Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: cOK6ftwxgvI8GCv3MUoug5oUQslltrnd3+I2bvMqeuM=
Subject key identifier: 5F:79:E8:4B:6A:8D:2A:AF:45:CD:8A:87:45:51:94:7D:3C:1C:DF:31
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 01988DD8F763397AC246F056D79549DDAD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 1140
Signing time: Sat 09 Aug 2025 08:01:03 +0000
Manifest this update: Sat 09 Aug 2025 08:01:03 +0000
Manifest next update: Sun 10 Aug 2025 08:01:03 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: iKNnDVHxr67PFCXHloPnVQdsNnBX8b0M8qDy0/HyyxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:f7:63:39:7a:c2:46:f0:56:d7:95:49:dd:ad:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Aug 9 08:01:03 2025 GMT
Not After : Aug 10 08:01:03 2025 GMT
Subject: CN=5f79e84b6a8d2aaf45cd8a874551947d3c1cdf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:a6:b9:f7:ea:9a:a0:98:b3:7b:28:c4:66:
16:30:76:6c:59:22:78:f5:9d:d0:5d:eb:3d:17:39:
91:f3:53:e9:5f:e8:bb:60:17:2e:12:9f:8b:f6:f6:
cb:d4:9d:71:f3:9b:3e:d0:6a:53:5e:8f:dc:f6:da:
a4:20:37:8b:eb:fe:4e:43:1e:98:ff:8a:09:e6:e0:
3f:06:a0:cf:2b:5d:2d:28:9f:10:b6:12:6c:86:4f:
cd:e3:8f:a4:2b:1e:32:5d:f3:ee:e9:cf:b5:89:4b:
66:06:5b:ae:bf:a9:6b:23:74:e9:0a:bf:fe:67:ae:
0c:e5:6e:bd:c7:9e:f1:79:fe:11:a4:88:fd:fc:35:
96:6f:78:78:81:39:ea:f4:6c:ce:b6:02:1a:d7:05:
98:2a:41:06:9e:ee:e1:6f:ac:53:ee:a6:83:84:06:
a9:a9:04:1f:b5:1b:10:bf:56:4e:36:2c:4e:1f:92:
b8:32:b7:a0:fc:79:18:c9:52:b5:db:35:e1:5b:95:
d6:c7:9b:01:58:d2:97:d0:7f:b3:e6:f8:01:9e:9a:
39:70:95:87:23:53:e9:44:d7:de:f8:e5:d9:d4:13:
31:3c:88:17:d4:d4:9f:95:19:b8:e7:fd:67:8b:7a:
80:bd:1a:af:64:85:b7:15:41:96:f9:66:b8:41:2d:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:79:E8:4B:6A:8D:2A:AF:45:CD:8A:87:45:51:94:7D:3C:1C:DF:31
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:99:5f:11:40:7e:b0:e2:bd:aa:95:80:b5:48:7c:86:81:5f:
62:88:85:91:ec:18:62:43:0c:a9:60:f0:6c:85:43:5d:aa:8d:
a9:99:c9:6e:ab:91:59:f3:f3:dd:bc:38:6b:c4:21:e0:76:ab:
19:11:f0:59:77:ce:eb:1b:3a:0d:38:65:38:8e:22:71:c3:56:
fd:23:9c:ab:c1:9d:1a:3d:c1:ad:5d:a6:2f:d8:23:6d:ea:a5:
65:51:c3:c5:7a:4b:8a:52:a6:5c:44:04:0b:0c:71:8d:08:2a:
b2:52:ee:ea:6c:ce:82:c9:06:7c:4e:d9:86:3a:00:5a:05:84:
b5:c1:b6:e6:93:c3:e5:ed:9c:21:d4:5b:c3:29:b2:c2:9c:f1:
3d:e9:51:b3:84:4f:1f:3b:e7:23:33:c1:5d:58:7d:05:26:16:
e0:c5:19:0f:76:da:ce:65:f8:16:f1:e8:de:41:0c:87:1b:9c:
bb:5a:b9:79:66:7d:61:30:0d:fc:9f:d8:a0:b6:f3:ca:64:42:
c5:7e:26:b3:dc:76:5e:90:e5:f9:d5:5c:c7:4b:81:43:c1:d6:
d4:65:d8:e2:15:17:56:1d:1f:13:36:93:90:99:a3:c8:b4:ae:
8a:37:17:2f:06:93:96:0f:0e:25:13:6b:5c:70:ec:8b:ab:9f:
b8:75:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:29:53 2025 by rpki-client