
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: wZgllUJhAvnrFB5UylDOkBcE/FYHgV8+/mV5AIgW/VE=
Subject key identifier: B1:08:2A:DB:43:E3:D5:3D:C5:C1:EB:77:73:95:49:1A:E2:76:E3:3F
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 019885E810EB271C4ECD35E55C0E898DD4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0D07
Signing time: Thu 07 Aug 2025 19:00:35 +0000
Manifest this update: Thu 07 Aug 2025 19:00:35 +0000
Manifest next update: Fri 08 Aug 2025 19:00:35 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: /A0KQLmvVi/IvgrOKceIQREotSBFtSfsJ6Qzm2bTO3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e8:10:eb:27:1c:4e:cd:35:e5:5c:0e:89:8d:d4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Aug 7 19:00:35 2025 GMT
Not After : Aug 8 19:00:35 2025 GMT
Subject: CN=b1082adb43e3d53dc5c1eb777395491ae276e33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:8e:07:fa:c6:24:b7:b0:4b:97:a8:73:9a:
57:a5:59:1a:53:29:fd:44:98:88:71:50:a4:f9:5b:
d1:a7:b0:74:c3:93:84:7d:b1:07:c9:a5:6c:1b:83:
e4:68:c6:12:ec:d3:ae:7b:66:a1:3c:60:96:2c:31:
bf:e1:c9:f8:80:27:53:8e:95:f8:53:9e:f4:fc:0a:
cf:a2:ac:08:7f:8e:8f:dd:b7:e4:d8:fc:e8:9c:ac:
6b:e2:80:61:66:67:74:44:20:6a:e7:46:bf:77:8b:
7a:e7:66:27:25:21:41:1b:38:1b:a5:97:02:a1:76:
a5:d7:04:01:49:2c:b5:ef:51:39:ea:39:94:14:6a:
a4:3e:b2:76:11:67:58:40:9e:39:a1:b2:41:ef:f7:
38:95:9f:f5:45:58:6b:25:4d:6e:6c:63:a4:f4:d0:
bc:f7:f3:ee:f8:45:fb:4c:ff:57:f6:11:72:ef:6a:
77:ed:72:d5:29:64:4b:78:f1:91:a7:f9:f5:68:00:
cf:b6:ce:6b:df:b1:bb:d3:72:aa:3a:e4:b1:d7:0b:
f4:47:46:e3:54:b7:4b:c4:24:ef:a1:fa:1c:65:55:
a2:f5:de:79:3a:db:83:9b:6a:3d:f7:be:55:df:6e:
e0:e4:83:91:e1:a4:90:1d:bc:18:5f:61:e4:c8:b1:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:2A:DB:43:E3:D5:3D:C5:C1:EB:77:73:95:49:1A:E2:76:E3:3F
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:31:41:0e:03:81:7b:85:2a:ef:4d:6a:b1:df:3c:ad:c0:9a:
fb:b9:de:b6:14:34:9d:09:ee:22:d2:a2:a4:08:1b:3f:73:22:
4d:d5:6f:7c:b9:ab:50:30:ff:ba:7b:12:49:e0:76:e0:9a:c8:
61:58:9d:da:9e:14:f4:d4:0d:0a:48:52:12:34:fb:a5:e9:39:
2b:19:c2:73:e9:6e:21:c4:20:9c:73:32:0f:64:6d:98:ca:3d:
f9:39:64:f6:08:53:88:6d:77:f8:97:40:27:54:97:c8:89:7c:
d8:15:d6:cc:73:8a:1f:9a:ea:d6:02:19:14:ea:c7:f4:3d:8b:
36:f4:d6:9b:81:d3:83:58:a2:e8:a4:47:f9:36:b0:7a:1f:c1:
ef:9e:e9:8e:22:91:dc:fa:54:a6:e8:f3:a3:e5:14:c8:46:10:
1b:40:d6:a7:10:16:4e:23:65:9e:15:98:a1:43:78:c6:28:52:
5d:5b:4e:0b:95:56:9c:28:0f:92:eb:82:5e:a2:f7:52:91:35:
dc:20:99:eb:11:e0:c5:6b:25:d2:ba:8b:fb:f8:88:b7:ed:fa:
47:56:30:f6:13:ae:ac:3f:9c:f7:b6:9d:f8:3a:59:c4:3d:39:
00:be:5d:e5:4f:96:a0:c3:dc:d8:4b:ae:44:ea:50:5a:3b:33:
3b:4e:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:50 2025 by rpki-client