Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: A8v/ykQO3tldHb/ZftWoZqzc3U5itXKJbnMy5uJI+CM=
Subject key identifier: 1E:E7:7A:CA:FE:76:48:4C:78:2B:B8:B2:93:99:12:34:83:6E:87:ED
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 0197D28628B1D31A8DE32FD9E5DBF2DD6997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 04F9
Signing time: Thu 03 Jul 2025 23:01:36 +0000
Manifest this update: Thu 03 Jul 2025 23:01:36 +0000
Manifest next update: Fri 04 Jul 2025 23:01:36 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: TRzr8Rf+U6F0A5ecFdAqG7O8XqDchR+3hlhwNjSk/q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:86:28:b1:d3:1a:8d:e3:2f:d9:e5:db:f2:dd:69:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jul 3 23:01:36 2025 GMT
Not After : Jul 4 23:01:36 2025 GMT
Subject: CN=1ee77acafe76484c782bb8b293991234836e87ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:bb:c7:2a:18:b2:bd:cb:cb:ea:02:f2:7b:
69:73:0e:f5:18:48:c7:f7:15:1d:6b:a2:92:19:5e:
1d:3c:5f:b7:e9:4b:39:75:71:d5:ac:fb:3e:74:f7:
23:08:4a:2d:7d:2e:a6:7c:f5:db:4b:0f:39:b3:b6:
4d:0f:28:4b:80:97:32:d8:f9:24:b7:f0:cc:ab:ee:
57:48:ab:ca:15:88:2e:7e:d0:69:94:16:b9:a8:50:
7c:6c:7b:78:27:ec:01:68:e2:68:00:44:59:b1:8c:
d6:3e:3f:6e:d5:1d:01:b0:5d:ce:cf:9e:dd:84:5c:
b3:53:a5:40:44:4c:0f:3a:ad:2f:c0:9b:54:61:75:
83:95:1a:e9:1b:23:4c:3d:58:2a:0b:f6:ee:2d:9a:
87:00:78:07:90:13:a8:fd:08:a3:26:fc:34:76:8b:
65:92:57:7c:83:34:7a:44:bf:a0:71:3a:ec:65:6b:
ae:ab:6a:6f:ad:b7:00:d9:a5:31:eb:1a:2a:63:d1:
f2:98:c0:28:f0:c9:59:01:86:52:a4:6f:0c:0d:bd:
7c:79:e1:01:32:57:bb:89:96:4f:9e:ca:b9:2c:97:
dd:07:a7:4f:aa:c6:d7:f5:47:d6:fb:0d:63:36:3d:
c2:2a:72:11:d2:c2:b4:bd:dd:fe:04:aa:1f:da:55:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:7A:CA:FE:76:48:4C:78:2B:B8:B2:93:99:12:34:83:6E:87:ED
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5e:a6:55:f7:9e:8d:dc:c6:17:48:12:21:ea:4b:6d:02:e9:
41:5d:25:8b:5e:46:4d:e3:39:03:eb:87:82:59:04:e5:d6:79:
82:01:40:42:c8:9a:19:0d:16:7a:88:98:e1:89:64:58:0c:22:
2b:a9:67:f0:a0:b1:c7:8c:25:e7:2c:1a:19:8a:f7:a9:05:6f:
86:b5:2a:e5:e0:4a:cd:e3:a3:04:d0:2f:2a:1e:4c:1d:ea:11:
ca:a8:c1:7b:5e:93:c1:03:f5:c0:7c:73:ae:32:e5:25:97:bb:
18:cf:11:92:5a:d2:62:91:40:3c:7f:49:cf:17:9a:27:61:91:
00:0b:e9:69:72:f6:5e:e7:c0:c9:b1:6f:71:ff:3b:b6:7c:15:
69:77:9d:aa:e2:08:72:12:40:d6:e5:c4:54:07:9c:95:de:22:
b0:2b:16:a9:bd:e2:54:38:8c:fa:61:7d:46:94:98:f8:9b:4f:
e6:c4:fd:3c:6d:58:82:12:8e:5a:9c:b0:d4:76:09:1a:c0:7d:
4d:a5:46:63:0a:ad:a3:7f:de:47:f5:cb:47:38:93:f2:a5:a1:
a7:92:82:cb:0d:94:bf:76:32:85:79:5f:f2:62:88:05:10:cb:
1c:40:98:76:d9:34:9b:c9:2f:e4:58:2c:55:57:13:9c:fb:56:
11:0a:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:46:19 2025 by rpki-client