Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: U1/URET7Snrd3ITCJtJ/KnPS1VAxV8GAWrAOAkLV8uo=
Subject key identifier: D0:5C:66:C5:EF:EA:D7:ED:07:9E:1B:73:9A:54:04:00:01:D4:8C:16
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019895244C4CAEA7B54CE7AB930550A77E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0A10
Signing time: Sun 10 Aug 2025 18:00:40 +0000
Manifest this update: Sun 10 Aug 2025 18:00:40 +0000
Manifest next update: Mon 11 Aug 2025 18:00:40 +0000
Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: odHc0xoS2ABlqQX6wwuMaOLA8IIEE4glNOJNBHipY4Q=)
2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:4c:4c:ae:a7:b5:4c:e7:ab:93:05:50:a7:7e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Aug 10 18:00:40 2025 GMT
Not After : Aug 11 18:00:40 2025 GMT
Subject: CN=d05c66c5efead7ed079e1b739a54040001d48c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:87:f0:ab:0f:ea:f3:9e:26:12:f1:37:d6:
dd:bb:dd:a0:cc:7b:48:18:79:3b:f1:e8:71:12:c0:
ec:9a:88:ab:09:74:b4:1d:9c:83:8d:9e:c6:23:a8:
e7:70:70:fe:cf:b1:70:b8:64:2f:1b:e7:3e:d6:53:
05:6e:76:dd:68:fb:e2:ea:9b:71:24:d6:5b:1d:2b:
e0:80:2a:56:0d:9f:0f:72:70:11:d0:ca:4b:6e:6a:
b7:92:00:d4:e8:7c:41:46:64:69:43:6b:e6:31:96:
76:a4:84:79:c5:08:9b:cb:b2:cf:a8:95:9d:57:de:
6b:fd:cf:ff:9d:65:52:ee:68:a2:d9:c8:29:83:85:
58:fc:a8:79:35:0b:51:99:ae:eb:71:9e:ff:4c:14:
b3:98:ac:a9:d0:b6:7f:8a:b9:0b:38:77:83:3c:3f:
f7:95:b2:94:c9:99:92:7a:61:73:54:96:5e:ea:eb:
4d:63:ea:0e:c8:5e:30:2c:00:89:89:1a:f5:2d:6f:
ca:e8:43:7d:fa:1b:4b:e4:aa:29:06:f1:af:aa:f0:
c1:94:31:85:4d:05:53:03:93:7f:98:be:f1:7b:86:
6d:94:d2:86:22:66:29:74:a6:5c:76:69:b5:fc:2b:
df:27:78:84:ec:aa:8c:35:5f:bd:9d:4c:b3:c4:01:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5C:66:C5:EF:EA:D7:ED:07:9E:1B:73:9A:54:04:00:01:D4:8C:16
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4f:aa:4f:54:38:08:29:b1:30:28:17:3c:d4:03:d4:97:54:
74:17:74:bf:b7:60:00:13:25:1c:2b:9b:a6:3d:ac:f8:4b:34:
4b:2e:bb:25:eb:35:bf:9a:d4:4a:20:31:1f:0f:0f:4e:db:a6:
c4:77:f5:52:c2:19:18:02:14:b1:d7:37:57:be:18:8f:1b:ae:
af:9d:1d:85:69:d5:b7:ee:24:6b:49:77:f4:89:ae:79:61:de:
70:f6:0c:a6:5c:41:df:39:53:cf:39:3d:db:a4:31:b9:e0:46:
f9:8e:5e:19:2a:01:f5:69:14:26:70:9e:75:94:94:db:2f:da:
be:25:82:38:42:67:d3:15:67:fe:84:3f:4f:3e:90:d1:2a:bc:
10:0d:10:1c:04:7e:de:ba:06:76:44:ba:a9:28:4e:cd:ae:de:
a0:91:d0:c7:fa:4f:01:d4:2d:dd:01:03:08:fc:20:51:fc:eb:
74:3d:ee:c9:04:51:2a:31:ed:0b:06:91:77:7b:b3:63:72:0d:
a4:53:fe:ca:b1:6b:e7:63:c4:1c:78:1c:1d:32:d7:10:40:1f:
46:54:7a:82:a1:8b:f7:dd:50:92:eb:4d:2d:f3:5e:a0:b8:f4:
e0:ec:b0:9a:07:94:a6:3a:b6:eb:77:ff:60:1e:37:d1:cb:4d:
53:f9:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:36 2025 by rpki-client