Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: Z/tFqTwSggKzL/yPIKSQXZaEySIsnEZ0kxWbqQXbNLk=
Subject key identifier: 61:6A:7E:B9:9D:08:FE:F9:7F:27:A5:55:B5:73:23:6F:FE:27:82:F1
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 019884315DC094474D3C6C78F35662BF8F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 0500
Signing time: Thu 07 Aug 2025 11:01:24 +0000
Manifest this update: Thu 07 Aug 2025 11:01:24 +0000
Manifest next update: Fri 08 Aug 2025 11:01:24 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: 7WIF8jfjRTDVdxY13dRB5aUJ0SCBFj5g4NVe/0kikG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:5d:c0:94:47:4d:3c:6c:78:f3:56:62:bf:8f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Aug 7 11:01:24 2025 GMT
Not After : Aug 8 11:01:24 2025 GMT
Subject: CN=616a7eb99d08fef97f27a555b573236ffe2782f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:e8:b5:52:6a:f6:f8:1f:a6:c9:6c:11:66:
21:84:61:7c:f9:42:bc:ea:c1:9c:dc:7e:fe:a6:62:
77:82:0a:e9:fc:14:91:db:dd:98:aa:90:f4:6f:63:
89:42:df:8d:26:f8:f9:c0:e9:2a:81:57:a3:d6:26:
f8:15:b9:46:18:f7:f6:50:55:ad:44:2f:b1:47:c1:
61:d9:5d:eb:d3:e3:37:be:d6:b5:d2:b8:92:37:3b:
52:6c:3b:0b:dd:3a:76:cf:8b:dd:09:16:2a:73:74:
60:21:55:eb:48:07:06:70:4e:b6:47:fc:48:b0:0e:
a6:b2:11:b3:99:e0:16:4b:7b:a9:e7:c6:78:89:78:
92:a6:d2:19:59:f4:65:9b:aa:39:09:90:b3:af:5c:
ad:71:8a:d0:cc:83:cb:9a:ba:e9:b3:ee:7c:48:1e:
4b:aa:39:8f:6f:74:41:f7:59:c6:6c:b5:ae:97:0e:
d1:c9:4c:2a:94:eb:f4:37:63:a2:46:8c:6f:7e:13:
f3:03:15:f2:24:f0:ad:59:84:c8:66:e4:23:b7:11:
91:2b:e1:5b:ef:79:cc:61:8d:54:a5:da:98:03:2e:
86:bf:dd:59:92:45:5e:82:1a:2d:f5:3d:33:90:ae:
88:e2:66:a6:d4:03:34:b7:2b:75:0f:fb:98:ba:c8:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:7E:B9:9D:08:FE:F9:7F:27:A5:55:B5:73:23:6F:FE:27:82:F1
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:47:6a:08:10:af:f8:0e:79:62:cf:6f:e5:40:28:22:46:a5:
0c:65:ca:a2:e8:76:2c:b2:57:1d:6f:a0:ae:4c:d3:29:b6:d2:
c0:db:77:5c:76:f6:b8:92:66:af:20:7a:c4:7f:2c:1a:47:18:
1f:74:bc:97:d2:dc:5d:1a:f0:d2:b2:6a:91:8f:6a:32:08:1a:
45:21:1e:45:31:3b:1f:39:13:ba:33:73:91:d7:a2:ef:fc:e2:
1e:8c:0f:07:b2:da:d8:c6:7c:b1:ff:1a:10:0c:6f:bb:ac:27:
ae:6e:12:38:91:53:ea:42:34:e3:2d:29:2c:57:3d:c5:6f:e1:
8d:3e:ed:41:40:34:42:6e:76:7e:bf:1d:f2:13:48:b2:d8:fc:
29:13:6b:c1:6f:ed:8e:b9:29:40:f5:5d:58:c8:87:4a:a6:d5:
16:0d:ae:43:ef:57:8d:65:49:8b:53:38:cc:c7:f1:b7:04:0f:
88:45:df:90:83:db:4f:e8:d9:c6:3b:14:9f:22:1d:ae:90:93:
64:43:9d:c0:65:ed:8b:91:fb:d4:dd:02:ff:9b:a1:1d:9f:e9:
c9:92:9e:9c:a7:ae:8b:5a:69:25:ae:ee:a8:5c:73:6a:a0:3f:
ff:b8:71:28:79:05:56:a7:a2:36:98:69:d5:41:a4:e1:e2:f8:
c7:54:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:36:51 2025 by rpki-client