Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: O5uP03/i29B5M/YGEh0t1wvug1IE6HBaGZy3sdjF+E8=
Subject key identifier: B0:75:DB:0D:DF:F0:F0:27:57:B2:58:F2:71:78:49:9F:8D:AF:89:9C
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 0198D73BDEFB75F1F7AAA744F2D6B923F55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 0580
Signing time: Sat 23 Aug 2025 14:01:21 +0000
Manifest this update: Sat 23 Aug 2025 14:01:21 +0000
Manifest next update: Sun 24 Aug 2025 14:01:21 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: SBB/1NAnk+ChWLztr7xlxaEMCCTZJZko8iy9ZO1bbhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:de:fb:75:f1:f7:aa:a7:44:f2:d6:b9:23:f5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Aug 23 14:01:21 2025 GMT
Not After : Aug 24 14:01:21 2025 GMT
Subject: CN=b075db0ddff0f02757b258f27178499f8daf899c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:6a:4f:89:dd:08:8a:5b:17:60:46:2d:f4:
91:51:63:3f:bd:30:87:11:b2:0a:8d:95:7b:37:28:
10:09:56:52:41:1b:c8:20:d1:25:56:15:ba:af:75:
6b:64:69:0a:20:dc:cd:3b:06:72:84:bc:57:bf:6b:
41:e4:49:c1:80:5f:17:9a:86:8d:56:ee:3f:78:52:
4d:8a:93:b3:eb:e7:b0:ba:c1:5a:e4:20:2b:c9:2f:
76:56:43:f5:ce:a8:d6:1a:87:90:93:d9:20:50:3c:
c7:6d:a0:d8:e8:5d:91:a6:bc:8b:57:7e:78:7c:45:
d4:77:cb:03:b9:2a:2a:21:af:f3:04:cd:e4:d5:df:
3a:be:6c:be:01:7e:c3:68:cd:4b:e7:31:67:c3:ec:
e3:fc:26:f1:ae:f0:bf:e3:fd:6c:6f:b4:f5:23:c6:
a3:eb:a3:8f:5e:ec:ec:19:6b:0d:8f:be:5e:68:02:
c4:3d:e8:87:c8:1e:ab:41:b0:41:c6:11:9b:c3:31:
36:1c:35:c0:04:54:d1:a8:3b:26:e3:3c:4f:b8:5f:
12:1c:f3:bb:72:3b:e3:29:bd:ed:2c:1e:05:42:3a:
74:78:af:e7:26:9e:f9:7e:f7:8a:20:3d:94:11:cd:
c8:2b:6f:3d:70:51:88:62:82:44:48:64:a3:29:75:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:75:DB:0D:DF:F0:F0:27:57:B2:58:F2:71:78:49:9F:8D:AF:89:9C
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:36:04:d4:7b:8a:c1:32:d4:c1:d2:81:60:3c:b5:00:95:6d:
d0:c2:01:9b:6a:fd:a4:20:74:45:4b:9f:b3:da:6d:14:b8:dc:
3b:a8:e4:51:93:03:55:a6:75:44:fa:b7:4a:90:80:d1:4b:b7:
90:43:c6:63:b2:d3:cf:d9:da:bb:9d:20:72:ae:68:3a:1f:22:
ec:a8:fa:76:40:01:cf:be:56:97:20:d7:34:9b:58:41:d3:69:
97:53:96:8b:88:92:41:61:98:fb:60:a7:f4:16:02:8c:f5:c7:
e5:0e:84:22:35:84:a0:02:b6:e7:62:2f:1f:cf:00:a7:81:9a:
80:69:93:94:9f:e4:9c:1c:12:9f:0b:fb:e0:36:e3:d6:1b:7f:
91:cc:fd:09:cd:ce:73:39:68:9f:e9:7f:2c:b1:84:19:f1:3f:
ae:9a:f8:31:45:07:62:a1:a3:a3:04:f4:5f:43:42:b6:b8:20:
19:4a:13:0d:8d:73:d9:6c:53:c4:23:0e:99:66:a2:64:29:f9:
14:dd:6e:de:64:56:d4:9e:56:b8:13:04:19:b1:8d:f7:0b:66:
b0:85:cf:bf:cf:26:e4:00:9a:c5:cc:0f:88:9a:07:a2:26:37:
57:f7:2f:ba:e6:7f:c0:c9:66:e9:57:52:12:59:76:8c:cf:da:
36:79:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:39 2025 by rpki-client