Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: 209iT75y+X0nnOjoeI6dgKaakaPY/1w7KcTpNbmgUfQ=
Subject key identifier: 62:ED:B9:A5:8A:B9:6E:DA:D7:34:7C:97:BB:39:B0:8F:87:52:9E:0E
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 0198D660CE51ADDF3CE1E43DB3B8B1A105DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 0608
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: sY9agkW+UY9Avhih73UIHg4iuXk9le+7OUOPmsekWIE=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ce:51:ad:df:3c:e1:e4:3d:b3:b8:b1:a1:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=62edb9a58ab96edad7347c97bb39b08f87529e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:96:06:11:46:25:81:78:bc:be:fc:e5:f7:
f6:0c:a0:ea:41:a6:ad:29:a0:69:3d:ea:d4:d2:a8:
38:4b:83:04:52:f2:42:50:8a:51:da:eb:1b:0a:98:
f2:f0:e7:d8:c2:71:bd:be:64:40:dc:95:00:26:7b:
eb:f2:b0:ec:0d:17:64:e6:d8:54:21:a7:0b:1a:2d:
7e:57:b7:64:1a:e5:61:b1:1e:75:a4:ef:47:95:e1:
18:4e:76:fa:5e:ed:44:dc:55:0e:66:0b:e8:31:b3:
1a:47:7f:69:f7:e0:52:b5:7d:9e:35:61:10:94:72:
2a:fa:d8:5d:75:e4:16:98:14:08:05:b5:34:8d:fa:
06:fb:10:b0:ef:5f:0f:51:9c:f1:f2:91:c9:b5:ea:
86:e7:37:05:13:8b:51:bc:83:11:13:97:5a:1c:55:
fc:de:67:24:11:06:62:bb:90:8b:3b:3c:fe:de:0e:
0e:89:bc:a2:5c:87:ec:00:f8:6b:77:9e:e4:de:71:
de:b8:54:98:3e:d8:31:32:1d:23:16:cb:86:67:39:
fe:40:9c:fc:59:86:8b:77:b0:6a:11:bb:9a:f9:e4:
3a:50:49:3e:97:40:e3:fe:31:85:4d:0f:06:28:c2:
f0:87:e7:7e:33:bf:9a:b0:51:7a:d2:15:ec:ba:7c:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:B9:A5:8A:B9:6E:DA:D7:34:7C:97:BB:39:B0:8F:87:52:9E:0E
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a6:7a:69:93:a6:fb:fb:07:c4:bc:0f:3a:54:d3:c2:00:59:
fc:11:af:e7:73:dc:3c:30:3b:42:3b:0a:46:8e:61:60:47:ab:
2f:22:a0:ed:6a:a6:de:d6:43:66:b4:4d:32:bc:29:5f:5e:03:
70:b6:c7:0f:de:8f:fd:08:45:5b:94:18:69:6e:36:5d:ac:6e:
3d:4b:d4:7f:61:58:cb:a6:38:8d:3f:0b:5c:0e:8c:5a:e5:1c:
7c:59:21:d6:63:85:d9:2c:32:27:aa:3a:ee:22:2f:d4:84:f0:
8c:b4:8a:f8:39:9d:6d:3d:7a:ac:25:bc:ff:68:c0:c1:45:a2:
24:76:a9:5f:21:6d:79:9b:1e:7b:7f:d8:0f:92:71:9a:a2:89:
34:02:81:5c:3c:63:1a:28:eb:47:76:0f:1f:67:85:1c:d8:17:
d3:fa:4a:67:78:c3:28:0b:52:b1:e7:6e:cc:a8:fc:d5:d6:62:
a8:93:1d:2a:3d:de:29:f9:ca:1d:c2:b8:27:dd:bc:8c:0c:90:
ef:9e:e3:51:6c:72:ff:a6:3f:6f:bb:4b:a5:e3:19:10:d1:59:
99:3d:ba:78:1e:f6:d1:1d:57:47:d9:be:72:43:d5:db:bd:2e:
52:86:59:0a:62:79:d2:8f:b3:77:af:ea:95:12:f8:c5:af:49:
9c:06:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:36 2025 by rpki-client