Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: P7hcIT1J/J0uQqOGRQMenXsoKgLY9BbmetYgvp3ksR8=
Subject key identifier: 07:84:D4:FC:41:48:E3:BA:65:09:C2:99:26:D4:0C:5C:F0:EB:08:51
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019874501F6484F545F8D47194FB6D71DC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 09:01:04 +0000
Manifest this update: Mon 04 Aug 2025 09:01:04 +0000
Manifest next update: Tue 05 Aug 2025 09:01:04 +0000
Files and hashes: 1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: 5N+z7MLzz2Er1k72g+lbMK1Iu8Gvj0YDglh7xBZ4H4c=)
3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:1f:64:84:f5:45:f8:d4:71:94:fb:6d:71:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Aug 4 09:01:04 2025 GMT
Not After : Aug 5 09:01:04 2025 GMT
Subject: CN=0784d4fc4148e3ba6509c29926d40c5cf0eb0851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:79:b5:e0:9e:27:d3:19:73:c1:eb:ee:b3:
5d:5a:1c:0b:7c:2d:5e:19:8c:8b:18:43:fe:3b:76:
76:8c:55:c4:a1:6d:a6:b9:78:60:c2:5d:7a:d0:d3:
7f:3d:29:29:e5:67:aa:63:bf:eb:82:f2:ae:5b:78:
b5:44:41:39:2b:5f:75:c5:91:5b:13:c5:b9:30:1e:
55:8f:66:78:da:16:9f:ab:3d:5b:4b:58:59:d7:96:
28:fe:8d:aa:5b:38:ae:c8:08:09:2f:e6:4a:73:2b:
94:4b:35:61:d7:db:32:93:b7:69:8b:b7:83:5c:33:
03:9b:5f:98:41:73:fd:13:ea:10:a2:b1:6e:ab:08:
32:1c:32:d4:f5:d5:31:ea:93:34:28:41:0f:fd:fa:
7f:99:6c:23:51:0e:7a:c5:d1:92:b5:df:61:eb:c6:
72:d4:96:c9:6c:2a:ee:55:73:e4:09:be:ca:61:c5:
d8:cf:ff:15:88:d7:cc:fb:4b:c1:60:f0:5a:d9:84:
a8:84:d8:85:2c:99:a2:f5:fd:38:b3:cb:ee:88:13:
57:fa:2a:b5:ca:e3:11:28:2a:85:0d:e1:7e:da:81:
49:01:d2:ce:8b:0c:88:a6:c8:77:da:79:3a:ee:ef:
0d:69:d5:b3:ef:62:c6:df:4a:f3:2a:d8:d1:cd:87:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:84:D4:FC:41:48:E3:BA:65:09:C2:99:26:D4:0C:5C:F0:EB:08:51
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:95:ee:00:39:ea:01:53:a5:f7:ea:94:b3:b4:69:bd:62:
ec:40:0c:99:aa:74:94:df:22:f6:20:18:24:a3:93:5a:16:6a:
cf:0c:a8:5c:19:78:ab:d4:96:c0:2e:b7:92:55:cf:dc:84:02:
bd:5f:19:44:16:72:92:ef:13:ea:a5:fc:e0:86:9f:7e:ee:1e:
f9:32:ab:62:d1:c5:71:2a:9c:e8:e4:49:aa:2b:69:f6:47:b9:
01:2f:fa:36:e0:35:4d:61:47:1b:97:93:69:60:c7:4f:97:cf:
9d:89:9e:a7:d7:a1:b8:a5:ee:d6:83:e1:5e:d6:ee:27:a8:5e:
d6:06:94:12:d9:8c:9a:ed:f1:f7:6a:ad:4d:07:52:aa:e2:cc:
ce:cb:ad:ea:eb:d9:78:e1:c3:35:b3:8a:31:df:c7:32:44:46:
f8:82:f2:26:01:1d:93:c1:f8:39:18:cf:7d:b3:a3:36:f1:ab:
9c:1c:1c:a3:05:11:ae:3a:b4:8f:79:03:14:59:5d:73:37:e8:
23:83:fb:ae:51:4f:35:83:53:b4:f8:ec:63:25:ef:4b:a9:f6:
57:c8:50:75:ee:9d:e9:5b:7e:b7:81:86:1e:09:be:5c:6c:01:
96:c0:71:36:b1:6c:7e:98:39:08:27:e5:a2:ed:7c:88:6a:af:
82:ee:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:47 2025 by rpki-client