Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: hZ8dWZgF6eSyHjk5u7eNjwA538F85iyRn7kArwkKWBg=
Subject key identifier: FD:00:15:D5:8A:91:D5:49:1D:2C:59:AC:84:B5:86:2A:A0:33:9A:FB
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 0198D660AD4B0D88E941DF0DDED47727A162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 065E
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: d6NgCXCQ1fxRPMZgL0p4ZApDJOSu0zcr124MHwp0WAA=)
2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ad:4b:0d:88:e9:41:df:0d:de:d4:77:27:a1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=fd0015d58a91d5491d2c59ac84b5862aa0339afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:d3:45:fa:6e:b2:c7:0c:5a:61:42:d0:dc:
56:e4:2c:e9:4f:fe:14:de:8e:1f:ec:21:9d:33:8f:
d3:1a:66:aa:3c:d2:3a:d9:d7:1e:80:de:c9:50:76:
da:7c:99:2c:65:a4:dc:c8:44:c3:19:66:1e:00:51:
be:e2:3b:a5:da:fe:6c:49:08:a7:03:54:4c:46:a6:
98:ed:b1:4b:4a:2a:d4:7e:88:93:5c:50:6d:63:6e:
84:c4:22:7d:f9:95:82:7c:a1:9a:08:56:7d:59:9a:
83:49:24:5a:02:be:68:41:62:c2:f9:e7:8d:50:cd:
4c:09:9a:91:6e:ca:5f:54:b4:6d:49:a5:e8:9b:28:
37:8b:ec:86:c3:b1:21:ce:23:df:60:dd:2c:4a:83:
98:49:57:5f:a8:5f:b4:77:f2:81:c8:ae:c8:f8:f6:
62:2b:6b:c5:95:2e:85:2e:12:e4:c5:01:18:8c:73:
fc:fc:d2:03:d4:bf:3d:6d:32:40:e7:dd:04:e5:a7:
3f:08:f7:a5:b7:ab:01:fa:35:0d:03:06:fe:a9:07:
83:68:0e:85:7b:7f:78:ac:26:8d:46:7a:d0:be:e1:
2b:b4:99:2a:ae:d2:10:1f:a4:93:e5:09:e3:34:46:
f4:63:52:b2:9d:41:04:b4:33:37:e4:45:71:85:cd:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:15:D5:8A:91:D5:49:1D:2C:59:AC:84:B5:86:2A:A0:33:9A:FB
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b6:3d:bd:bb:19:0e:47:f4:25:9d:60:c9:ca:00:11:79:34:
c5:49:5c:04:92:83:1d:ab:b9:b8:f3:b1:3a:7e:5e:55:68:f2:
7b:8b:5e:19:7b:95:ea:27:1e:14:2e:92:a9:e8:a2:18:c8:7a:
e9:a7:4a:1d:03:d8:02:66:d2:cb:bf:81:a4:e1:f9:cb:37:11:
be:3c:32:00:59:6e:ef:c5:d0:68:36:ad:d3:9c:83:90:e2:3c:
d0:a2:53:f1:4d:ec:df:8c:83:e6:95:78:e5:fe:c6:0a:2f:f7:
5e:97:3b:f7:9f:b8:ae:7e:7b:7c:8b:02:fe:f3:c1:41:77:ae:
cf:e6:aa:84:42:75:df:c3:9c:1b:51:94:a8:41:7c:a7:c2:97:
ee:0d:7a:5a:28:ff:68:ba:90:4f:19:5f:3e:05:9f:34:93:42:
52:df:25:03:27:59:ff:5f:f5:44:10:48:3e:6d:0c:2c:6f:1f:
8a:53:d4:c6:7e:48:40:12:70:4a:59:31:bc:1a:ef:f5:f0:95:
89:e2:dc:64:3f:47:3a:c0:1e:89:99:1a:be:11:fe:be:ef:98:
25:79:cf:e5:d5:dd:27:8d:d6:bb:39:cc:1c:c7:eb:85:d2:57:
e0:55:41:a6:21:f4:2b:90:b5:11:09:22:1f:8e:2d:4f:a3:32:
fe:fa:02:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:21 2025 by rpki-client