Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: Dq6EG0qDzUGSgGLsqdu9ZAonZ34svmXKgFE382lpI3k=
Subject key identifier: 37:CF:91:FE:1B:C1:E2:91:38:70:68:71:17:8F:03:57:A1:40:50:A3
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 019886568F541E98D337BC0BBA6437F3434D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 0557
Signing time: Thu 07 Aug 2025 21:01:16 +0000
Manifest this update: Thu 07 Aug 2025 21:01:16 +0000
Manifest next update: Fri 08 Aug 2025 21:01:16 +0000
Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: fT3txHy7a93fnpTpW2luxlucBXw5aX49YgZ8Zl7SHuA=)
4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:56:8f:54:1e:98:d3:37:bc:0b:ba:64:37:f3:43:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Aug 7 21:01:16 2025 GMT
Not After : Aug 8 21:01:16 2025 GMT
Subject: CN=37cf91fe1bc1e29138706871178f0357a14050a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:3e:f3:9c:61:c2:5a:0c:a8:ab:ca:5a:b5:
35:50:c4:7d:c9:51:44:bc:99:3f:4c:81:93:3c:c9:
85:bb:d0:51:93:b7:6f:de:9d:f1:35:6e:e3:e9:a7:
ad:52:12:c9:9d:07:9c:7c:22:7a:68:50:07:33:39:
24:b6:a7:87:26:ba:56:8f:f7:9f:8a:25:0a:b3:69:
e3:9f:c6:91:36:e9:1c:ec:8a:24:71:4c:01:26:53:
38:be:02:7b:f8:da:6a:6f:e1:e6:ef:e4:38:70:89:
ae:cb:c7:f2:21:74:2e:93:4d:3a:68:4e:2f:96:ca:
43:47:b2:46:da:8a:ba:b1:44:85:04:0c:90:ea:0a:
8d:a8:e8:8d:a6:c2:f3:f5:02:8f:83:b4:0a:a6:a8:
95:e6:0d:9f:20:24:5d:26:80:2b:ae:ca:61:e2:9b:
bf:8c:7b:b1:d1:a1:d9:33:33:d4:33:7b:b9:83:8f:
31:62:89:7c:3b:d2:72:b5:09:5c:7a:d8:76:66:e2:
0e:29:da:03:f9:e9:89:d3:d8:0f:1b:81:48:eb:39:
09:5e:84:10:ba:00:48:f1:d0:3c:f6:80:9b:5a:c5:
b8:66:59:d6:f1:89:7b:4d:21:ac:ea:16:92:05:3b:
9b:35:e2:3b:7b:f6:49:6a:fc:be:60:9b:f6:d8:99:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:91:FE:1B:C1:E2:91:38:70:68:71:17:8F:03:57:A1:40:50:A3
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2c:dd:72:a1:84:0e:ae:7a:2e:0b:34:74:20:98:10:e9:35:
2e:af:8c:04:32:af:f9:62:ca:56:ec:e0:36:68:3d:b0:1f:6d:
2d:d5:51:93:ba:ae:2b:f7:1d:7a:15:ae:15:4b:97:9c:52:3a:
66:58:6c:44:00:0f:e0:f4:4c:5c:ac:66:c2:3e:6d:c8:93:e4:
11:77:01:10:12:a4:d8:ee:33:9f:77:dd:4f:95:25:35:ec:7c:
70:9c:9c:8f:23:ad:0d:ff:c1:2e:49:f5:db:41:57:9d:5d:41:
4e:23:86:31:9f:9c:e9:5a:5b:12:ba:a7:22:ea:5f:2a:c7:4b:
f6:1a:63:72:d1:98:1e:60:24:81:1e:a1:db:c0:26:67:fd:22:
d2:44:4a:76:4a:04:6d:ea:98:44:c5:c9:ee:00:5d:87:2f:c2:
2d:e6:f5:42:ab:96:c9:aa:b2:10:f2:7c:af:0f:f5:28:9e:21:
77:e8:38:87:a2:ea:e6:02:fd:90:4b:96:9c:f3:d7:1b:0b:ec:
d0:2f:f1:75:dd:4a:81:bb:47:25:95:2b:3b:ab:e6:41:0a:9b:
a2:58:1e:bb:53:25:62:f8:65:26:91:c4:a0:9c:81:42:7a:35:
27:65:77:6e:77:e1:48:f5:c2:7b:84:07:da:bf:8e:f1:f7:59:
ff:c6:46:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:35 2025 by rpki-client