Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: VgCHBCC1LCZ7pne2AaOgEqvZ+6fkAAguCzpafZJl6U8=
Subject key identifier: 26:3D:52:E0:BA:4A:52:D6:B0:F9:A5:27:5B:94:1F:A2:DB:3C:15:8B
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 01987E2EE085F61A7827BB3C9CD1B42A2BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 15AA
Signing time: Wed 06 Aug 2025 07:00:58 +0000
Manifest this update: Wed 06 Aug 2025 07:00:58 +0000
Manifest next update: Thu 07 Aug 2025 07:00:58 +0000
Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: MsPySK6JD+A8HInYAJh2b+G5lm1hTDnwFS1ltJBq9zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:e0:85:f6:1a:78:27:bb:3c:9c:d1:b4:2a:2b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Aug 6 07:00:58 2025 GMT
Not After : Aug 7 07:00:58 2025 GMT
Subject: CN=263d52e0ba4a52d6b0f9a5275b941fa2db3c158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:59:30:ba:5b:4f:49:47:bd:6c:b6:e3:e3:
7a:83:cd:24:a9:c0:ba:57:2a:53:ff:05:78:ee:45:
b9:4c:e7:99:28:24:75:ac:fe:f1:3b:ad:49:05:87:
3a:a6:3d:38:04:76:cd:a3:73:aa:3b:02:e6:a6:80:
7d:37:10:c7:59:6f:71:cd:0f:cb:72:41:5b:de:28:
ad:13:e5:e4:be:73:26:95:3f:41:5d:92:ea:c5:23:
a1:a5:b2:3e:86:c1:23:7f:26:93:e3:3b:1b:c9:9f:
44:a8:dc:3d:60:ce:ac:f1:8f:f9:8b:70:da:c0:0d:
6f:ea:5c:19:76:17:b1:61:4e:84:66:ee:55:5c:f3:
02:17:dc:46:fb:6f:50:c1:fa:d5:be:ac:45:e4:91:
a2:4c:9c:e9:50:23:5f:76:63:18:23:5b:de:cd:d5:
bf:61:6a:1d:cf:67:a0:fc:9c:23:71:61:48:71:80:
1a:8a:03:b5:d7:fc:8b:ca:31:96:35:91:41:2d:f4:
b3:2c:14:23:ba:25:a7:0e:9d:c2:5a:c9:cf:12:e7:
22:53:3d:89:41:8d:cd:64:98:35:a8:ce:8e:51:d2:
c5:d4:95:40:cc:a1:ef:4d:dd:86:2f:19:29:af:9f:
97:1c:b2:f7:f2:29:e2:b5:b4:12:eb:16:27:21:ad:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:52:E0:BA:4A:52:D6:B0:F9:A5:27:5B:94:1F:A2:DB:3C:15:8B
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:72:d4:34:2c:7f:38:11:e1:bd:0a:1c:b2:40:a0:15:a9:62:
ab:75:45:86:74:58:d8:e3:54:32:a1:1e:8e:90:05:15:74:9d:
e8:0f:82:3e:e1:6c:5b:37:25:95:62:1f:e2:f3:34:7f:89:e8:
ea:cb:fa:a4:97:41:78:12:53:96:85:4b:11:f4:6a:24:48:55:
bb:91:38:7e:0b:d7:13:80:01:35:9d:d2:a4:14:2d:0f:52:f6:
bd:24:73:77:bc:62:e3:00:5f:fb:51:01:11:cc:1e:aa:b8:82:
5d:66:8b:69:21:d9:4c:fc:30:a1:7e:6c:68:57:ef:46:f2:e6:
4a:40:f3:75:da:ea:0e:4d:3a:60:4c:80:a6:85:2b:ff:65:0b:
7f:cf:ff:d8:16:c7:a0:20:72:4c:49:50:0e:3e:3f:c2:2a:7a:
4e:e3:9c:ea:58:02:69:e1:d3:3d:7b:9d:31:4c:b4:6c:6b:25:
87:44:b7:b2:b8:84:b6:12:da:28:88:ab:f7:1c:e0:bb:17:84:
28:5f:6e:39:ff:37:2e:35:7d:23:66:08:95:46:c8:86:f6:48:
12:94:4f:83:7e:c3:b2:80:fa:e4:34:3b:3a:67:c0:12:3c:0d:
03:e6:bc:9e:f6:7d:35:71:94:8c:50:57:7a:b6:ba:68:95:5a:
c9:b9:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:24 2025 by rpki-client