Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: JCAP5N0c5SxheGobXLMjpoDFdmIn6W9/vZaK0k4gPJA=
Subject key identifier: 58:19:8E:0E:FA:02:64:DB:C6:D9:F1:33:39:CF:A7:27:FB:93:62:2A
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 0198D73BD07D9282BE901C7AB43E22F42E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 1124
Signing time: Sat 23 Aug 2025 14:01:17 +0000
Manifest this update: Sat 23 Aug 2025 14:01:17 +0000
Manifest next update: Sun 24 Aug 2025 14:01:17 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: hpAvt2yyD8QmfVPf8RGo05ePkQwGk6zpwbCNBL+W3aU=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d0:7d:92:82:be:90:1c:7a:b4:3e:22:f4:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Aug 23 14:01:17 2025 GMT
Not After : Aug 24 14:01:17 2025 GMT
Subject: CN=58198e0efa0264dbc6d9f13339cfa727fb93622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:ad:a5:17:71:ef:ad:3b:c2:96:dc:58:60:
22:26:1c:66:92:37:7f:c8:b8:54:51:4e:4c:6a:12:
66:cd:e6:ac:e0:d4:9e:fa:28:7d:3a:e2:82:5a:06:
e8:fe:07:51:9e:ea:3b:ef:17:d9:88:4a:8d:b2:68:
14:30:6d:9a:16:15:12:1e:09:2b:a9:95:81:e2:9b:
50:82:b3:c9:e0:65:9a:45:9f:89:8f:75:3e:3b:93:
6e:3b:13:b6:cd:b4:9c:e0:8c:f9:83:75:0e:12:a2:
61:ab:5f:7d:47:80:28:39:40:25:21:04:1b:50:9b:
6f:f7:09:23:b7:2d:58:30:1e:60:74:d7:73:07:89:
5d:29:0f:1a:b4:f1:b6:e2:be:e3:d4:af:06:84:4f:
33:eb:04:15:a5:05:62:73:74:c7:47:2f:5c:ad:93:
c9:1a:41:cc:fb:79:73:16:1e:10:de:a8:85:c0:7b:
34:f7:c0:92:1e:2f:8e:ea:75:e4:03:91:97:8f:c9:
bb:49:8b:d6:14:d3:97:ad:d5:e6:44:24:ec:f2:4a:
00:97:cb:a6:d7:6c:f1:cb:bf:51:9c:a4:a5:25:8d:
55:d8:b3:d0:bc:d8:c1:a0:6c:9e:13:00:32:0d:4f:
ed:1f:a5:38:39:36:aa:fe:ff:8a:df:18:38:5f:8e:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:8E:0E:FA:02:64:DB:C6:D9:F1:33:39:CF:A7:27:FB:93:62:2A
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dd:82:2c:1e:d1:10:5e:1e:c3:79:97:a7:6c:8e:48:95:83:
91:b2:1a:30:52:0b:c9:35:5b:96:5e:84:a2:0b:ac:cc:1d:38:
cb:b2:e1:d0:79:60:4a:02:74:b9:e1:f1:d2:1c:fc:55:78:72:
4d:43:dc:2d:33:9c:94:04:cb:c1:be:b9:b4:cf:c3:18:87:1f:
6e:1c:d4:58:6b:f7:50:ca:6f:8e:75:2c:07:c0:e6:68:b0:59:
c6:cb:e4:6d:d0:5a:c8:2b:bd:36:78:9d:a7:37:13:38:16:25:
4b:cf:df:a1:22:38:3e:f4:02:da:d5:82:7e:1f:ba:57:aa:0f:
1b:02:be:59:6d:5a:a1:cd:b1:1b:03:12:87:27:47:4f:f8:39:
28:80:83:e5:23:f4:b0:dd:a1:87:98:fb:3f:f7:ac:cd:1a:7d:
28:c6:75:80:1c:92:e4:bf:35:33:f9:f9:17:99:72:ef:b8:63:
7f:7e:cc:2f:fb:92:b5:ca:97:8f:db:55:55:dc:15:2b:c0:98:
b0:32:be:ee:ef:3a:60:eb:bf:c2:b7:97:19:2c:32:f7:03:3a:
7e:da:92:ad:a9:38:e4:d5:d2:d2:bb:1f:23:51:5f:33:c0:2f:
89:a4:50:09:a4:25:26:9a:47:21:35:8d:98:03:16:ea:33:19:
8b:1f:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:12 2025 by rpki-client