Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: qXzHaYcPNX32BPK7BI9iKpo9b/+CUHnZ/KbMtbnjkuk=
Subject key identifier: 32:20:03:6E:99:95:56:EB:6F:14:F6:B2:7E:53:C6:FB:F0:7B:A8:64
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 0198906BC21AA6DBC9CE617361FAD7F7BF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 20:00:37 +0000
Manifest this update: Sat 09 Aug 2025 20:00:37 +0000
Manifest next update: Sun 10 Aug 2025 20:00:37 +0000
Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: q8dIVPnMNd1u+souNyREHU1eJHSrqgfvz9yNwhHDmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:c2:1a:a6:db:c9:ce:61:73:61:fa:d7:f7:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Aug 9 20:00:37 2025 GMT
Not After : Aug 10 20:00:37 2025 GMT
Subject: CN=3220036e999556eb6f14f6b27e53c6fbf07ba864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:38:97:76:f9:7f:a8:cb:ca:63:e5:1e:69:
15:4e:09:f4:66:05:85:14:89:73:59:61:9f:ce:70:
1d:2c:b8:e5:1d:14:c0:29:dc:15:88:24:e3:69:08:
19:c8:f6:c4:36:c2:c2:bf:35:96:d6:56:f9:d9:82:
3f:e1:96:05:fb:51:21:4e:04:44:e8:da:0a:23:07:
d1:27:66:f3:b3:85:39:82:85:7b:00:35:d1:12:a4:
5e:b2:e2:38:fb:b9:1f:dc:a6:dd:bd:8b:c7:7e:8e:
f4:c6:64:c4:ec:81:78:7d:16:a9:43:1e:7a:e7:8d:
d6:d4:ee:a2:94:66:69:db:87:b5:3f:95:a9:e3:a8:
2f:a5:2c:bd:c9:75:d2:60:a9:fb:97:ac:94:6e:57:
38:43:5d:dc:61:7c:ce:3e:e5:55:86:36:52:19:fd:
b7:5b:b5:7b:06:8f:7c:53:0c:d0:83:6c:63:0f:ed:
53:f9:b1:4d:f8:a3:4b:07:47:69:0d:db:0c:09:23:
43:d9:20:f9:d6:3b:23:ec:31:2e:c5:69:2a:ce:c7:
b1:da:d4:c3:7c:6c:6c:03:c2:46:aa:40:1a:4a:a3:
aa:79:e3:2f:a3:d7:79:08:e5:2d:7d:26:fc:27:18:
07:a5:ec:9e:4c:3c:d4:bb:f8:a7:d3:f2:9b:16:10:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:03:6E:99:95:56:EB:6F:14:F6:B2:7E:53:C6:FB:F0:7B:A8:64
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b4:2f:00:f5:66:ca:da:83:69:cf:fe:c3:11:2d:69:c2:d7:
f8:aa:2e:fc:31:27:0a:dd:87:61:aa:eb:b1:fb:b9:eb:73:45:
83:8c:9e:9d:57:db:a5:e3:69:3a:61:ae:6d:dc:e5:83:78:82:
26:dc:f1:f9:f1:f4:4e:3c:23:c5:24:0b:8b:96:1c:bc:15:2f:
dc:df:34:15:a9:a7:fe:b0:34:5b:7c:20:ed:55:49:11:d4:fb:
fd:ab:d8:ff:d3:22:6f:67:3b:43:05:d2:18:bb:7d:e8:22:15:
fe:3d:86:0d:de:08:a3:d5:38:e1:a6:8b:97:ac:7b:8c:63:99:
d2:45:64:15:31:13:dd:80:77:c1:b3:97:78:6c:9f:cb:c8:04:
68:c2:08:46:28:af:c0:61:91:d4:63:e3:03:e3:65:6d:78:d9:
45:d3:90:ef:d3:20:93:cf:99:eb:a0:6d:5f:61:8a:48:e3:e5:
a8:8c:31:8c:52:46:ac:11:de:01:04:91:81:51:c7:21:82:55:
94:fb:4d:2e:c7:7d:2d:46:30:17:a0:85:c0:da:24:53:c8:96:
10:8d:92:ec:74:80:ef:6f:1d:fa:6f:00:3b:b3:70:33:79:38:
04:c3:4a:a6:be:c0:21:4d:83:19:5a:5e:78:8f:2e:38:3f:20:
e3:5d:96:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:44 2025 by rpki-client