
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: hI96WxQQCP8nHFGVx4zFPnuPC4sTvzB/5gSxiEmOStw=
Subject key identifier: C2:B2:7D:F1:82:05:2D:C9:90:FD:BB:A9:B1:0B:DD:71:B2:B1:D7:51
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01988B7CF3668DCDF61463CB9F8BE2518EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 21:01:18 +0000
Manifest this update: Fri 08 Aug 2025 21:01:18 +0000
Manifest next update: Sat 09 Aug 2025 21:01:18 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: 6adNfU7XQVFngsWcBJt5pYo3svD5SVR+hcTf32HyEUU=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:f3:66:8d:cd:f6:14:63:cb:9f:8b:e2:51:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Aug 8 21:01:18 2025 GMT
Not After : Aug 9 21:01:18 2025 GMT
Subject: CN=c2b27df182052dc990fdbba9b10bdd71b2b1d751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:f8:bc:6e:49:f8:db:ce:f1:c9:22:95:64:
85:aa:f7:de:a3:e0:32:f3:28:21:cf:88:ec:fd:3e:
0a:2b:e9:34:70:05:d5:92:60:c5:93:ce:38:d7:89:
7c:5d:6b:28:c2:0c:f1:0b:a7:17:29:fb:3b:60:1f:
31:de:53:bf:c8:1a:cf:30:ec:2b:4a:4d:61:5c:47:
13:e8:72:52:dd:34:e8:aa:c5:a7:88:13:0d:37:c9:
f2:42:34:c1:f4:2b:00:74:cc:23:52:b5:4e:05:22:
1f:10:47:ec:5a:c6:76:fa:54:e5:11:d3:54:30:d9:
a5:9d:0f:45:90:3e:6c:cb:13:64:2d:ca:d3:3a:6d:
ea:6e:f6:32:31:52:07:be:e7:4f:b0:78:4d:21:67:
fc:06:69:af:67:11:e9:25:a3:e9:ea:cd:5b:c4:c2:
51:97:e1:9d:2c:cb:3d:fb:72:01:74:83:12:24:5e:
d2:34:b4:88:71:fb:1b:31:1f:cd:22:7b:46:c4:33:
e4:27:54:66:c8:44:bf:92:68:3b:8b:ea:d0:1b:11:
e9:a9:78:21:7b:d0:a4:05:2b:4d:b5:60:5e:0a:72:
0f:a6:37:ad:a2:dc:29:20:b0:fa:aa:d0:23:2a:49:
f4:36:18:e1:12:91:a2:b9:1f:f2:1c:58:0f:ad:57:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B2:7D:F1:82:05:2D:C9:90:FD:BB:A9:B1:0B:DD:71:B2:B1:D7:51
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3b:48:01:81:50:39:e7:6f:a8:06:7d:81:37:ae:9f:b1:87:
70:d0:b9:aa:00:95:e7:e0:e9:e2:f8:37:2b:70:17:cd:28:b8:
69:21:f0:de:4e:e4:5a:78:f8:39:8b:63:8b:57:b0:a2:eb:45:
db:0f:a1:0a:82:38:a8:6f:ba:36:9b:15:dc:ce:1a:1f:9d:ee:
f3:e1:77:37:bc:57:49:fa:16:f4:a7:3f:6e:5f:0d:25:2a:ae:
e6:25:e5:22:43:07:bc:27:1b:54:e6:79:77:3f:8c:52:4b:72:
05:9e:2f:10:c7:63:a8:ad:cc:88:60:eb:3b:52:67:0d:a9:70:
4c:4f:e2:81:c9:82:ce:1f:5d:88:40:70:9a:fb:e9:1a:f3:88:
d6:0f:2d:c7:64:22:25:09:5a:1a:7b:6a:be:02:23:83:c9:89:
44:9f:7f:eb:54:2a:59:38:99:6d:63:da:33:f8:ae:fc:70:fb:
ba:c7:97:a0:81:cd:7b:8f:36:d0:b0:99:30:94:be:41:aa:3d:
fc:0e:3f:23:de:53:9f:f4:84:a9:54:c8:50:f2:c5:ee:dd:7b:
43:fb:5e:73:39:b9:9a:33:70:e8:70:c7:cb:af:10:b4:05:db:
b8:41:9c:b9:26:4e:c5:b0:9f:68:30:fc:38:ea:6b:e3:f4:4b:
fe:cc:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:45 2025 by rpki-client