Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: LBXCgor8kPykuITGTkLcVUvjraf69aEo0sEE4yYbH50=
Subject key identifier: 0E:4B:A4:32:77:2D:E4:07:8A:A1:9A:F4:9F:08:6A:A5:23:43:DD:E5
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 019873068004FFC1F1EA423EBEB06EAC0964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1266
Signing time: Mon 04 Aug 2025 03:01:02 +0000
Manifest this update: Mon 04 Aug 2025 03:01:02 +0000
Manifest next update: Tue 05 Aug 2025 03:01:02 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: Ct7q5aEaO5lJKVcj7RW37zgsvwjbyobkXVwJgElNF/E=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:80:04:ff:c1:f1:ea:42:3e:be:b0:6e:ac:09:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Aug 4 03:01:02 2025 GMT
Not After : Aug 5 03:01:02 2025 GMT
Subject: CN=0e4ba432772de4078aa19af49f086aa52343dde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:32:c0:a1:81:1e:20:05:9c:21:5f:23:2e:
0e:13:58:1c:e8:b3:d7:36:60:4e:19:ac:e2:bb:85:
a6:35:40:ab:32:ab:a0:dc:07:ed:9a:93:8b:28:3d:
05:9c:eb:22:58:14:1f:4e:08:a8:5c:14:4e:73:92:
dc:ae:f1:d5:84:7e:02:54:19:af:51:9b:ae:81:4f:
5d:4c:81:ca:8b:e2:47:fd:f4:45:dc:9a:35:21:25:
5d:f3:07:67:ed:b8:21:bd:d2:e9:cb:2b:b3:32:3b:
1e:5c:b6:b6:66:ee:8a:64:86:37:d2:41:24:67:d3:
62:ea:f4:ae:d4:f1:d8:0e:2c:bf:ee:3c:27:2c:0d:
a7:d1:9b:82:98:90:fe:6e:60:0b:4e:d6:ca:18:1f:
d7:01:fe:e9:3c:ec:f9:4f:16:07:f5:db:26:e8:c3:
37:24:cc:52:d4:e8:9b:b4:bd:fc:0a:21:1c:f8:8b:
72:74:3a:c1:77:89:92:10:ce:4f:7a:c8:f9:65:39:
40:49:50:f7:c0:4e:45:56:19:be:2a:fe:e8:29:39:
39:07:84:7d:92:03:ff:d7:07:90:0d:ec:32:47:ed:
61:af:f2:ef:99:af:d8:c6:65:a4:0c:ff:6d:3b:89:
de:e1:5c:a6:02:36:c3:04:e4:54:e3:fb:de:ac:cb:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4B:A4:32:77:2D:E4:07:8A:A1:9A:F4:9F:08:6A:A5:23:43:DD:E5
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:57:91:71:3b:81:ab:c3:61:31:df:28:83:87:6c:8b:69:ef:
b9:93:1b:39:08:03:34:ac:f4:c6:b5:9b:98:3c:a4:5a:d5:96:
1e:6a:4b:38:66:9a:3e:ff:9a:2f:47:d9:46:e9:88:a0:68:be:
67:ae:c5:49:ca:21:b2:52:84:2c:de:18:26:65:a3:05:25:f7:
f3:9e:bf:0d:31:35:83:1a:0a:9f:23:75:ca:c6:36:48:7e:49:
53:a9:55:ff:15:72:0e:3f:73:a8:d8:c8:2c:53:58:c5:18:c4:
f3:92:31:35:25:da:26:68:f1:42:90:98:6d:01:a1:0a:9b:83:
c8:32:39:81:89:3e:44:61:21:03:23:88:61:1f:4d:b4:3a:82:
71:4a:a7:67:59:95:ed:9d:c7:65:bb:0e:e1:07:7b:2c:56:32:
a6:6c:8d:6b:3c:6d:a6:f2:98:61:85:0e:c2:ce:f7:1b:66:1e:
2a:d3:c4:a6:18:30:6e:49:b0:35:1e:5b:86:c7:a8:f4:e1:6d:
a7:ed:74:f4:73:2b:37:cc:c2:67:31:ea:70:ac:cd:12:76:7a:
8f:e1:fd:ed:b3:ed:e4:63:0c:78:5b:88:36:60:5b:db:c1:f3:
99:9c:9c:f7:5c:11:7b:c7:bd:a7:99:e1:6d:6a:a9:59:93:0b:
bf:b4:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:37 2025 by rpki-client