Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: QQOLnUD04OWVyI0FzsT/5rKFnHxJ+RwHCqWWKpdKNsk=
Subject key identifier: D7:81:62:59:34:92:37:16:70:52:A3:A4:69:B5:5B:2D:8E:33:B9:B7
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 0198925A6FB649F80A6A81958074DCB2AD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 07F3
Signing time: Sun 10 Aug 2025 05:00:57 +0000
Manifest this update: Sun 10 Aug 2025 05:00:57 +0000
Manifest next update: Mon 11 Aug 2025 05:00:57 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: L7zeL+ssOsyTLvOA6BaH80PH7Ny5wuxOyYyiNYhLbKA=)
2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:6f:b6:49:f8:0a:6a:81:95:80:74:dc:b2:ad:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Aug 10 05:00:57 2025 GMT
Not After : Aug 11 05:00:57 2025 GMT
Subject: CN=d7816259349237167052a3a469b55b2d8e33b9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:95:7e:65:fa:ee:5f:26:12:4d:27:ee:9c:
00:23:8e:65:42:60:71:b3:f7:2e:65:9c:62:d1:5a:
3a:88:7d:93:19:f3:59:d4:d1:a9:3c:3b:14:40:82:
f1:02:b5:0e:29:7a:82:69:d6:b5:dc:57:03:15:32:
02:b3:bf:b4:fd:3d:da:00:6e:21:fc:37:e0:c9:76:
9c:7b:98:dd:27:21:56:1f:0c:6f:b9:e7:cd:bb:9c:
fe:ae:0e:cc:7b:c1:3d:a1:ab:18:19:6a:10:3a:b8:
58:75:03:ff:05:47:2b:8a:c5:60:fb:ac:54:fa:7d:
94:6f:f4:b1:31:53:9e:75:c3:7d:af:50:1f:94:2d:
c1:64:0c:ce:fd:04:e4:f5:18:c5:87:db:fd:c6:a7:
d2:c4:3c:34:f2:f0:25:21:27:5c:4e:62:90:45:9b:
e4:8e:85:38:bf:b8:8e:b0:30:a1:53:3e:70:3e:93:
b0:6b:02:87:ac:61:26:dc:e5:d4:0e:85:fa:5c:8c:
2e:ec:f4:3b:a7:c6:84:b4:ee:09:2c:a2:af:1d:2a:
1c:46:44:79:31:01:d1:72:23:67:0b:7b:26:37:f5:
22:a0:42:dc:15:17:55:c1:07:fb:25:9a:59:16:10:
d4:1a:14:ce:6f:84:35:2f:12:4b:3d:5b:c8:98:0b:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:62:59:34:92:37:16:70:52:A3:A4:69:B5:5B:2D:8E:33:B9:B7
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:50:13:0f:1d:53:fe:89:d7:a0:ee:03:22:dc:59:84:e1:2a:
bc:04:08:c7:94:b7:23:cb:ef:97:1c:43:c3:8c:29:4c:65:40:
8f:ff:d3:90:53:0a:b4:9a:bb:61:1f:26:66:77:af:88:06:57:
cb:d4:99:78:55:86:5c:00:38:62:b5:68:dd:42:df:6b:e1:a8:
e5:c8:e6:43:72:c1:38:0a:fb:df:04:37:f7:2d:12:f6:37:c0:
91:20:d0:5c:c8:53:19:1a:1a:c9:0c:b2:33:b7:c3:46:f8:38:
73:5e:5b:be:04:be:e1:d8:59:e6:70:d3:79:6d:1f:e5:46:f2:
60:01:30:c1:45:ee:6e:55:ca:ec:b9:bc:75:f4:3e:94:a3:63:
60:1f:94:03:ef:8d:4d:3e:81:e9:8c:4b:cb:7b:06:6d:86:13:
78:64:45:b6:62:a8:c7:fa:73:24:89:ca:6d:00:4e:c9:d4:aa:
b2:a0:3d:8f:90:0c:d9:ca:73:8e:e5:cf:0f:d2:de:6f:ed:2f:
f4:14:da:38:2e:1c:aa:9e:eb:bd:3c:63:0b:d9:37:50:e1:14:
58:2b:77:fe:0d:af:30:ed:9a:ed:03:9c:1a:b8:77:7a:c0:aa:
3d:97:a5:8f:bc:ed:b2:6d:e9:59:9c:1d:65:9c:f2:72:d8:5d:
e1:d6:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:18 2025 by rpki-client