Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File: QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier: sGCiaNS0wW2Dwo+y7hR49ma+bMHDIGLvOjUzHmvGeok=
Subject key identifier: B3:A0:2E:83:85:02:9B:01:B5:5B:44:B1:CA:7B:C0:BA:F7:E4:1A:AF
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial: 01988E46F047CD394FBDC705634FE8E86FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number: 15F1
Signing time: Sat 09 Aug 2025 10:01:10 +0000
Manifest this update: Sat 09 Aug 2025 10:01:10 +0000
Manifest next update: Sun 10 Aug 2025 10:01:10 +0000
Files and hashes: 1: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: puyfN04I2hECQcyGA82UYZgIClO8ds8MREwg6+I98EI=)
2: o-ZlaW1WgunU3TjJVwdOR6husz0.roa (hash: 4yZiG/NqXqcKJ1Bdf8yQPmHJloI/I/ZH5JktUOUh3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:f0:47:cd:39:4f:bd:c7:05:63:4f:e8:e8:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Validity
Not Before: Aug 9 10:01:10 2025 GMT
Not After : Aug 10 10:01:10 2025 GMT
Subject: CN=b3a02e8385029b01b55b44b1ca7bc0baf7e41aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:2b:f3:03:d6:07:36:18:f1:5d:e1:3f:26:
21:f4:a9:df:11:0d:13:f4:6c:01:40:0b:75:13:f7:
df:22:b6:26:7f:4d:46:14:c9:dd:a5:2b:17:04:c7:
da:22:2a:33:e8:4e:45:de:35:a6:bf:5e:52:27:ef:
57:3f:59:5f:fe:ae:d1:40:7e:9b:08:fe:29:a6:c2:
fc:42:52:88:3d:96:f5:96:68:a1:b2:59:10:60:7b:
01:55:9c:7c:c7:11:a9:78:11:62:9f:ea:18:87:c7:
2b:fc:50:b8:d8:ca:76:10:4a:93:3a:6c:bf:7e:57:
9d:d9:16:e1:6a:c8:bd:f3:35:04:50:bc:9c:bd:09:
39:a6:ea:4a:30:fc:a9:cd:03:79:08:75:14:f3:81:
c8:68:51:02:d4:33:9d:ee:2d:d1:2d:89:8c:c3:e5:
66:4c:a1:23:56:71:a6:37:29:63:75:ac:8b:f5:ed:
8e:90:e4:7e:86:ed:d5:51:b9:5e:27:f9:90:23:94:
52:d7:63:43:02:7f:4b:1d:6a:f1:71:57:73:32:7f:
2f:50:d9:a0:48:28:0d:3f:d8:27:8c:04:ce:a9:51:
61:d1:76:6e:13:c8:c5:ce:28:ca:af:24:ac:e3:92:
59:e3:7a:93:28:f6:cc:fd:87:1a:fb:81:73:67:1c:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:2E:83:85:02:9B:01:B5:5B:44:B1:CA:7B:C0:BA:F7:E4:1A:AF
X509v3 Authority Key Identifier:
keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:1b:3c:87:e7:9d:f4:3d:73:4a:21:8b:23:0a:e7:a4:51:
2f:a8:1e:5b:62:f7:cb:23:d1:47:da:e5:ae:4e:0c:cd:81:9d:
ad:34:8c:b9:8f:67:14:fd:b9:73:a9:35:11:61:20:b8:a5:9a:
de:ac:c3:fc:88:b3:6c:8f:17:05:01:e1:79:2f:e4:31:a2:50:
31:54:71:48:a2:b1:69:54:ae:38:d0:d3:c0:62:b2:9e:20:ae:
e7:1e:4d:77:d1:48:95:8f:8b:3a:db:16:31:6b:32:96:dc:fd:
9d:c5:fc:fa:20:fe:15:7c:5e:37:ba:bd:31:f0:74:69:41:dd:
3e:ed:47:4a:28:54:30:c5:63:1a:46:92:aa:44:f7:9e:55:c7:
09:6f:d5:f7:f6:1d:3f:b3:b4:14:8d:7d:14:12:6a:af:f3:e8:
c0:2f:42:47:32:4e:80:1a:bc:ab:38:15:2c:a6:81:b8:fb:35:
88:66:19:71:27:21:34:72:c7:39:67:54:63:82:96:92:9e:ec:
44:25:9a:2d:f7:b5:41:c4:bb:1f:63:91:29:bf:c0:75:67:cf:
7f:6a:64:d9:49:09:f7:06:70:fb:ca:bc:c2:a7:1b:00:91:c8:
02:c9:75:f0:8c:da:bf:fb:df:86:e6:1d:87:3a:c1:0b:93:d9:
6a:6f:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:00 2025 by rpki-client