Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File: QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier: 6XIJTG3YVnrl5blPKWeOfs7nDRLkw3/WGxoIxs7qJeU=
Subject key identifier: B4:9D:C3:8C:E8:13:70:C7:C3:2A:F8:C5:0A:A9:8B:A2:00:9B:3C:61
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 01987A51FB399579A230703334BE0A13877E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 13:00:49 +0000
Manifest this update: Tue 05 Aug 2025 13:00:49 +0000
Manifest next update: Wed 06 Aug 2025 13:00:49 +0000
Files and hashes: 1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: h1OL64LmaemycYYe2+b/xnRSCZ8MJBeuRupshidkg8M=)
3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:fb:39:95:79:a2:30:70:33:34:be:0a:13:87:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Aug 5 13:00:49 2025 GMT
Not After : Aug 6 13:00:49 2025 GMT
Subject: CN=b49dc38ce81370c7c32af8c50aa98ba2009b3c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:71:0f:52:57:fc:2a:fb:a0:37:6e:7e:34:
1e:14:82:63:bd:e7:8a:4c:f7:2a:d7:23:e8:8d:d4:
ad:92:f7:c3:7a:c2:9d:4d:01:df:ff:12:42:67:46:
9d:9b:f3:38:0f:af:e2:0d:05:6e:29:42:63:37:a5:
40:3a:ff:1a:c4:76:54:08:5a:63:12:94:8d:8f:48:
81:75:1b:1f:a7:53:c1:e9:88:ce:3d:30:5f:a5:ed:
8d:2a:3f:32:98:5f:92:af:02:50:a0:ef:cf:26:a2:
1f:7d:8f:f3:c7:7e:04:cd:ae:10:a4:98:73:dc:73:
76:34:36:b9:cf:03:54:02:cf:e3:b3:f7:16:d3:c1:
d3:e3:6b:91:3a:94:45:24:2e:c4:3d:bd:98:7e:68:
b8:a5:b9:42:f1:0e:6e:12:47:aa:9a:a2:49:d8:3e:
f6:8c:4a:b0:0d:a3:de:f1:6c:29:14:f1:78:28:9f:
ca:21:b0:ce:0c:c1:bf:75:c7:ca:73:60:dc:b1:3e:
81:02:b1:ea:6f:78:f8:c3:6f:35:5d:4a:dc:97:bb:
75:19:6a:92:a0:a0:33:48:da:5d:7d:d5:ae:5e:39:
b5:92:45:e6:4b:32:d7:c5:43:35:25:56:35:5e:41:
a7:a3:2e:d9:87:7b:39:8d:c9:48:49:b0:dc:39:bb:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:C3:8C:E8:13:70:C7:C3:2A:F8:C5:0A:A9:8B:A2:00:9B:3C:61
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:20:3a:66:29:7e:42:70:85:d2:0b:5b:b6:72:8b:98:c4:76:
58:93:d8:ea:7f:71:71:4c:c7:ea:93:b0:7d:76:c9:94:ab:16:
fb:17:f2:16:03:43:ef:e4:bf:bd:3c:ad:21:61:5a:79:db:68:
28:4f:57:c2:2d:2a:c9:88:57:5b:ee:d6:50:94:43:98:7a:37:
11:24:b8:10:b7:5d:a3:df:f4:73:ce:f7:c0:f8:0c:70:9c:fa:
1d:34:5e:e3:89:53:13:b5:ae:7c:49:7e:15:d1:09:e4:24:a0:
95:fc:53:18:9f:05:18:4c:a0:93:43:9a:d3:de:6c:9d:b4:9f:
e7:21:07:25:a9:c9:99:ec:8d:15:b0:3e:33:52:dd:36:7a:90:
1a:c6:52:cb:06:62:15:37:e0:1a:8f:ae:ea:35:bd:9b:95:17:
d9:1a:71:82:96:0a:b7:78:fd:fe:2f:a1:81:0f:f1:90:7d:71:
6a:85:6a:13:a9:80:b1:7e:4f:50:aa:59:4e:cb:7c:48:55:30:
99:cb:e6:c1:45:a3:10:27:2e:9e:cc:e2:45:6e:86:d9:f7:42:
44:15:5c:6f:1d:18:71:1b:aa:0f:62:87:74:8a:7b:d4:a0:96:
43:4d:25:d7:a3:f4:36:b1:3d:fa:39:3d:dc:84:9e:de:84:2c:
41:77:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:07:07 2025 by rpki-client