:3c:d0:a1:f9:98:84:0e:82:bf:12:7e:82:95:a9:
32:34:05:b4:63:87:06:a1:e1:75:a3:9e:e0:78:bf:66:a9:33:
d3:51:6e:03:d9:32:a6:3d:6e:34:77:10:32:6e:b4:5b:d4:fc:
68:25:14:c5:e5:7f:66:1d:1b:6a:6e:3a:a9:2c:0f:b7:58:e4:
b2:05:97:49:e8:a6:11:54:e6:a2:af:11:e8:9e:71:58:13:76:
63:ae:86:1a:f4:73:d8:42:e4:00:99:81:e2:bf:85:c0:14:2e:
2a:4e:74:5c:b0:e7:c7:bf:e1:b2:9f:e9:1e:a1:e6:c7:d4:4a:
98:92:ab:48:cd:a1:d1:92:d4:49:e7:4f:b0:e1:88:f1:8b:87:
74:45:05:01:bc:12:d4:fa:39:1f:d2:4e:9d:74:e0:db:24:3c:
b1:3d:57:5c:f2:f3:6a:6b:79:ae:5a:d7:85:a2:44:d7:ab:dd:
b3:f1:b3:88:20:73:81:14:35:81:7c:46:0d:4d:9b:47:b2:23:
b2:8e:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:05 2025 by rpki-client