Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: i1Af2ZSIgZU8xEQIwmw+F4PTYrlGKsUXCjvz4uqZVMM=
Subject key identifier: 17:0C:D8:70:F0:D9:52:D4:F6:25:8A:75:4D:2C:C5:98:46:3F:36:F0
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 0198971330C5E504E0C90AD7B26AE2A7D650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 031A
Signing time: Mon 11 Aug 2025 03:01:13 +0000
Manifest this update: Mon 11 Aug 2025 03:01:13 +0000
Manifest next update: Tue 12 Aug 2025 03:01:13 +0000
Files and hashes: 1: DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa (hash: V+Me01+23/zbVQCoEw1CvcMCR84Y0P8j12b7Z3im4Sk=)
2: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: OT5CMy0jy72X/Gs2lzkQpEh6ixhT83PgSxHQ3fGRjyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:30:c5:e5:04:e0:c9:0a:d7:b2:6a:e2:a7:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Aug 11 03:01:13 2025 GMT
Not After : Aug 12 03:01:13 2025 GMT
Subject: CN=170cd870f0d952d4f6258a754d2cc598463f36f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:be:d5:71:68:40:19:16:b5:79:7f:c6:0a:
7d:ca:46:8d:21:ed:e5:74:19:91:48:86:f7:22:55:
cd:95:62:fa:3b:9a:51:1d:ad:55:c7:c4:76:fe:a9:
d2:8d:a5:4a:33:74:ef:fd:81:e1:69:b0:63:13:bd:
a7:ce:e5:6d:a1:46:1f:b7:c9:28:e0:4e:12:3f:06:
b4:02:dd:e2:5c:a1:a6:6f:5e:4b:3f:67:33:9c:03:
a2:09:24:c6:09:08:f7:a6:5a:50:3f:e9:c4:18:d8:
41:c1:e3:c5:a3:58:a8:f5:a3:22:60:fd:a2:2b:c7:
85:8b:d7:14:c0:38:e9:d0:60:89:48:25:8e:7e:50:
ca:64:9b:e0:bc:84:6b:b2:39:49:33:1d:e5:ea:df:
74:9a:4c:8f:29:ab:38:f5:a1:89:1e:fd:c8:9c:20:
c0:27:8a:71:c6:40:ed:ba:2e:ab:c8:11:c1:ad:04:
22:06:fc:64:a4:4f:ed:f6:90:36:7e:56:dd:2a:52:
4e:ee:e5:a1:26:4e:35:5f:45:b6:25:5d:8d:6e:ee:
57:c0:98:49:da:e9:52:f5:8c:d4:7f:41:c2:07:ef:
29:b0:b6:e3:c2:48:c3:30:6c:21:53:94:dc:dd:d9:
41:41:1f:92:d2:2c:a3:29:25:5b:10:93:95:b5:42:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:D8:70:F0:D9:52:D4:F6:25:8A:75:4D:2C:C5:98:46:3F:36:F0
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2f:32:6a:b9:5f:9f:38:5f:cb:b2:a8:fd:82:4c:49:d2:40:
80:5c:88:1e:76:4b:83:ad:68:d2:a4:ff:fc:fc:7e:89:80:ef:
28:fb:26:2e:74:21:db:40:d2:9c:0d:c5:5a:b0:a2:b7:8e:0a:
2a:eb:20:96:6a:59:9b:78:1b:44:a7:2c:7f:07:28:af:23:44:
b3:f2:d5:1e:22:c9:cb:25:79:12:81:90:cc:db:0e:07:1d:27:
50:75:bf:a7:f8:1f:3b:85:d9:f8:da:2f:37:27:1d:55:e5:1a:
59:99:e6:8d:84:6c:a5:53:34:9b:dc:8b:9a:17:b5:3e:00:1b:
8b:e2:08:dc:84:81:19:8b:cd:61:d1:d0:45:de:16:e9:78:ec:
35:1d:f3:1f:2d:3a:4d:a1:f1:da:31:ef:fb:96:3a:ce:59:e5:
af:f6:93:ff:e7:3a:a9:f4:ce:6f:43:69:7b:27:cd:a7:ec:9c:
3d:9d:9f:bc:e2:61:3f:8c:e9:93:ed:80:71:31:b9:ac:6f:6a:
27:04:c6:e7:8e:02:0a:c5:4c:2a:98:6a:a2:a4:d3:7b:aa:38:
bb:1e:ac:db:2a:5d:c8:fa:45:56:39:46:5e:b7:7f:29:03:1a:
18:c6:93:bb:82:be:52:73:d9:af:fb:a2:b1:2e:ac:54:a7:0d:
26:67:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:16 2025 by rpki-client