Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: Fqm0SBRmBdxqUbg6X50QlKXjului/pWipz6Q/EwcVFs=
Subject key identifier: D2:1E:A7:C5:54:18:92:D1:54:22:2E:25:68:72:60:83:50:42:54:37
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0198D773BD15C0AC495C41FA8CD92D863AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 1658
Signing time: Sat 23 Aug 2025 15:02:23 +0000
Manifest this update: Sat 23 Aug 2025 15:02:23 +0000
Manifest next update: Sun 24 Aug 2025 15:02:23 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: Cg5uMK4heIEDIc28dRu3X5qjuYJPbftPUNzBRxW+YS0=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:bd:15:c0:ac:49:5c:41:fa:8c:d9:2d:86:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 23 15:02:23 2025 GMT
Not After : Aug 24 15:02:23 2025 GMT
Subject: CN=d21ea7c5541892d154222e256872608350425437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:ae:2b:9d:60:a0:73:d6:d7:f6:6f:8e:6a:
90:92:ad:1e:b5:30:4a:1d:d8:c8:82:c3:cb:47:c4:
b7:f9:b9:09:3a:29:00:19:eb:d7:a2:02:1b:e6:50:
d4:5e:4c:b1:19:91:e8:02:91:25:73:f8:97:67:cf:
24:97:3a:13:5e:3a:99:46:34:c6:35:ab:0e:b2:65:
75:9e:9a:5f:34:04:74:27:7c:19:5f:8c:1d:b2:69:
69:84:2b:85:21:ec:ad:e9:d3:61:3d:4e:a9:66:9e:
a3:f4:94:ed:b6:c2:fa:24:f3:0c:2b:91:6f:24:c6:
57:a8:b8:21:d9:57:97:e0:b1:6b:3b:11:1d:ad:ce:
e0:85:8b:1e:40:8f:27:0c:1f:0b:2d:6e:0c:c9:74:
1f:6c:fa:c2:72:5f:a5:37:01:b4:dc:60:df:1b:8b:
a4:db:47:fa:bd:70:0a:2b:1d:b7:4f:2f:89:04:c1:
d3:a6:ed:48:85:1c:c8:cb:4b:7d:5e:64:d3:60:84:
e7:94:8f:bb:12:16:c0:5e:c6:26:8f:24:d4:07:3a:
c2:b7:7b:53:53:ff:0a:e5:41:45:1c:33:69:5a:c7:
69:b5:cf:10:07:5b:0f:14:96:ba:49:8f:cf:5d:b9:
a7:eb:5b:c4:43:f1:60:93:c5:75:a9:5d:af:40:7a:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1E:A7:C5:54:18:92:D1:54:22:2E:25:68:72:60:83:50:42:54:37
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:78:de:79:ca:6c:51:7a:60:92:c1:da:9e:48:7f:ce:2f:3c:
e4:1d:72:98:15:6d:24:71:c8:11:cb:3f:4e:65:c1:1f:93:a0:
63:25:54:3d:2d:1b:04:c8:6b:41:c4:9f:1b:94:bb:7c:6e:54:
6e:3a:dc:d5:ce:c5:16:e8:46:77:c0:b8:e2:a3:a0:60:a6:36:
49:ac:4e:f9:f4:0f:5a:d0:8b:2c:65:75:6d:0c:e2:c6:0f:89:
25:53:5d:ff:7e:5c:15:76:b1:82:f5:66:d5:c1:6f:b5:49:da:
12:37:01:fd:29:62:bf:66:49:40:3b:57:34:1f:33:0d:4a:a2:
66:15:87:b2:d6:63:bb:63:e1:b4:12:38:22:1d:77:7e:12:6a:
52:8a:57:37:fa:2e:3d:f9:63:c1:4e:1f:06:14:5e:e0:cd:f3:
a7:4a:95:79:b5:08:f2:fc:59:c8:c0:c1:08:1b:d1:84:15:bf:
3b:cc:87:4d:bd:b3:37:ea:9a:e4:34:02:bc:c1:28:1f:5f:be:
a3:41:78:9d:c2:50:d2:b6:59:0f:a0:6f:c2:81:d0:3b:22:b7:
5e:dc:35:9f:c5:67:1a:c8:17:d6:97:3b:ba:3c:62:b6:2e:b0:
e4:3b:9b:52:e6:94:29:da:b9:b8:a0:0f:85:e5:f2:46:fe:21:
2c:78:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:14 2025 by rpki-client