Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: OqwebAqc8e+yXHC5LaV9k+lNVYM7r/ewPuEQglrMXxk=
Subject key identifier: 7A:99:E5:53:EF:43:3A:02:3F:61:DA:26:75:6A:73:D1:9C:59:AE:37
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 0198D515FD62CD025613614285D16A532DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 04CC
Signing time: Sat 23 Aug 2025 04:00:44 +0000
Manifest this update: Sat 23 Aug 2025 04:00:44 +0000
Manifest next update: Sun 24 Aug 2025 04:00:44 +0000
Files and hashes: 1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
2: BVTw6vsjUxNoBbJObq9Iw2eDZYs.roa (hash: N/vjSEKCprvMbHrwkuq5WBhfoLp/HEmES1XrVOaxIlk=)
3: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: 4ODEbIFBk+NWtxPqHf+kTH/pVVlZvbrbz4yt7XCxPm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:fd:62:cd:02:56:13:61:42:85:d1:6a:53:2d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Aug 23 04:00:44 2025 GMT
Not After : Aug 24 04:00:44 2025 GMT
Subject: CN=7a99e553ef433a023f61da26756a73d19c59ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:2d:42:32:56:40:3c:20:cb:74:78:96:d4:
f8:07:07:bc:21:ae:a1:d5:ce:a6:26:f8:15:a1:0c:
0e:77:50:11:83:42:81:53:5a:77:dc:8c:eb:35:a6:
38:58:49:65:ca:08:2c:09:d3:a4:77:72:98:85:f1:
e8:1a:b6:b4:f5:94:cc:44:72:d3:45:f8:99:a3:0e:
91:f8:29:a3:83:3a:52:5f:8a:17:12:f2:9c:b7:d4:
b1:7e:07:8f:74:63:d8:ae:7f:c9:0f:0e:23:79:a7:
ae:f6:21:54:5c:bb:ca:1d:65:10:21:8e:00:5b:27:
f0:5e:99:b3:f8:b4:d8:f5:59:2b:a8:32:53:41:b7:
45:bc:bb:52:26:25:0f:01:02:61:13:68:e9:fc:6c:
09:d9:5d:c2:68:f6:49:e9:5e:7a:c1:3b:dc:13:20:
8a:5d:ba:e4:0b:4f:42:a0:51:02:2a:db:b2:53:bd:
de:5b:63:25:af:a3:e8:d5:e9:b4:91:60:82:11:e1:
0e:d7:5f:f7:65:21:f3:38:01:fb:56:35:64:23:87:
fa:58:e7:fc:5c:73:07:1d:88:5b:f1:e2:69:3c:9f:
55:dd:db:26:b5:b2:de:a1:a9:82:1f:6e:6e:e1:0c:
f7:dd:cf:20:11:fe:a6:07:0f:05:70:3b:ca:85:27:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:99:E5:53:EF:43:3A:02:3F:61:DA:26:75:6A:73:D1:9C:59:AE:37
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ec:a2:26:fd:f8:5a:5f:ad:f0:44:c4:c9:18:63:ae:96:1c:
72:54:b6:c4:2d:a7:17:c0:f4:28:14:9e:39:78:42:74:ff:47:
b9:0e:78:19:b2:7a:27:32:e3:7b:9d:3a:40:e2:0b:4d:97:45:
6c:4e:d1:f6:47:bb:97:81:c5:fa:cd:bc:73:dc:ab:af:dd:9f:
e8:f5:6b:81:15:25:ab:ba:75:bf:e8:ea:cd:eb:b5:5c:78:ee:
50:53:73:f2:7d:11:42:17:65:ca:01:ac:af:23:4c:26:54:e4:
57:f8:0c:9e:47:71:78:44:a1:64:b3:45:46:91:5c:d2:ba:9b:
b5:6b:32:90:df:af:c5:57:ca:42:de:ad:a7:e1:70:dc:cf:f3:
f2:41:b8:a8:42:8b:41:97:54:d7:7c:da:61:07:64:7c:b7:9e:
fb:6d:e8:02:45:de:0c:46:de:32:67:77:66:80:05:1e:c0:3f:
1b:10:53:9a:aa:2e:86:50:a6:32:88:eb:29:15:ac:81:89:f8:
f0:75:30:7a:20:be:d4:01:4b:bb:0e:8d:45:22:52:3b:ff:a9:
1f:fc:8b:5f:f9:c0:e0:dc:be:c1:d6:a8:06:e1:04:2a:6d:9b:
d6:c9:de:89:23:ad:c8:9c:2e:2c:83:a8:7a:8a:b6:00:68:8e:
bc:90:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:27 2025 by rpki-client