Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: 5pUsBpoWTH5GULXbpnN9zBJoF3I3rDsom/9coeXPFD8=
Subject key identifier: E7:5C:09:FC:D5:47:8E:24:31:55:51:67:51:01:21:CB:D3:6D:62:71
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 01987CE580419C6FB53F6721860C37F4A57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 01:01:12 +0000
Manifest this update: Wed 06 Aug 2025 01:01:12 +0000
Manifest next update: Thu 07 Aug 2025 01:01:12 +0000
Files and hashes: 1: 2cU_Yyosgv72VzuSZ-lEPM4bEA0.roa (hash: rOVsbZQ+258/yYvznSDjCoRvmCP4xDAfS/95mmV0VJ8=)
2: KhZxCrijEh6I5tUjdOiH08SDAlU.roa (hash: d7J/i0PvapKbq1ZXNQfO7tB9y3eyZqeGbgRInR/S46w=)
3: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: ZjCviodIE7vJUypHqXeWArJk1qVSSJuaw7xRCV/aGkk=)
4: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:80:41:9c:6f:b5:3f:67:21:86:0c:37:f4:a5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Aug 6 01:01:12 2025 GMT
Not After : Aug 7 01:01:12 2025 GMT
Subject: CN=e75c09fcd5478e2431555167510121cbd36d6271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:18:cb:10:75:79:8c:c8:de:e1:72:e1:2a:
35:97:89:c1:ae:ad:37:b0:a5:7d:64:24:b4:02:93:
1f:37:35:55:4d:62:99:5d:df:65:53:4d:f1:30:1a:
94:11:32:56:59:ac:ca:5a:8b:09:f2:be:7e:7a:1f:
90:2b:45:91:4c:6c:97:1f:0d:dc:f3:67:3e:14:cd:
28:2f:cb:ba:cc:fa:86:f6:66:4b:92:66:38:1b:b1:
d1:f7:d7:18:99:2f:e4:54:f0:d5:7a:7a:1d:88:ad:
ab:50:0b:1e:07:b8:38:f2:0c:9c:18:e9:44:4f:68:
8f:8b:5a:c5:66:59:8e:7f:77:4d:cd:63:37:45:38:
34:1c:36:79:07:3b:63:cf:64:1f:b7:c7:ae:60:e5:
81:1b:52:88:61:d3:98:d1:d2:57:9d:bb:65:d7:c6:
5a:87:97:6a:97:e5:b2:8c:c1:19:a4:e5:16:c7:62:
0c:b8:b0:ee:7f:e3:9e:37:3a:b6:1b:bd:14:5b:c2:
0f:7c:44:98:ee:78:64:bf:41:11:d7:5d:0c:1f:cb:
f8:17:c1:fa:ab:0a:a1:a8:1d:44:63:ce:7b:93:d5:
1a:4f:3a:70:bd:d0:6f:5b:c3:52:e9:30:b5:fa:70:
81:3d:97:48:d6:59:8b:11:7d:21:a1:b2:8f:c5:5f:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:09:FC:D5:47:8E:24:31:55:51:67:51:01:21:CB:D3:6D:62:71
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:a5:37:fc:63:fe:aa:df:00:4c:9c:a2:d9:69:64:86:dc:
a4:30:d9:b1:3c:d9:8f:49:37:f3:f6:00:b2:f9:b2:e5:c2:20:
1b:9a:29:9c:7d:63:0d:6d:27:ac:1e:20:58:68:e4:72:18:8c:
cc:8e:bb:80:e5:97:31:70:9f:df:01:70:4b:a5:f6:28:94:e1:
e7:ca:59:17:55:88:1c:84:ba:c9:d3:ad:2f:ee:60:52:43:24:
58:c6:0f:8c:19:a0:fb:73:44:d5:05:cd:86:de:1b:40:c9:9f:
36:4d:1a:1d:85:fe:a5:01:af:55:0a:11:3c:22:3e:2d:3b:c6:
7b:ab:3f:3e:d6:38:20:86:92:f2:ff:d2:94:83:a0:66:57:ba:
1c:3c:5b:a0:5c:bb:cb:8f:7b:5f:2f:2b:56:39:90:3e:50:3f:
ad:81:f9:20:10:3a:f7:5b:55:9b:48:c6:a9:2c:f9:37:be:77:
6e:94:45:be:28:e2:76:23:f8:65:14:56:48:6a:35:20:20:2f:
61:20:87:4a:aa:38:fd:0c:f4:c2:cb:46:f1:4b:e1:5d:63:35:
45:c9:5e:dc:f6:43:a9:ff:f4:d0:97:a5:90:04:c5:af:2a:d5:
a3:fc:46:10:33:48:11:d1:6a:d0:cd:ce:56:1e:b0:70:cc:28:
d7:df:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:45 2025 by rpki-client