Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: 0FdBi+VDxDhj7k8/jbFmWXdybtZP/4K2144Hqkk8tv4=
Subject key identifier: 19:A8:20:D7:5B:E9:92:D2:CD:96:41:B9:26:87:95:42:BC:B8:26:A1
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 0198D54DFF38CEA2B2FF685275A7E660A072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 1178
Signing time: Sat 23 Aug 2025 05:01:55 +0000
Manifest this update: Sat 23 Aug 2025 05:01:55 +0000
Manifest next update: Sun 24 Aug 2025 05:01:55 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: sbVVRqMTPCEbH/rulPoGDWGafVEMAA41Lxio1QRyYRU=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ff:38:ce:a2:b2:ff:68:52:75:a7:e6:60:a0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Aug 23 05:01:55 2025 GMT
Not After : Aug 24 05:01:55 2025 GMT
Subject: CN=19a820d75be992d2cd9641b926879542bcb826a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:9e:67:19:72:cd:bf:69:c8:b4:d2:43:78:
34:4c:0e:74:64:c9:36:d9:55:d1:a6:a8:e6:de:eb:
c7:2f:9a:c9:8a:66:57:8e:b9:39:05:31:53:03:95:
a6:10:2a:3a:27:6c:ee:b0:35:82:6e:ba:88:04:17:
e4:28:20:ba:ce:af:7d:65:24:cd:98:72:76:ed:fe:
94:a8:65:7e:ca:ee:31:b5:ae:74:64:98:49:c3:bc:
24:52:35:72:db:7d:65:b6:37:f6:a6:38:1a:27:b9:
81:ef:29:6c:51:6d:b7:7a:df:a1:2c:04:4c:3f:78:
5e:76:d7:48:01:05:b7:95:98:2b:b7:29:ad:ac:9a:
c5:11:5a:fc:06:3c:ad:87:28:b7:13:c5:d2:04:8c:
81:5c:34:9d:e6:e3:64:78:e2:42:b3:9c:6e:1c:ed:
5d:63:ed:88:ad:03:09:26:98:e6:1e:d3:bb:c7:bc:
e6:4a:4c:38:d2:66:98:e9:bc:f9:4b:61:ce:dc:3f:
d4:0e:3d:0b:18:87:0c:3b:0b:cf:09:90:f0:3f:f5:
32:78:17:53:44:26:1f:6b:95:8d:16:d1:77:ce:92:
2d:d7:80:fa:71:f2:aa:f5:bf:f5:a4:2a:e3:31:1b:
96:5c:95:6d:64:e2:53:9d:95:7a:dc:be:11:05:1b:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:20:D7:5B:E9:92:D2:CD:96:41:B9:26:87:95:42:BC:B8:26:A1
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7b:3f:89:94:57:56:ec:b8:7a:7f:63:85:0d:8c:59:25:96:
8b:9e:b9:62:d3:6e:ac:95:7b:21:0f:7c:ed:a5:bd:59:eb:5b:
b6:49:0f:77:50:3b:b8:cb:da:4f:f1:71:b3:0e:ee:5f:cb:25:
15:91:05:b8:68:60:91:a3:23:bd:d8:ea:4f:de:b9:4b:82:2a:
c0:dd:56:4a:8f:32:79:ca:bf:5f:aa:8a:09:56:68:aa:17:01:
c8:d5:d1:be:09:0c:c7:2f:16:50:b5:36:4f:a8:4e:90:58:d4:
ed:97:d0:e2:30:ef:61:aa:41:45:78:60:9d:40:90:4b:4e:ff:
d5:ce:50:66:9d:f2:94:e2:2c:fd:6e:5f:91:a8:fe:3e:32:01:
eb:a9:e1:6f:1b:7a:13:61:c3:d1:6e:d8:66:d7:05:da:30:1d:
2d:58:10:fa:5f:1b:df:41:9e:65:77:3a:58:7f:77:fb:08:02:
07:28:ad:82:7d:d4:aa:69:5f:ef:ef:24:56:59:34:1d:56:4f:
cd:a4:e2:fc:c8:6a:4f:26:3a:9a:4f:d1:64:51:21:05:6b:32:
ed:6a:ea:b5:c2:94:d7:3e:a1:fd:d8:cb:02:2a:99:33:55:df:
8a:4b:38:aa:25:53:dc:40:cc:a3:3c:14:55:9a:10:42:8b:de:
cc:69:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:54 2025 by rpki-client