Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier: eE2NorMWKPX2u8QWT5eJYC3g0ZlkKlylU5/cKulx5bI=
Subject key identifier: 6B:F2:CF:D3:43:58:35:11:6D:98:81:91:F1:82:94:55:57:3D:C3:AB
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 019897EED62B1873B6F673E0E109D2C9E693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number: 013F
Signing time: Mon 11 Aug 2025 07:01:08 +0000
Manifest this update: Mon 11 Aug 2025 07:01:08 +0000
Manifest next update: Tue 12 Aug 2025 07:01:08 +0000
Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: OGTvANgycIn5sM+QH3MOyz05wqRrgUaSd/UCfLsd8kY=)
2: WibstNWW6k-lvYl4Qh5sNtmSYhw.roa (hash: E/2K/0j7Ly/9Z6jM3FsBVp9MBphb1aZ9lSBmqs0GOgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:d6:2b:18:73:b6:f6:73:e0:e1:09:d2:c9:e6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: Aug 11 07:01:08 2025 GMT
Not After : Aug 12 07:01:08 2025 GMT
Subject: CN=6bf2cfd3435835116d988191f1829455573dc3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:de:5b:65:d1:0a:be:27:e4:55:6e:f5:c5:
b8:68:a9:7f:cc:de:61:89:23:83:a5:55:e9:4a:0c:
9f:e8:a0:b9:60:85:b5:6e:31:ce:c7:a6:1d:a1:b3:
23:c5:8e:82:70:ec:38:37:54:e7:3c:3f:1a:13:75:
29:b5:9b:74:82:b4:9a:d5:48:be:b4:d5:f4:d1:fb:
55:ac:39:f3:51:59:95:aa:d5:ef:29:ff:b3:8e:23:
57:1f:cc:bb:b9:d5:3b:76:e5:8a:3d:da:da:fe:40:
6d:d2:14:5e:b6:b1:ea:89:f8:5b:59:71:4a:75:f4:
53:ae:cc:6a:7a:31:d6:a8:4c:89:22:25:bf:fe:20:
e6:2e:ea:9f:13:fe:f0:4f:31:01:d1:42:6c:00:61:
99:1f:9b:24:9e:8e:98:39:f8:98:e5:82:d7:21:18:
0a:77:06:4b:65:0e:a4:65:dc:53:5f:07:b7:5c:41:
92:01:02:3a:e6:b6:8a:4f:1f:ab:53:72:14:6f:59:
01:57:0d:e0:b5:12:62:08:07:51:ca:7b:64:06:c6:
99:62:50:89:48:f3:51:fb:04:59:63:80:74:b4:0f:
89:e5:2e:21:91:08:9f:d6:fb:93:f4:5a:77:39:66:
fc:3f:39:d6:8c:65:e2:46:78:66:b7:9e:8a:a4:c3:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:CF:D3:43:58:35:11:6D:98:81:91:F1:82:94:55:57:3D:C3:AB
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:35:99:b5:8c:84:ff:e6:6f:80:ba:45:82:1f:8b:62:14:86:
66:0e:35:83:a9:96:13:55:39:9a:c7:ad:9c:c6:2d:30:e0:16:
9c:f2:a0:67:8b:ec:30:5e:5d:fe:49:9a:2a:e4:f7:dc:86:b5:
4b:5b:3d:bc:07:36:9c:07:01:de:a4:05:0a:45:de:08:6b:74:
4a:44:38:9a:16:dc:a2:bc:cb:16:02:f1:a9:e1:a5:99:63:3c:
45:c3:bf:95:f3:98:09:9a:bb:bd:3b:55:e3:95:4a:1c:4b:eb:
62:9b:90:ff:cd:80:45:83:a0:3b:91:3f:bd:ac:53:00:e5:de:
1f:ef:bf:46:ff:e0:4e:ce:85:a7:31:bc:bc:f3:28:f8:a9:5f:
1b:81:88:ea:69:99:69:bf:9a:70:3d:ce:31:e7:5c:e3:64:75:
81:04:8b:9d:dd:aa:d1:00:06:1d:0d:5f:c0:c2:16:fa:5c:87:
9e:bc:30:df:8d:e8:4f:86:8a:7e:06:d6:b2:ae:20:5e:4c:95:
bf:5c:ac:1c:e8:23:30:ab:83:f7:f3:34:b7:36:21:92:a6:a4:
48:08:fa:41:c9:66:ef:0d:3e:b4:10:fc:92:0f:1b:95:9f:76:
3c:eb:3e:fa:72:56:11:dc:6b:dc:85:25:66:7b:46:c7:53:8c:
4f:61:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:29:55 2025 by rpki-client