Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: m5Jo+QrTSYPW0EkR3GXf90aAEkkZvQFl/PVez6KbWFY=
Subject key identifier: 17:1F:0D:15:D0:05:4A:1A:72:2C:C1:39:71:B9:2C:B8:ED:50:84:0A
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 0198D54E50CEC94402215C145C4002733BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 10CE
Signing time: Sat 23 Aug 2025 05:02:16 +0000
Manifest this update: Sat 23 Aug 2025 05:02:16 +0000
Manifest next update: Sun 24 Aug 2025 05:02:16 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: 0i1UKNgRnuFffgHwPBf9BH4xM2ReYuQvKVpwsmDpiLs=)
2: TrfKChON90CRCXVKGdWD_lFGLCU.roa (hash: GFMm+kc1nJBxOyEj3z/q6lfVZK3yETv8yRHloXoAgN8=)
3: TyDlQY0--7dqqa7hSxcdPHHA3k8.roa (hash: FDPgCRRVSr9ns/UDWv1/DVuyWSkU4YS2bgao5MAg8Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:50:ce:c9:44:02:21:5c:14:5c:40:02:73:3b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Aug 23 05:02:16 2025 GMT
Not After : Aug 24 05:02:16 2025 GMT
Subject: CN=171f0d15d0054a1a722cc13971b92cb8ed50840a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:b1:33:58:fb:95:2e:9a:d9:ff:37:75:8e:
8a:75:aa:5e:26:d2:79:32:bc:f4:c9:b3:93:52:e0:
be:43:ba:c7:5a:f8:ff:62:ea:a2:12:ed:3b:b4:ad:
1a:0e:f0:68:49:3d:37:81:f0:7d:cd:72:1f:67:e7:
9b:a0:81:14:b8:eb:ee:7b:4a:6a:3f:4b:11:dd:e6:
f9:a6:1a:09:e1:d0:e2:c9:42:db:22:f9:48:cc:55:
5f:a2:67:52:bb:b3:f5:8f:d8:a5:4b:84:c4:b8:81:
12:34:7e:cd:7f:dc:0e:67:dc:89:0d:23:c9:26:a2:
4b:bf:a1:31:7c:d9:bb:85:60:3a:ff:77:c9:90:65:
11:0f:cc:f5:78:ec:9f:43:62:e7:f6:c9:e9:5e:84:
5e:c0:30:34:8f:1f:b4:c3:a9:22:37:7f:2c:28:63:
bc:df:5b:4f:95:87:6d:33:3a:d9:ae:9b:cd:59:4d:
53:23:9e:77:64:3e:a1:d3:7f:3f:17:fd:30:be:4b:
5e:56:56:49:73:42:3d:ed:25:93:fb:9e:41:ee:e6:
25:fb:75:e0:cf:f4:c3:9b:fb:74:f9:92:58:40:4f:
08:de:0a:b9:94:78:bd:af:1a:fc:36:49:1d:f1:9f:
e7:8b:10:dc:d0:79:28:4b:f4:36:be:95:b4:a1:52:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:0D:15:D0:05:4A:1A:72:2C:C1:39:71:B9:2C:B8:ED:50:84:0A
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:92:5e:b1:27:57:64:6c:cb:8e:51:c6:60:e6:e7:07:ad:a8:
74:f6:b7:19:6b:25:83:6a:6f:2d:32:33:90:c4:4c:16:25:24:
34:13:05:3a:ee:62:ed:d0:89:d1:fb:a5:d9:33:c3:33:a8:07:
21:de:60:b5:0e:29:ef:a1:ea:0c:46:ef:7b:10:f3:9c:3f:09:
3b:59:09:68:b6:80:1c:ce:86:8b:2a:e3:a0:c4:73:df:bc:59:
b9:93:88:88:f8:93:47:90:4c:c4:2b:3a:40:52:c6:ec:68:0c:
93:c0:37:10:28:62:0b:91:45:10:57:2b:62:77:e5:f8:09:d5:
3b:22:ad:17:9b:22:95:cd:8a:fd:7d:c5:cc:e3:d4:14:29:11:
18:46:61:3f:94:f5:99:e7:9f:ff:9c:c8:44:82:e5:37:e7:88:
08:5f:f0:9b:b2:73:0f:15:dc:f2:46:78:42:88:ac:9a:fa:a1:
cc:bb:1b:ca:39:5f:bb:f6:5a:0c:95:f1:7e:3f:71:fa:16:2f:
05:e9:20:79:8f:1d:22:2a:ef:cf:82:fd:d5:0b:d9:15:5f:03:
f5:57:24:b4:0f:f1:0f:d7:a4:aa:c2:2a:67:5f:77:88:ee:7d:
57:24:dc:ae:9b:23:4d:ee:ce:fa:e1:37:34:eb:60:14:34:e0:
ce:c9:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:47 2025 by rpki-client