Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: ys5IHmoFdFKLb/SMeLNNLQ89ZSGAsOEvaEiSeVWtzqY=
Subject key identifier: C3:3B:E1:05:E3:D8:FF:11:5A:25:26:A7:1C:11:FD:B3:22:5E:E2:D7
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 0198808B5647BE96EE9AABAC3C4400F7B4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 18:01:11 +0000
Manifest this update: Wed 06 Aug 2025 18:01:11 +0000
Manifest next update: Thu 07 Aug 2025 18:01:11 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: PL7FfK513fb6nxEnA2dFMooY7Si/rfIhrIdOJnhpmAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:56:47:be:96:ee:9a:ab:ac:3c:44:00:f7:b4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Aug 6 18:01:11 2025 GMT
Not After : Aug 7 18:01:11 2025 GMT
Subject: CN=c33be105e3d8ff115a2526a71c11fdb3225ee2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:0c:e7:6e:80:14:a2:8f:d5:07:58:f1:2a:
f7:c9:5f:1b:dc:c1:8b:91:5d:5c:d8:20:c6:16:9f:
13:d0:dd:ab:58:b8:c6:c8:5c:34:29:e6:e3:2b:32:
5b:91:3f:b5:1d:1b:4e:ef:3a:f9:95:bb:2b:4f:86:
dc:42:38:86:e2:68:1d:9c:dc:d0:ff:6e:87:aa:d9:
2c:d5:31:0f:08:ba:67:81:5b:5f:20:af:87:12:ed:
b1:03:77:cd:29:e6:c6:e0:0f:ee:1c:44:5c:8a:9e:
ca:ab:0f:9e:d0:da:25:92:b2:b6:ff:46:7d:da:d7:
98:f6:8d:76:f2:d1:fb:ec:34:b1:80:f1:b3:f2:96:
76:e9:55:90:e7:b8:04:ab:db:6a:a5:49:d7:c4:c7:
09:df:02:6e:cb:c8:f8:3e:75:a5:9a:a7:11:fe:15:
93:58:76:f3:df:8b:13:cb:0d:bc:a2:61:f0:4a:a5:
39:84:a3:6f:e0:cd:f9:27:98:b1:f6:b1:b1:61:34:
05:f6:b1:84:57:e6:9b:5f:8f:42:b3:40:73:4c:e6:
16:74:0f:61:69:5c:2a:9b:e8:4f:81:d2:9d:eb:b0:
77:60:c8:2c:ee:3c:1f:ee:dc:09:5a:5b:cf:4c:4f:
04:f7:b7:57:ca:d2:cb:43:9d:34:78:ad:1a:a8:44:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:E1:05:E3:D8:FF:11:5A:25:26:A7:1C:11:FD:B3:22:5E:E2:D7
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e2:0e:40:87:28:a6:ec:ec:c5:19:83:df:aa:95:a0:5c:a8:
f4:02:a2:60:0d:db:11:13:0a:c0:7a:2b:9c:50:82:59:0b:ee:
75:81:e6:33:a3:01:01:43:bd:4b:30:10:01:06:b1:f8:a4:de:
9e:05:30:88:87:db:5f:46:6d:59:f3:93:f7:f3:07:41:aa:df:
9f:2b:93:aa:79:dd:3b:e1:49:d7:52:7e:52:43:14:f0:11:5e:
ce:13:17:e2:0d:78:d5:e9:58:2d:24:16:2e:30:ee:67:c5:b7:
18:7b:ba:0b:e5:b9:61:98:2c:d2:ad:92:7b:3b:6c:9d:3c:97:
f7:c1:46:09:44:4a:93:df:98:c6:4b:dd:94:8e:1b:b1:31:61:
17:33:21:d9:45:5b:3f:bf:f1:eb:df:54:6b:29:33:fd:17:43:
0f:cd:95:f8:0f:b3:b0:15:63:98:a8:9e:7c:5d:10:14:9e:60:
dc:6c:7f:d6:da:39:7a:a9:b9:ed:5d:9d:c6:22:ae:fd:f8:49:
63:68:71:c9:2b:b7:d6:dd:ae:07:ef:33:7b:a0:ce:22:a2:37:
3c:16:0c:26:52:cf:47:2a:d9:6f:e9:e5:00:de:5f:7a:38:97:
87:43:ac:fb:17:92:b5:37:79:11:67:2f:89:a5:0a:3e:0c:ee:
59:6a:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:03 2025 by rpki-client