Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: 1oxSB3hMMN80vOF2l08JPamr8qyH6wIGbz6CsBT3MJM=
Subject key identifier: 60:52:ED:16:F3:BB:AD:36:1B:A4:A8:56:50:1A:C4:6C:5B:76:15:83
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 01987AF6A906A620DFB5B9912DADB9EBE444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 16:00:42 +0000
Manifest this update: Tue 05 Aug 2025 16:00:42 +0000
Manifest next update: Wed 06 Aug 2025 16:00:42 +0000
Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: wEnfnfB0J7r5eOxcI66vH8avY3/Oq7fL0o45jZbQlkI=)
2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:a9:06:a6:20:df:b5:b9:91:2d:ad:b9:eb:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Aug 5 16:00:42 2025 GMT
Not After : Aug 6 16:00:42 2025 GMT
Subject: CN=6052ed16f3bbad361ba4a856501ac46c5b761583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:61:9a:fc:2f:0b:a9:56:e2:ce:0a:4f:8b:
7b:dd:8f:83:9a:99:ce:05:25:63:f5:02:e9:90:86:
38:c2:8e:d6:84:59:dc:6b:72:5d:25:3c:4b:55:6b:
08:30:3c:c8:cf:46:c6:55:63:1a:d2:59:9f:53:23:
2e:c0:5d:f1:56:97:64:43:6e:45:5c:a6:c6:e0:31:
ce:ab:71:d4:f0:0c:52:3a:a6:d5:23:06:07:6b:4c:
09:56:cb:0d:58:32:20:48:a4:50:5e:27:96:2f:1d:
97:c3:6c:8a:3d:6f:f3:bf:01:aa:03:78:32:0e:14:
8c:ab:7e:6c:eb:fa:fc:1e:7f:46:f8:2f:ac:c1:cd:
a8:d5:f8:b0:30:e0:db:31:ad:6e:63:8d:0e:bf:46:
5a:ff:81:6b:fc:73:a9:77:54:51:f4:5a:15:13:67:
f2:ae:b2:1b:c4:18:af:6f:f5:d4:01:ad:da:d7:90:
2b:4d:ec:d4:ba:ec:43:9a:b9:ab:cb:08:70:cb:9d:
d7:78:a1:41:14:fa:ec:65:95:20:7c:9a:95:57:a8:
bc:3a:83:9a:0f:0f:b6:65:b7:6b:af:eb:11:10:79:
af:57:eb:55:a9:e5:5c:68:8e:47:28:f9:17:57:a0:
0e:a9:cb:38:10:68:6b:5a:a6:e2:0f:3b:92:f3:1a:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:52:ED:16:F3:BB:AD:36:1B:A4:A8:56:50:1A:C4:6C:5B:76:15:83
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:a3:03:b3:29:8d:03:ba:4b:91:62:e3:f0:e2:b6:ce:54:
b6:f5:03:cd:30:e8:ec:aa:8b:5f:79:d6:de:27:e4:5b:d6:8e:
71:1b:c9:c7:cb:bb:0d:d7:a3:c2:6f:0c:ae:0c:44:21:26:ef:
00:94:c5:58:98:fa:f1:2c:65:0b:21:e3:ba:78:14:98:9e:c5:
29:f8:14:1c:d9:e9:2b:4e:25:c8:eb:c3:63:6c:09:45:d9:02:
59:fc:39:94:f1:df:e5:1c:16:4e:2a:c4:a7:45:3f:ee:6a:f7:
40:d3:87:66:39:a8:38:4b:23:ce:5d:c5:b4:3a:f0:2f:8b:b6:
24:73:6a:f9:92:ff:91:3d:75:5b:e8:f0:19:98:a7:d2:5d:68:
1f:56:3d:22:a7:f3:49:60:ba:78:c3:f6:97:38:93:fc:49:15:
5d:41:3a:ed:a7:45:9c:7b:77:43:ae:74:1f:2e:04:48:b0:79:
96:80:f2:bd:a0:0a:41:f8:cf:47:5c:d8:21:93:60:0e:18:07:
c2:a9:91:bd:65:2a:2b:ac:1e:85:7b:e1:9e:69:00:8d:45:1a:
bf:8d:b5:01:b9:b7:41:6c:d6:e0:50:bb:be:90:e9:24:cd:60:
63:af:cb:6f:63:79:56:b6:a8:30:dc:04:7c:f3:68:3e:34:47:
3c:25:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:03 2025 by rpki-client