Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier: 3PtB5FNBMIjIRhk1s2mXNeTPAaOjDVHfSp07Ub5azkA=
Subject key identifier: 43:8C:18:79:42:FB:2D:7D:0F:7B:E6:55:AF:00:3E:54:EC:B2:87:1E
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer: /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial: 0198D4E0C463F3F1F4798716F0F47FA1E702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number: 05A5
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: MNnQzWhgymBQuJ8GYqqIQzb7INMdKuJU1pHenyVA7bs=)
2: yN69dqz--m8dWXCMtbZ1dGzJo1k.roa (hash: pNrNwHsIk6sG4oFCvOY8zkn+qIXflJs47/VLFYzRdxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c4:63:f3:f1:f4:79:87:16:f0:f4:7f:a1:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=438c187942fb2d7d0f7be655af003e54ecb2871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:81:8c:23:34:24:aa:9e:4f:3d:44:ce:4e:
39:76:9d:06:b6:b6:2d:dd:dd:fd:c5:18:74:6e:a4:
3d:4b:7f:db:ce:44:11:2e:9f:00:d4:7c:55:35:a3:
3e:51:c1:44:db:0d:47:74:da:5b:10:e7:41:59:3c:
68:1e:02:57:51:c9:ed:e4:27:ab:cf:29:cb:07:08:
3f:b7:1d:e7:a2:64:0a:0c:62:b4:c9:c9:ba:81:83:
f3:c0:bd:d5:7b:e4:0b:66:b9:4d:9d:cf:b0:63:00:
b1:c5:c1:58:9b:97:c8:34:1f:04:74:30:4e:c8:d0:
21:62:84:89:75:a4:40:10:c8:cb:bf:eb:a1:9e:07:
ba:43:1f:a5:c7:72:61:95:12:62:5a:bb:05:32:b2:
f0:10:d9:c5:e5:0f:36:83:61:6e:41:f7:98:b4:ed:
90:61:ca:59:6d:e1:ff:3d:6a:cd:45:9b:dc:06:c8:
b4:bc:6e:a6:95:d5:69:a6:54:23:67:59:65:e6:2f:
be:4b:37:bc:91:ec:34:76:73:6a:fe:18:d9:5d:d3:
0f:93:a3:2f:e2:8a:c5:eb:88:1f:12:5e:a6:80:b5:
ef:48:47:f0:ec:f4:b5:dc:48:fa:b7:9f:f3:28:a5:
73:b1:46:22:30:67:92:44:36:97:45:15:ed:c5:d2:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:18:79:42:FB:2D:7D:0F:7B:E6:55:AF:00:3E:54:EC:B2:87:1E
X509v3 Authority Key Identifier:
keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:74:21:b0:78:b7:16:02:1c:f9:89:af:97:a2:aa:70:35:1c:
e7:d2:c7:7d:23:e4:50:a0:e0:cf:c2:c0:c6:e1:3d:51:62:04:
29:20:d3:0a:64:1d:be:a6:02:28:19:da:5c:46:17:7b:f3:a6:
a9:bc:12:fc:c3:e6:f1:0f:be:b4:9b:2b:10:dc:e9:1a:50:59:
b4:1b:99:f3:b5:24:4a:a8:8a:c3:93:97:18:5e:0c:ab:37:5a:
24:92:59:0d:12:6c:ea:da:66:db:17:29:28:3f:66:95:a8:e1:
44:90:5b:82:92:55:8a:bb:8d:ec:c2:36:31:e5:2a:62:18:78:
fc:c0:a9:fb:d1:1a:a0:93:46:50:be:f0:63:e9:b4:c8:2a:e8:
b4:1a:af:69:4e:22:d8:65:55:29:19:f8:6c:be:51:4b:7c:af:
cf:0a:f0:3a:0a:88:56:cd:f9:d2:dc:b2:3d:0b:ad:3a:07:e2:
d6:7f:05:7f:6a:dd:70:27:c8:b1:11:7e:8c:a5:2f:c5:44:0d:
b4:02:43:f1:dc:2f:49:d0:c9:f5:ea:34:e2:2d:52:d3:29:c1:
86:91:0c:dc:ed:23:97:14:60:6b:0f:51:08:b4:e5:92:eb:64:
9f:e8:a6:cd:2f:2f:58:04:82:7f:c2:f0:3c:40:6c:ed:cf:17:
11:29:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:49 2025 by rpki-client