Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: YnrFLsw/J4GK9K7+F2/OifCVEVVOmphuj5daRlY3so0=
Subject key identifier: 15:41:94:08:B6:F7:3E:A7:7D:E9:C4:55:DB:E6:26:07:C3:6B:FA:F2
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 019874873F635A0282D1CC1E03F33AB434C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0B74
Signing time: Mon 04 Aug 2025 10:01:17 +0000
Manifest this update: Mon 04 Aug 2025 10:01:17 +0000
Manifest next update: Tue 05 Aug 2025 10:01:17 +0000
Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: qc3V5e28oRs0lKT8SFNseTbZWm8h8XOXmaZbGpr5AwM=)
2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=)
3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=)
4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:3f:63:5a:02:82:d1:cc:1e:03:f3:3a:b4:34:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Aug 4 10:01:17 2025 GMT
Not After : Aug 5 10:01:17 2025 GMT
Subject: CN=15419408b6f73ea77de9c455dbe62607c36bfaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:c5:d9:31:b2:83:9b:83:83:0f:4f:cf:5a:
86:ac:b6:e5:ca:e4:0b:f2:71:5d:3c:01:d9:d0:5f:
00:4f:ab:86:48:29:6c:9a:3c:4b:58:a3:9f:6f:d1:
aa:c7:60:e1:63:a6:36:31:36:d2:a7:e6:c8:22:c7:
93:1d:77:c1:09:a4:82:99:d1:ad:e9:63:c1:37:dc:
13:fc:7f:8c:cf:92:7b:60:8b:14:5f:5f:2d:d4:e3:
0a:c2:40:a9:61:30:10:a1:f9:33:26:a6:e2:9f:70:
37:d5:e4:37:07:9d:00:29:92:e4:f5:17:60:3b:da:
2e:5d:e7:60:da:42:75:30:1c:cd:72:26:2e:68:40:
c1:b4:4c:49:73:e1:77:f6:c1:57:0b:36:92:f7:a8:
26:cc:05:8e:b3:97:df:50:f5:07:82:b5:84:be:07:
44:0d:9c:77:b7:65:1f:03:96:72:88:48:cf:d8:f5:
71:71:e9:39:0d:5c:0a:d4:f7:86:52:f4:57:e7:2a:
48:de:34:2a:f1:1c:ce:31:f9:3a:9d:d8:a3:01:ea:
28:9f:87:4c:13:74:c4:10:58:1d:3b:37:fa:24:3b:
20:98:2a:0e:d5:9c:95:f6:6f:df:dc:14:28:4f:6c:
1f:c8:ba:b8:52:bd:0f:8e:5b:51:6d:17:d3:18:1e:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:94:08:B6:F7:3E:A7:7D:E9:C4:55:DB:E6:26:07:C3:6B:FA:F2
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:2d:3b:85:b7:ca:2d:13:69:b6:ec:3a:9b:a4:81:b9:35:
70:f4:5a:85:b4:3b:91:3b:cc:d6:2a:1e:2d:10:4c:f1:63:d1:
3a:c0:2e:b8:4d:4a:8f:fe:2e:c2:bf:27:1f:f1:fe:5d:ba:13:
89:61:83:81:ba:4d:60:1c:73:8b:ac:ac:e7:59:89:2d:f3:aa:
c8:91:22:33:7f:4a:ce:0e:71:8b:ae:00:a4:c5:b9:c7:82:ac:
b2:c9:71:2f:9a:29:3a:aa:ab:b4:10:b5:39:d8:89:ff:3b:e7:
4d:07:2a:29:27:37:de:20:25:1b:ad:c3:95:49:1f:78:76:3e:
ef:7e:7c:ff:10:7a:b1:55:76:3b:91:33:de:6c:a0:9d:6c:ee:
3c:17:ad:ad:3c:11:b3:9c:39:ba:ef:10:0a:85:89:3c:3a:d4:
58:14:e9:4b:e8:77:df:41:c5:a8:2c:d4:a8:55:59:3e:37:18:
e6:4c:f0:c9:1e:94:52:4c:f6:2c:90:3e:1e:e4:59:fe:a8:52:
c4:bd:9a:78:67:6f:fe:da:a8:eb:da:9e:ba:6e:b4:aa:65:4c:
54:2b:1b:51:f0:34:2c:7c:59:b4:cc:cf:c9:73:53:2b:a6:5d:
80:85:44:d4:06:40:32:f4:5b:4a:d9:ba:34:be:4b:74:d5:40:
4b:b5:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:48 2025 by rpki-client