Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File: QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier: v25qsFSdkOHIzhzsUbQz/pzaLUmm+q9eMaQJSnVWbS8=
Subject key identifier: 00:39:42:51:1F:5F:46:51:E2:79:B7:91:0A:4B:92:05:D7:21:52:C7
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 0198925A6DEEDF49CE8EC72401E8787F5557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number: 060B
Signing time: Sun 10 Aug 2025 05:00:56 +0000
Manifest this update: Sun 10 Aug 2025 05:00:56 +0000
Manifest next update: Mon 11 Aug 2025 05:00:56 +0000
Files and hashes: 1: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (hash: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=)
2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: JuNe+XKjmwlAWI09WwYnA8e4tbZKckUFjcYYwPt6S/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:6d:ee:df:49:ce:8e:c7:24:01:e8:78:7f:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Aug 10 05:00:56 2025 GMT
Not After : Aug 11 05:00:56 2025 GMT
Subject: CN=003942511f5f4651e279b7910a4b9205d72152c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:54:38:30:6d:ce:2d:c2:76:10:42:93:6d:
49:0a:0b:6f:c3:84:18:42:69:b9:69:f1:73:39:61:
f5:36:06:00:0d:9e:73:4f:da:c7:4c:98:41:8e:52:
ba:b9:a6:57:57:7f:73:46:f8:51:a8:f9:63:0b:39:
b3:2b:9e:f0:0e:06:f9:09:bd:fb:f7:cc:9f:55:c3:
de:9e:9c:c8:6e:3c:c3:2b:cd:5c:d7:56:3c:27:dd:
53:06:86:2a:a1:79:49:ce:3d:70:74:0c:78:9d:d3:
45:85:60:1c:3f:f4:80:f7:86:36:33:0b:6b:74:5a:
20:b6:5e:1f:f9:b3:d9:22:d4:24:6b:eb:ae:c6:c5:
c1:2f:96:b3:85:87:f1:60:19:d8:35:44:d3:83:2a:
36:19:49:45:ea:fd:39:03:ba:97:0b:13:96:b1:7d:
65:48:2f:d3:53:29:dc:be:f7:d4:10:ea:94:6e:f8:
fc:17:a5:2f:3d:5d:95:14:d6:dc:d3:cf:1a:91:1a:
6f:cf:4c:41:79:62:0e:37:45:39:37:3b:7e:01:81:
b5:1a:38:15:44:e0:6f:62:94:3f:31:8c:a2:5a:aa:
1d:9d:90:a1:ea:8e:22:69:4f:73:28:2d:74:04:9a:
3a:fa:12:b8:a3:a3:4f:0c:f8:07:b0:72:2b:85:39:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:39:42:51:1F:5F:46:51:E2:79:B7:91:0A:4B:92:05:D7:21:52:C7
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:89:ff:39:c7:0c:bf:01:fb:e8:c1:d3:17:e3:0c:47:8e:0b:
35:6e:5e:08:cc:e6:0e:34:ff:ee:ee:29:24:97:7e:e8:b6:85:
03:ba:60:11:9c:db:28:c3:23:df:61:fa:b7:f9:cd:19:7d:d0:
d4:7c:a7:16:be:5c:a5:de:5b:22:d0:88:cd:31:99:4c:16:0b:
5c:14:c7:55:38:01:3b:a2:94:ec:c2:c4:5a:d9:86:7b:96:e3:
5b:ef:2f:68:b3:5c:1b:0c:9b:7a:2f:c1:3e:a6:54:20:f9:3d:
25:8a:88:e2:4d:e4:66:18:f6:52:3a:32:eb:e6:92:7d:08:f2:
e3:7b:7f:b8:b9:93:82:3a:e3:11:54:87:fd:43:cd:61:07:10:
21:f3:91:34:fa:e3:2e:fb:40:b4:b1:95:2b:2c:7a:9b:49:b6:
30:ab:12:af:65:69:30:81:ec:8e:64:a4:9b:b8:4f:c7:63:28:
2a:a0:40:a3:f4:db:c6:12:50:80:7f:ae:de:c7:78:b1:9f:51:
79:06:d4:fc:e8:76:f6:d3:25:05:ee:26:08:5a:ff:1d:2d:ff:
b3:85:73:a2:84:43:eb:5c:bb:f2:f6:44:8a:57:14:f7:da:43:
6e:eb:2c:4e:6d:f7:ff:af:1c:75:03:f0:fe:6e:80:f8:1d:70:
e0:73:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:01 2025 by rpki-client