
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: YFtdrs9b4ZlJtGnwGg55XX5qRvX816wAUb4ca7BI1Ss=
Subject key identifier: 53:59:FB:49:0B:6C:6F:DC:97:3F:DC:04:61:D8:D3:98:9C:0B:CB:9B
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 019880C2B62BFB522DAFE53CD4E5F22A1F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 1624
Signing time: Wed 06 Aug 2025 19:01:40 +0000
Manifest this update: Wed 06 Aug 2025 19:01:40 +0000
Manifest next update: Thu 07 Aug 2025 19:01:40 +0000
Files and hashes: 1: I4AtuDZrbSqrgt1jAfNEMLFaaig.roa (hash: 7wTj3H6so/8/7mTO73IV6vt8mViKC1vPmg3wdN+1rZ0=)
2: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: FVtVmltpjGbesrRjMWwIPacg2vzVsNxDLikjs9kHt5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:b6:2b:fb:52:2d:af:e5:3c:d4:e5:f2:2a:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Aug 6 19:01:40 2025 GMT
Not After : Aug 7 19:01:40 2025 GMT
Subject: CN=5359fb490b6c6fdc973fdc0461d8d3989c0bcb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:ed:aa:a7:72:f7:d9:b5:0b:ff:51:02:00:
88:a7:29:cb:3f:02:da:85:15:65:70:b1:2c:49:ee:
ae:8d:cb:e8:70:df:58:f6:9e:1b:53:8a:b5:cf:55:
f5:ca:74:ff:94:eb:87:b5:27:b3:81:94:fd:0a:fa:
1e:1b:7a:1b:c3:e7:ee:46:ae:22:1d:c2:e6:f6:13:
7d:8b:99:03:8e:71:b8:f6:4f:0b:ae:af:b3:f2:70:
b2:ce:e0:44:ae:b4:0b:89:50:c5:58:13:ea:d8:93:
9e:13:db:80:03:f0:59:77:b4:ed:e3:ad:45:d4:72:
bb:eb:c0:37:f1:8a:1c:4c:4a:7e:d3:44:33:bd:ed:
a1:94:99:f2:ff:74:26:5a:19:5f:c5:61:5c:9e:c7:
91:60:e1:68:d9:a2:bc:fe:13:a7:39:ae:fc:db:e7:
ad:40:95:3b:9c:4e:b2:99:f8:1f:62:bb:b2:aa:d6:
cb:a3:f6:c9:63:ba:50:90:ec:a0:4c:62:01:0f:1c:
66:58:d8:24:dd:cc:cb:ce:8a:4e:05:ac:25:34:8a:
fb:19:c2:a8:18:29:78:0e:0b:76:b6:37:c2:de:9c:
de:27:ce:1d:55:fd:93:c5:b8:84:d1:03:fb:69:d6:
62:76:76:e1:c7:c7:fc:5c:bd:e5:c9:d1:f8:b0:a4:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:59:FB:49:0B:6C:6F:DC:97:3F:DC:04:61:D8:D3:98:9C:0B:CB:9B
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1d:cf:4f:c8:f6:4f:b5:1b:2f:88:6e:b0:bc:fd:bd:bc:56:
15:56:f6:dc:46:ed:3d:07:eb:c7:82:34:01:21:10:3c:45:19:
14:29:a7:4d:2c:f3:fd:52:84:b3:05:17:f3:bf:43:13:3d:65:
90:d7:56:4a:27:14:d3:60:4b:18:cd:b9:0c:14:5b:19:73:90:
91:55:2c:34:af:38:1f:bb:6a:da:e8:51:88:78:3f:b3:a7:90:
ca:e0:9f:8c:b2:8f:fc:63:c8:38:89:af:94:41:1d:00:60:c9:
f9:61:86:cd:5f:16:29:96:85:a4:df:5a:d5:c5:5e:c2:e6:92:
2f:15:d8:cf:a4:65:c1:a4:81:61:61:a0:5f:56:17:15:80:9e:
d3:05:a6:43:54:18:16:f8:c9:58:19:b8:a6:19:dc:15:12:7c:
ed:82:ce:d7:e9:e6:68:05:94:4e:59:05:44:58:15:d2:6f:40:
e3:44:2b:d5:e8:0b:53:e3:03:61:a0:4e:30:d5:2c:c8:c6:fa:
51:52:7b:49:d8:3a:30:42:88:f9:00:e0:57:85:15:93:3c:a3:
40:85:22:af:e2:1e:eb:17:a9:0a:8b:5c:cd:ef:c9:d0:92:ef:
d6:3b:52:43:2f:36:f0:cd:05:e3:ab:d9:dd:7b:a3:01:20:95:
ae:86:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:36 2025 by rpki-client