Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
File: QfIoYMpivSg4-DKPF4OdHoYI0m0.mft (raw, json)
Hash identifier: 1d1UWkPnBnNiNyQtzIXKMGcxHd/Ef3kw9AfAPsOxPio=
Subject key identifier: BC:D8:36:0D:AC:D6:2F:A8:BF:B9:1A:C3:44:98:D2:AD:D6:7C:CF:CB
Authority key identifier: 41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
Certificate issuer: /CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Certificate serial: 01988AA107E068BEE2D6F3E17415FAD702B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
Manifest number: 01FC
Signing time: Fri 08 Aug 2025 17:01:05 +0000
Manifest this update: Fri 08 Aug 2025 17:01:05 +0000
Manifest next update: Sat 09 Aug 2025 17:01:05 +0000
Files and hashes: 1: QfIoYMpivSg4-DKPF4OdHoYI0m0.crl (hash: aDc3XT30+KiyYYPpiut8lPliBk/T0AfT0kOuc9RacoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:07:e0:68:be:e2:d6:f3:e1:74:15:fa:d7:02:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Validity
Not Before: Aug 8 17:01:05 2025 GMT
Not After : Aug 9 17:01:05 2025 GMT
Subject: CN=bcd8360dacd62fa8bfb91ac34498d2add67ccfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:7b:5f:be:8d:09:18:f2:76:a7:b1:a4:33:
53:11:fc:87:af:37:57:8f:6b:bc:5f:43:ef:6f:83:
1c:3e:5c:59:e8:27:fd:41:ab:8b:0d:9c:2e:d7:f0:
9f:07:5c:f2:eb:38:19:a0:f5:d4:3e:48:d9:e7:3a:
68:2e:82:91:a5:75:ef:40:34:df:6c:0e:ac:7b:5b:
1f:8c:5e:0e:b4:a4:fd:c4:fc:6c:b9:e5:a2:18:d3:
61:ca:73:3d:68:97:3c:5c:16:15:bf:cb:26:e9:21:
7e:a2:24:45:36:e6:cb:02:18:4c:db:df:b7:12:70:
24:8c:b7:ab:2c:d8:73:01:55:c6:81:a6:ad:90:39:
4e:c5:11:56:b0:3e:c4:31:f6:fa:dc:19:8f:52:ad:
cf:b6:1a:89:5d:29:fb:da:84:2b:de:0e:a9:4e:6f:
c4:9b:6d:d5:a1:34:9c:bb:c5:00:b3:f1:d9:41:30:
09:a0:df:f4:95:0e:39:0c:e7:ae:d7:91:c1:8e:aa:
9b:0a:48:27:e2:b1:e9:6b:d2:cb:c4:3d:28:f6:df:
77:a5:af:e6:0f:4e:a5:3d:4a:e9:5b:3c:ad:4f:3c:
ec:c9:70:87:1f:09:24:5e:9d:16:6f:39:f5:88:7e:
c3:f7:ea:b7:14:13:21:f3:70:f5:ac:ef:1e:88:a7:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:36:0D:AC:D6:2F:A8:BF:B9:1A:C3:44:98:D2:AD:D6:7C:CF:CB
X509v3 Authority Key Identifier:
keyid:41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:33:a9:b0:18:53:2d:7a:83:d3:b3:9d:b6:c1:0e:b8:9e:
78:b5:72:52:87:05:00:45:c4:cd:26:94:6a:4e:5c:1f:ac:54:
cc:e2:05:48:e8:07:0a:4c:84:08:f6:6e:f8:93:15:33:b4:d6:
83:23:9d:3c:53:eb:53:ce:b5:c9:2f:0f:ac:52:95:37:91:3f:
c8:78:93:63:2f:09:65:50:5b:38:ec:04:03:c6:b7:d8:49:9b:
ed:8d:79:e1:5f:22:29:6f:09:ef:78:c7:8a:e9:13:4e:41:e0:
2b:2c:33:fb:89:47:8f:7d:ad:01:92:7f:67:13:18:f5:e1:a4:
af:ed:dd:3a:e6:c1:44:64:a9:d2:fb:17:74:d9:8e:74:29:84:
26:8d:45:e2:85:f0:10:c9:90:22:ca:b2:d4:0f:d8:b2:cc:17:
39:77:7c:1f:f2:fa:79:e8:44:21:11:97:30:a4:ba:7e:e8:a1:
8e:cf:5e:cf:a7:b1:d6:9c:57:5e:bc:ee:49:73:84:75:a0:5f:
20:73:39:a4:20:d3:c8:19:db:cd:70:74:71:79:29:c8:c5:26:
dd:35:e4:99:3f:a0:7b:e6:12:a8:84:29:ed:f7:32:05:5b:5c:
f6:63:c1:03:d9:dd:00:94:e6:a7:c8:3d:dc:fb:70:4f:23:8a:
8d:38:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:57 2025 by rpki-client