Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: a3/gfevXJRMVy2UdPEVDtnHpEy+i5mOl8RLJZYO2BxI=
Subject key identifier: 5C:13:47:32:E1:1A:54:3F:22:D2:33:4C:EB:20:F8:8F:AF:62:16:2A
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 01988B100BA573647370EF60EC47264DB86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 0517
Signing time: Fri 08 Aug 2025 19:02:21 +0000
Manifest this update: Fri 08 Aug 2025 19:02:21 +0000
Manifest next update: Sat 09 Aug 2025 19:02:21 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: itzm0W+T1YLGz+5WVPMp76DP8qdU0sMP/68Z01oVMCc=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:0b:a5:73:64:73:70:ef:60:ec:47:26:4d:b8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Aug 8 19:02:21 2025 GMT
Not After : Aug 9 19:02:21 2025 GMT
Subject: CN=5c134732e11a543f22d2334ceb20f88faf62162a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:0f:86:bb:d6:98:ec:d1:7f:97:d9:76:5c:
f4:c1:eb:3a:5d:b8:74:13:a0:23:d9:a5:f5:39:20:
3e:64:6d:ac:0d:18:77:51:9c:43:ec:1f:7e:69:98:
f2:b3:dd:b2:94:de:8a:e5:fd:5a:1f:4e:75:d2:7b:
68:a3:cf:06:e6:e1:f3:d2:ea:77:d1:1f:91:51:e2:
11:e0:43:75:23:93:18:1c:62:0e:aa:b4:00:11:50:
34:72:bb:3a:1c:fe:01:fe:cd:c9:99:ee:b2:ec:ad:
e2:34:f5:d4:3c:5a:7e:7d:c9:51:8b:8a:49:a1:7c:
7f:43:ad:a2:d3:e7:da:89:2d:e4:67:a5:96:04:a8:
56:e3:d0:31:30:33:7e:b9:32:77:65:af:f0:4b:ef:
3e:1b:ba:bc:62:e5:a0:55:1c:02:bd:66:1c:b1:fb:
88:7c:b6:80:a2:42:eb:8b:aa:a8:17:38:be:b2:ee:
d6:d4:57:0b:bf:bd:6d:72:f9:d9:3f:99:62:e5:c4:
f8:f4:5a:17:2c:74:3e:7a:29:8b:38:aa:50:68:a9:
97:88:4f:43:c4:8e:90:2f:4e:64:f9:93:df:03:f8:
ee:23:7a:aa:de:18:3e:83:67:fd:eb:f9:8b:82:a1:
d0:00:b5:d1:4e:15:cb:cd:d4:3c:23:c7:3e:43:d8:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:13:47:32:E1:1A:54:3F:22:D2:33:4C:EB:20:F8:8F:AF:62:16:2A
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:80:f2:a9:a3:35:d9:15:20:6f:f6:0d:fe:c5:75:e4:ed:12:
9c:55:f6:7d:25:ba:e0:79:68:3b:ef:9c:db:77:ba:85:34:ba:
de:36:26:2e:b9:aa:22:3f:7b:46:7a:29:79:e7:32:a9:4c:d3:
2f:00:ec:bb:dd:70:5e:c6:2c:86:63:58:0a:2c:60:0d:1a:39:
5a:e7:dc:2e:29:a2:77:c6:44:74:b2:16:81:90:bd:08:c0:59:
14:36:f9:73:92:88:93:b3:bd:59:5a:e2:14:5b:25:4f:67:47:
1a:82:18:0a:b1:fc:aa:88:e0:92:a6:c6:3f:92:09:25:1f:9d:
d5:bd:40:85:f0:ad:19:13:b3:e4:95:b4:00:43:07:5a:01:ec:
78:9e:4f:df:0b:9f:79:d7:d6:f4:87:8c:a7:b9:b9:96:50:94:
f1:e3:f3:89:c2:7c:ef:1e:db:01:e7:73:62:b4:51:3c:4b:4b:
81:e4:19:7f:d1:64:0d:51:d1:35:ee:00:9e:f5:74:ee:81:26:
b0:3d:58:91:64:03:34:9a:39:13:86:a6:3a:86:69:00:ff:f0:
b2:90:11:dd:9b:22:09:08:84:06:33:14:1f:7b:31:6f:22:a5:
5f:37:b0:5c:57:28:48:f2:7f:5f:12:fe:c1:a9:01:3d:70:70:
93:1e:6c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:09 2025 by rpki-client