Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: sw0GPXnoObpKNo2eOyAFc/XUO0S0CZy44Wdtbh9igIU=
Subject key identifier: A6:98:BA:90:00:70:D3:FD:FC:27:47:AE:FD:E6:E1:78:52:22:09:88
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019889576770562F576DD5473F1658C5CD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 12FD
Signing time: Fri 08 Aug 2025 11:01:03 +0000
Manifest this update: Fri 08 Aug 2025 11:01:03 +0000
Manifest next update: Sat 09 Aug 2025 11:01:03 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: 2F//zqZ17xuaAh/JRNMe/7xBfBXawhpeGSJc3V1VYdM=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:67:70:56:2f:57:6d:d5:47:3f:16:58:c5:cd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Aug 8 11:01:03 2025 GMT
Not After : Aug 9 11:01:03 2025 GMT
Subject: CN=a698ba900070d3fdfc2747aefde6e17852220988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:24:66:52:ad:bf:f6:d7:96:22:f9:1f:55:
b7:a5:bd:a0:75:3a:84:8b:c9:b1:0e:94:bd:e2:76:
d8:70:66:d8:37:e2:4c:e5:88:7a:66:1e:3b:86:6b:
c6:1b:09:34:2d:04:a9:3d:66:a7:b0:7f:d6:8b:7c:
fa:10:2b:16:0d:87:d9:32:61:37:29:8f:bf:53:8e:
cd:12:33:0b:fc:0f:ce:5c:98:12:f5:90:60:03:c0:
f6:64:fe:ca:9b:3a:df:41:51:b9:75:e1:5d:8c:96:
83:51:fc:ff:b3:a2:e5:d0:09:67:c0:9f:4a:ab:b2:
39:30:b7:fa:8f:b2:e4:6a:63:be:44:fc:27:df:1a:
ba:4b:6a:5c:0b:b1:cf:ca:80:6e:b7:91:e0:b5:fa:
0e:19:64:b9:3c:14:90:20:aa:e2:6c:c1:73:c3:bf:
e1:de:20:81:a4:d4:8e:ab:fe:ab:7d:6d:6c:a7:42:
93:a0:da:c5:63:71:93:71:be:29:5a:3d:9d:4c:66:
17:bd:42:ba:3e:bb:be:93:b7:be:d7:67:6f:08:be:
c4:f5:15:aa:f5:66:a6:00:c4:2b:d3:3d:57:60:84:
7f:bb:85:cd:88:79:eb:84:b9:98:71:6f:a8:fa:89:
01:16:7e:f7:09:9b:f1:39:5b:03:5b:b4:07:49:a6:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:BA:90:00:70:D3:FD:FC:27:47:AE:FD:E6:E1:78:52:22:09:88
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:92:d4:8a:90:c2:59:07:c1:18:3b:5d:64:4b:32:6d:d7:a0:
d4:f3:a0:a2:c8:5c:d3:9c:ab:10:9e:ce:42:eb:a8:28:b1:cd:
ad:5c:a6:10:a3:6c:9e:ed:98:24:87:00:20:5c:0b:6c:07:cf:
94:fb:30:1f:bb:c7:64:46:96:50:a5:28:5f:d4:af:1d:7c:d0:
8e:b8:89:74:aa:62:4d:45:ff:71:b2:0d:a5:da:d9:00:d8:cd:
fd:3f:06:a5:fc:81:ae:06:31:91:6e:b3:3c:9d:3b:fd:63:6a:
bf:0d:af:ea:57:61:95:ee:83:53:ea:40:9e:c5:55:ce:23:64:
c8:0d:b7:11:33:82:0f:11:0e:71:3a:a5:eb:2d:46:89:80:be:
3e:64:58:21:72:0e:8c:4a:60:ee:ba:21:91:2a:fd:5a:29:b0:
9d:28:b5:9f:a3:c0:af:05:be:f4:e1:28:e2:09:ca:d4:0d:6c:
15:d3:05:f6:2f:37:ef:4f:e5:72:79:95:91:6a:4f:45:2d:b6:
43:8f:d2:a7:73:ae:aa:a9:b9:63:98:42:14:07:8d:7f:21:40:
95:f1:45:a4:17:b7:92:d9:db:2d:77:8d:13:d3:99:66:b9:f0:
e6:64:a4:b3:4d:e4:9d:80:9b:3c:f4:a8:4c:e9:16:8b:76:38:
8a:e0:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:49:59 2025 by rpki-client