Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: UBWz+Hc6pSykeRapdJjEc/U7zHfRSsvAFsI810mSZ/A=
Subject key identifier: 0C:44:1F:92:61:93:14:32:91:5A:05:AE:91:C1:9E:77:7B:29:B8:3A
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 0198D6983479D450A180E925D39026A43044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 07E0
Signing time: Sat 23 Aug 2025 11:02:35 +0000
Manifest this update: Sat 23 Aug 2025 11:02:35 +0000
Manifest next update: Sun 24 Aug 2025 11:02:35 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: kQDG5jgDb5rXXX1N1pIr569FYm0s8TnChMy8uYhm3+8=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:34:79:d4:50:a1:80:e9:25:d3:90:26:a4:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Aug 23 11:02:35 2025 GMT
Not After : Aug 24 11:02:35 2025 GMT
Subject: CN=0c441f9261931432915a05ae91c19e777b29b83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:c3:cc:2b:51:16:a8:e2:76:04:cb:d4:ca:
08:1b:32:9d:16:3d:1b:28:49:22:1e:95:c7:51:51:
0b:09:ac:03:38:67:6f:14:0e:2f:9b:2c:7e:5f:97:
97:f2:44:de:73:ea:5d:95:c3:56:6e:49:82:12:72:
ff:6e:63:77:2a:25:72:f6:0f:f6:35:d4:72:39:c9:
c9:12:e8:09:77:83:83:38:02:19:37:c6:2d:64:94:
2c:a9:7b:80:49:2f:96:3d:e4:3f:96:5b:dd:39:52:
31:06:ff:63:43:68:e6:6d:e5:ea:82:d5:6e:94:49:
b2:e7:18:98:cc:7c:b3:ee:ad:0a:8d:fe:96:80:33:
df:07:99:ad:58:c9:3b:bd:4c:7a:66:c5:05:35:23:
eb:b8:18:ac:37:68:b7:b1:0f:c7:07:9a:c4:17:40:
66:e7:23:a4:7e:0c:18:c2:f0:64:54:4f:c0:e5:72:
1d:f9:9c:5f:a2:5e:6b:fc:7c:a3:44:a4:33:7d:f5:
22:b1:fb:c1:60:f4:67:8e:8e:e1:a3:2f:07:2c:78:
cc:c4:e0:02:88:08:25:89:8a:49:46:91:81:f7:1e:
04:b0:4b:1c:22:2e:c9:b9:be:8a:1a:c8:7d:2f:d3:
55:a3:90:29:a7:de:83:f5:23:be:af:17:b3:eb:84:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:1F:92:61:93:14:32:91:5A:05:AE:91:C1:9E:77:7B:29:B8:3A
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:37:1f:09:7f:d3:ef:b6:d0:2d:2f:cb:d2:0a:55:7f:d3:
46:b3:df:ca:8f:63:2b:ea:47:34:e0:6f:59:46:f7:70:cf:5d:
3d:85:20:88:d6:e8:6d:51:8c:3d:53:55:ee:db:f4:90:ba:4c:
2c:f4:0c:0e:bf:a1:b4:7b:5b:c6:fa:0e:fe:b5:04:43:21:1b:
a6:b2:5b:7a:e9:7f:ac:98:4b:b6:67:ae:98:0a:3f:39:a6:8e:
b7:96:24:bf:90:e9:52:9c:ac:4a:9a:7e:24:57:96:b5:63:f6:
53:b4:0a:42:74:f0:e1:7d:02:b3:4f:6c:75:f5:ae:9e:9b:1a:
56:7c:ce:fd:66:6e:3a:ef:d9:ad:ac:d8:0f:f9:bf:16:7b:49:
05:48:79:c4:ab:3e:5d:94:f1:13:29:d9:5e:16:f3:fe:43:81:
7b:94:72:ce:e3:71:4e:c9:54:0e:61:91:4f:46:5f:d5:40:78:
82:aa:ab:a6:2a:a8:19:e2:cf:9e:77:6c:46:c1:29:01:98:e5:
f6:27:29:59:e7:27:1f:42:57:20:15:89:3d:25:73:01:2e:e4:
0e:f2:c1:cb:0f:31:c2:29:9c:d2:14:c1:19:7c:72:30:19:f4:
45:5b:41:83:55:c3:b8:9f:12:39:1c:f6:a1:06:e9:23:55:79:
0f:9a:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:16 2025 by rpki-client