Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: 41wYoWf5Y1Q4DUqlZ7dOZM1WHiyCfg3RBNgqbG4pM+M=
Subject key identifier: 35:83:FB:7E:FE:31:F5:97:32:EC:1F:9A:76:1B:ED:48:D8:D5:7D:BF
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 0198D65FA90048ABF2742A175E41FD30ED27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 7A
Signing time: Sat 23 Aug 2025 10:00:50 +0000
Manifest this update: Sat 23 Aug 2025 10:00:50 +0000
Manifest next update: Sun 24 Aug 2025 10:00:50 +0000
Files and hashes: 1: FxDzr4dkx7gP7-0QN9qS1QSuAFE.roa (hash: 2+R/DqRWvZVRETti21Zc43TNJBFDVQNiLw4+AXiQO7g=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: 83PPGb+SCxOmzAwtyVbVrulIjKvBl274jLGRGdSdSJc=)
3: aSbzflu2ueBH4HFc6DoptPDX5Rc.roa (hash: Ps8MiI9EyDzRjGBlJSLfyNG1HvPUvesSrz/Go0N5kKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a9:00:48:ab:f2:74:2a:17:5e:41:fd:30:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Aug 23 10:00:50 2025 GMT
Not After : Aug 24 10:00:50 2025 GMT
Subject: CN=3583fb7efe31f59732ec1f9a761bed48d8d57dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:0e:1c:6e:9e:cf:06:ec:a8:f8:bd:b2:5d:
20:7b:00:60:90:a8:c3:6b:2d:07:95:c8:52:db:b5:
68:3d:b8:78:2f:d9:7b:2d:64:5d:8f:f3:f5:6c:bc:
1e:f8:0c:26:a8:02:9e:96:ed:36:c7:0c:c1:9e:a4:
e8:ca:d5:9f:a2:e8:72:1d:e3:df:3c:d9:e9:61:18:
2f:93:9a:5b:a2:12:bd:26:12:b7:96:9d:c5:02:11:
24:4c:8a:d8:da:56:02:7a:4b:c8:de:e9:4d:07:54:
bd:81:6b:1d:ab:c6:9f:e5:a6:45:a1:36:ac:86:94:
a7:ac:4f:45:31:a9:94:3b:bc:9d:d8:81:b3:0e:e7:
5f:c4:a7:99:89:59:9d:18:42:fa:a9:d9:6d:6e:3f:
f6:2a:ec:32:f5:5c:a7:ef:84:58:50:ae:21:f2:30:
aa:1c:a7:23:82:70:8a:8f:01:fd:73:48:70:cd:ad:
ef:8a:08:15:63:ed:60:91:69:ab:7f:a8:21:c1:1e:
87:4b:f4:9d:b0:0c:d4:af:ec:77:9b:05:bb:5c:52:
09:58:5b:2e:ba:fb:18:17:43:f5:60:74:ab:fa:17:
1a:14:0f:23:ab:64:ab:da:dd:a8:df:a6:09:22:19:
a2:15:f3:13:da:04:0c:2d:e4:4a:1a:73:a6:59:3c:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:83:FB:7E:FE:31:F5:97:32:EC:1F:9A:76:1B:ED:48:D8:D5:7D:BF
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c2:64:f6:1f:c5:10:db:43:9b:31:b5:9f:9c:cb:8d:5c:33:
ea:97:e8:57:52:09:31:78:19:f7:24:b4:00:0e:6b:0f:b9:d5:
45:ca:f2:af:d3:5b:a2:ce:43:5c:06:ff:6b:29:e4:a2:66:fd:
1c:2b:63:f8:18:c3:8f:7d:af:22:b3:e6:a9:1c:c1:a0:ab:13:
c8:b5:a1:7b:8e:af:8e:f0:4e:28:28:20:d7:ad:65:b8:80:cd:
ef:9c:e2:ae:a6:2b:23:0b:b1:cb:3e:9e:c4:c1:00:dd:d1:2c:
39:20:62:25:91:fd:f1:63:95:54:56:9d:ff:12:90:5b:15:25:
9b:5e:5e:39:da:53:d2:d1:05:00:67:54:57:b1:f4:1b:55:84:
ad:d5:79:86:87:60:35:0c:c8:fb:aa:d7:5c:80:a4:ef:ba:b4:
13:9d:20:b1:03:f4:f0:79:6f:a2:c6:42:7b:01:12:6f:b3:5e:
69:ba:59:a7:39:b6:89:84:46:ed:17:5c:ed:bd:90:2f:37:35:
1a:f4:5d:85:1c:23:d2:25:0c:bb:75:a6:9a:4e:53:f7:c2:8b:
f6:06:c1:0c:a2:7f:c9:07:07:17:2c:99:9a:70:c7:46:65:4e:
a4:89:56:0c:f5:27:bc:9f:22:08:ee:15:1d:79:44:55:4c:b4:
84:fa:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:34 2025 by rpki-client