Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: nopBlEgCgTrqI0NZD/GcT8AU+QuEgmwFiAZ9QJai2NU=
Subject key identifier: 4D:A7:9E:01:34:7E:BE:0A:3D:52:C4:DB:9F:D1:82:63:03:E8:F4:6F
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 0198D583834350B194C95F062E5CA39527A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 0482
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: RGMg/+t/ZUheIXokQ7GD+cjzTb64B/5NNoVgb2bA81s=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:83:43:50:b1:94:c9:5f:06:2e:5c:a3:95:27:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=4da79e01347ebe0a3d52c4db9fd1826303e8f46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:02:ad:05:63:14:2f:46:88:25:8f:3e:eb:
bf:e3:17:e8:ea:e4:1b:ff:56:1e:01:d9:fe:6a:92:
34:cf:53:f6:0c:23:e7:c7:85:13:3f:60:44:f3:a0:
10:61:99:75:9e:dc:2b:ee:cd:cd:1d:4f:9f:a7:da:
ab:f4:64:97:fc:23:27:ee:98:87:2d:09:40:16:22:
bd:0b:6d:8d:cf:f1:16:78:89:ea:96:4b:d7:74:b7:
e9:33:66:72:ba:e6:aa:b0:69:82:ae:03:95:d8:38:
19:1e:b8:5d:cc:33:3f:ba:14:a6:3d:9f:c9:0b:f2:
a2:da:c4:6a:b2:7b:73:ad:31:16:aa:bc:6d:2d:b3:
b4:9a:0d:32:6e:5f:ed:b4:82:ee:d2:5d:bd:c5:df:
74:20:03:64:e8:e8:45:de:7a:58:30:a9:d0:1c:c0:
86:cf:c2:82:72:f6:d5:14:71:13:61:01:b4:5c:7d:
fe:3c:00:cb:1f:ff:29:f5:5e:b2:7d:0c:bd:e9:30:
a8:d1:f9:fe:c2:b2:8a:e1:3c:de:07:cc:c4:46:0f:
f5:4f:9d:a8:a4:e0:92:95:07:e0:16:8c:53:6e:12:
1d:72:74:51:15:67:cf:ba:22:53:7e:4d:6b:c5:45:
25:f3:47:b1:e0:2c:a1:ca:85:ce:09:ea:51:64:14:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:9E:01:34:7E:BE:0A:3D:52:C4:DB:9F:D1:82:63:03:E8:F4:6F
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d7:7e:0d:39:bc:7b:72:a6:f8:ce:69:32:a6:a3:5a:c4:78:
cf:3e:af:86:09:cd:67:43:a1:6a:17:c2:de:74:a4:30:12:e6:
a9:a6:85:65:e0:d1:3d:a4:0e:92:36:37:a5:79:54:43:d8:b8:
80:35:b1:85:b5:2c:7e:2a:79:f4:b9:c1:5d:3d:42:aa:1f:83:
3f:21:72:dc:76:d1:80:fb:f7:9a:24:ed:2d:34:be:c1:3c:35:
88:34:41:6b:76:d1:fe:85:1d:ac:9a:eb:10:2a:22:dd:40:5f:
e7:18:df:ec:72:fe:96:24:f8:e7:63:e5:b2:1e:ef:2a:e4:a6:
00:6c:c7:e9:88:46:cf:18:77:78:73:79:f6:c1:61:78:28:37:
9c:50:f5:ea:b5:10:49:34:59:5f:07:e3:a9:d5:8b:76:45:59:
65:40:8a:d1:ea:28:7b:0c:9f:d2:f2:7f:9a:95:ab:91:b1:bd:
0a:03:70:cf:d3:0a:50:a3:c9:4c:e0:e9:b8:79:f0:bd:57:d1:
d9:75:f4:5a:27:fb:7f:40:7e:e2:4d:ce:52:c8:f4:8c:cd:0b:
60:7d:f2:ca:e7:85:43:97:f5:d4:c6:02:6c:ba:38:c1:0b:91:
6a:8b:fd:ec:56:0d:fd:7f:8f:6e:16:a8:35:35:40:14:86:c7:
b7:34:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:36 2025 by rpki-client