Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: 9niM2e8RNGtbCIC2QDKYc97rp0xUwbfy2DuRDDD+MtE=
Subject key identifier: 73:F2:AA:0A:72:FD:59:59:A2:7C:45:D5:8C:96:79:FF:8F:63:19:2C
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019872CF7F5D0FF4ADB9C62877DBD480015C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 12B5
Signing time: Mon 04 Aug 2025 02:00:57 +0000
Manifest this update: Mon 04 Aug 2025 02:00:57 +0000
Manifest next update: Tue 05 Aug 2025 02:00:57 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: 4pV3bLs9aHd434jUqXeBzoJQW2ohuoGgT9XHu/7ReUk=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:7f:5d:0f:f4:ad:b9:c6:28:77:db:d4:80:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Aug 4 02:00:57 2025 GMT
Not After : Aug 5 02:00:57 2025 GMT
Subject: CN=73f2aa0a72fd5959a27c45d58c9679ff8f63192c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:fe:d6:49:2a:bb:04:f1:73:1d:28:0a:ee:
a2:0e:26:08:0e:b0:a0:6e:28:ae:e0:d7:e0:59:c8:
b5:ef:e4:8c:2b:ce:0f:d2:08:2b:05:84:a4:8c:7a:
7f:86:05:e0:13:9f:0b:8e:39:09:db:17:4a:35:3a:
25:19:a3:c0:71:8d:2e:41:12:83:74:08:a7:b8:f4:
e9:2f:72:a5:f9:b3:2a:3d:35:c3:d1:ea:82:d2:63:
52:ce:04:9a:5f:ec:95:80:8c:26:19:c9:27:93:fb:
37:e0:40:a3:bf:82:5b:f0:e8:0b:72:13:a1:f5:7e:
ea:e5:6a:d2:73:7f:30:37:3c:f9:a7:cc:3e:88:68:
23:8b:11:17:5d:2d:63:4b:b1:39:75:37:0f:80:e7:
c3:2e:88:02:9c:7a:e4:fe:da:18:ba:89:06:65:f8:
6a:05:39:ed:7b:c2:2c:08:d4:50:47:b6:ce:47:41:
0d:38:cd:e5:16:49:a4:b6:89:59:ca:bf:d6:90:ec:
84:54:76:75:61:61:8f:df:48:12:52:1a:68:f6:23:
c1:83:2c:cc:98:2d:1e:51:f7:0e:39:8b:c7:d7:5d:
bf:6b:70:95:6b:56:b8:e6:83:d7:8e:09:28:87:e5:
13:1a:b6:e5:9a:c2:83:b3:3d:50:2c:fa:e3:7b:c1:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F2:AA:0A:72:FD:59:59:A2:7C:45:D5:8C:96:79:FF:8F:63:19:2C
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9c:71:99:c0:41:d7:c6:95:e0:83:a0:f4:c3:bf:35:66:aa:
4f:2b:88:01:cf:ab:3d:c9:f0:a0:3f:d9:c0:ec:2e:17:8d:8a:
29:e1:27:37:11:87:99:b4:13:38:1c:68:84:da:78:44:6e:e1:
4d:76:71:16:4c:f8:b2:ae:24:22:13:d2:87:21:f0:8b:26:5b:
d6:f9:73:65:b8:55:4c:3f:55:18:5d:f7:2f:b0:d9:84:c0:cf:
a9:5f:b7:dc:63:70:47:47:b6:d8:bc:ae:77:00:d8:79:d2:15:
ff:24:13:2d:09:b4:29:88:32:cf:1f:b5:20:f0:42:60:a2:e4:
2e:6d:37:31:82:75:02:7c:e5:15:fe:fd:48:4e:d3:40:f4:c8:
34:1c:83:33:82:51:c0:ff:80:f3:fc:28:55:4e:ea:c0:6c:08:
d0:5e:2a:3a:c7:3f:37:a1:67:92:07:b8:c4:3c:ba:a1:d3:a7:
d2:f4:cd:cc:73:ed:fc:27:58:5c:1e:17:c5:fb:96:e4:20:7f:
65:da:e9:6a:06:e9:54:32:dc:b4:b2:11:6c:af:c4:2c:64:b5:
f8:c7:9a:a6:21:91:83:30:b1:b2:0a:5a:5f:82:15:f0:d2:c4:
2a:47:57:96:39:b5:a1:14:46:f8:42:d8:77:3d:56:0c:c5:15:
c3:e6:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:16 2025 by rpki-client