Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File: QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier: NafxcuuLLP7+PWay2PQb9vPKrtETXMNrJn3ITOHl59I=
Subject key identifier: 04:12:41:01:21:45:5F:8D:47:C3:AB:40:4A:EC:6C:61:CE:9A:2D:5F
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial: 01987C77381B090ED1F512573353E92A9FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number: 1144
Signing time: Tue 05 Aug 2025 23:00:44 +0000
Manifest this update: Tue 05 Aug 2025 23:00:44 +0000
Manifest next update: Wed 06 Aug 2025 23:00:44 +0000
Files and hashes: 1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: gQpped7fqIwCvhK5WW+peHcIVEB4IFB+auiI7GeuxCU=)
4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:38:1b:09:0e:d1:f5:12:57:33:53:e9:2a:9f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
Validity
Not Before: Aug 5 23:00:44 2025 GMT
Not After : Aug 6 23:00:44 2025 GMT
Subject: CN=0412410121455f8d47c3ab404aec6c61ce9a2d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:52:f4:cd:06:1c:3c:39:f5:44:40:c6:c4:
fb:80:da:da:50:40:de:0c:7d:af:fa:32:fd:99:78:
d5:1f:dc:4f:62:57:ff:5d:18:e6:2e:34:a7:92:92:
87:d3:a8:e7:94:c9:f7:a1:55:f0:ab:95:55:25:cb:
41:86:32:1e:3f:96:e5:67:3f:80:4f:49:7e:e8:11:
17:ff:25:f3:5d:65:6e:f4:c9:83:68:fb:65:a4:71:
7c:86:45:bd:46:a6:64:a0:ea:ca:bd:5d:c1:2c:54:
64:a7:5f:9e:48:23:bd:4b:5b:40:be:5b:c0:75:b1:
e3:f6:76:3d:34:33:60:ec:6a:df:e4:4a:f9:70:a5:
2d:7e:ee:bc:b1:72:dd:06:85:89:c8:c9:7f:55:3d:
77:16:8a:ac:c8:1b:a6:f7:d4:7b:fa:86:4a:27:4f:
5b:12:24:d8:4e:53:c1:67:a8:36:dd:d4:c1:cc:44:
da:34:88:98:93:67:d1:7f:3c:c2:4d:a0:34:47:24:
76:37:03:7f:b7:29:2d:7f:60:16:29:41:17:23:3a:
cb:92:dc:14:eb:fe:fc:07:b2:a4:cd:c5:fa:43:9b:
eb:0d:75:a2:08:9c:de:95:70:5a:bc:09:3e:9e:14:
9c:df:da:b9:7e:88:8f:4d:4e:71:b3:c3:1a:47:25:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:41:01:21:45:5F:8D:47:C3:AB:40:4A:EC:6C:61:CE:9A:2D:5F
X509v3 Authority Key Identifier:
keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:8a:f9:53:1f:3b:e9:3b:e4:4a:be:4d:33:e7:50:76:18:
c7:48:28:c9:e1:43:69:b2:77:08:65:97:ee:c8:45:b5:cb:8b:
8c:d9:0e:be:7f:3f:dc:11:bf:7c:35:a9:d7:95:5c:a3:6e:2f:
93:1c:24:e0:00:cd:f3:36:c0:a4:87:b6:76:3f:ca:7a:9d:4d:
78:70:9e:c8:5b:3e:a9:46:33:93:70:09:79:ed:30:f2:5f:44:
d9:15:b5:f8:11:c4:0f:37:1e:8c:b6:bb:b3:fc:8c:1b:a8:69:
20:87:36:01:6e:1f:30:e3:1c:fc:c0:ce:42:8c:e3:ac:1f:60:
f8:72:0f:1f:0b:d3:b5:04:a4:f1:15:ab:f5:79:0d:a4:8c:73:
c4:ba:52:ad:a4:04:48:93:52:95:07:5c:29:41:36:78:78:1d:
94:4c:95:63:27:df:03:b7:59:f1:6b:55:fd:da:5a:0d:1d:bf:
b0:92:39:66:b8:b1:ac:c1:d5:c8:79:8d:b5:83:88:ab:bd:f5:
8c:f5:95:61:54:e1:6a:c9:27:ad:33:15:b1:71:d2:34:38:5a:
5a:8d:ac:7e:05:44:79:fb:42:27:f9:4a:53:ac:7a:85:05:dc:
1b:5f:a4:16:d1:02:bd:98:6c:d7:36:ce:f8:53:77:c4:bf:90:
30:e3:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:18 2025 by rpki-client