Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier: jsCVzwBldmNebUCAcvexMtGWC853GZvHL6dQdAQS9nw=
Subject key identifier: A7:69:1F:81:CA:43:43:9E:FB:EA:A9:BA:AC:B9:48:E2:D6:42:54:C6
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 019874195D3A6F302F62827B26504A726340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number: 22
Signing time: Mon 04 Aug 2025 08:01:15 +0000
Manifest this update: Mon 04 Aug 2025 08:01:15 +0000
Manifest next update: Tue 05 Aug 2025 08:01:15 +0000
Files and hashes: 1: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: WGZrreXZjvmOZujLztzTfwg0fbhP9pUVYbQ4P5ofGls=)
2: ZhWVS_BxzDC-crYvHmP5Jp_0l9w.roa (hash: 2arBDBURi5cw54gyN2A95A3jd2xSCZuw/tiSOf4SzU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:5d:3a:6f:30:2f:62:82:7b:26:50:4a:72:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Aug 4 08:01:15 2025 GMT
Not After : Aug 5 08:01:15 2025 GMT
Subject: CN=a7691f81ca43439efbeaa9baacb948e2d64254c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:c4:f0:a7:e7:5e:70:40:42:01:02:7b:58:
62:06:5e:74:8e:df:85:31:46:c9:aa:65:b4:32:1d:
d3:83:93:f3:d2:59:a2:b1:97:ce:7c:ab:d5:af:b9:
fa:4c:97:c1:df:54:f0:b7:41:b0:6b:ea:d6:ed:33:
5b:5b:45:9a:90:65:97:c4:0e:e9:4a:30:4e:1c:04:
0f:03:53:d3:e0:29:16:14:95:3e:7a:cd:3e:fe:f2:
ce:bb:59:25:e7:8c:e5:7a:fd:c0:6e:51:70:a0:29:
21:e5:32:b3:aa:2e:1e:60:ba:73:18:5e:50:e7:1d:
d8:d4:57:a1:b9:d5:7c:c5:4d:4d:12:56:e4:28:95:
e4:94:87:c9:29:e6:38:53:a8:5a:05:f5:e9:40:c9:
18:87:60:b4:55:bb:c6:b6:57:2e:43:03:53:aa:a9:
af:e0:a8:69:6a:cc:06:80:61:d8:84:0e:18:fa:85:
45:ae:db:e2:4d:ac:ab:6f:5d:90:b2:c3:c8:c7:d1:
fb:99:97:e9:22:c8:f7:36:7c:84:6f:96:0f:50:6d:
db:95:4e:de:8d:47:33:5c:15:18:80:b2:13:79:58:
ac:0d:60:0e:e8:4e:85:ca:38:01:dd:f5:c6:1e:a8:
aa:db:fa:b5:3c:a2:bb:b4:af:07:66:de:45:64:39:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:69:1F:81:CA:43:43:9E:FB:EA:A9:BA:AC:B9:48:E2:D6:42:54:C6
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:08:d6:70:68:61:79:13:8d:fc:c4:10:00:b1:36:d2:29:13:
11:c2:3d:a8:55:50:2a:5c:c8:93:3f:ce:20:18:09:a1:20:d4:
97:e3:9f:ca:c3:bc:6a:09:6c:4a:cc:06:15:51:ff:0d:67:cc:
68:11:11:f7:42:b7:d7:89:43:d3:d5:57:c9:db:52:ae:eb:8b:
50:66:47:ee:45:29:58:ba:92:ca:5f:e0:14:71:3e:45:d5:f2:
dc:28:ac:04:87:40:42:87:af:2e:9c:de:48:1f:dd:99:8c:5a:
09:bd:18:29:18:0a:3a:6c:fb:75:85:36:66:14:fe:a8:3f:2b:
e3:5c:ad:8b:c8:55:6e:f7:bc:41:23:89:50:1b:95:58:e4:3f:
13:5b:5e:c5:f2:fb:18:4e:23:3b:35:4c:1b:31:2a:30:aa:35:
77:5a:55:28:11:63:63:95:d4:0c:65:89:a7:ab:c4:94:b6:15:
d3:29:78:f6:00:91:37:48:e1:07:eb:8b:87:4e:8a:53:bd:32:
13:83:13:d3:a6:d1:94:60:3f:2e:2e:0b:46:16:5e:9f:39:03:
85:69:0e:86:db:0e:4c:d2:68:46:65:f7:88:20:b8:81:f7:ca:
73:c2:97:1d:65:b1:a6:a4:36:ec:d6:3d:75:70:a4:7b:8e:69:
64:6f:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:59 2025 by rpki-client