Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: OFIhKdMuUzYIowiZnCVze145qduXW4eUOl/Zv5tkAZk=
Subject key identifier: CC:DD:04:82:98:67:07:40:8F:D9:5C:A6:0B:58:DF:E2:2E:FE:B2:AF
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 019889C4E1FF7298927259A3810760C9FAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 05EF
Signing time: Fri 08 Aug 2025 13:00:38 +0000
Manifest this update: Fri 08 Aug 2025 13:00:38 +0000
Manifest next update: Sat 09 Aug 2025 13:00:38 +0000
Files and hashes: 1: 4aDro6K4uBzQDwqf0WWWDv-WEKk.roa (hash: KqqgAJBLDDctP248xFMqsm3yeCd/FvEIq/xYuv9Vp94=)
2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: zYM7oxOBXtdHX4ytCZSYnu0uSSPaAQWAwq1IAiRh4eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:e1:ff:72:98:92:72:59:a3:81:07:60:c9:fa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Aug 8 13:00:38 2025 GMT
Not After : Aug 9 13:00:38 2025 GMT
Subject: CN=ccdd0482986707408fd95ca60b58dfe22efeb2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:a4:2c:1c:03:7e:91:b0:0d:1c:eb:2e:28:
08:ee:44:e4:aa:cf:10:5a:e8:47:56:73:71:00:19:
f7:7b:81:c1:fe:5c:2d:8f:66:dd:bc:7c:c8:84:53:
5e:5f:54:79:44:11:0c:29:e6:11:3c:ac:07:76:ba:
31:04:59:d0:9b:67:4b:5a:c4:60:c1:7a:00:74:75:
a7:f9:74:de:1d:cc:95:68:c3:85:83:db:8e:05:4c:
4e:19:77:4d:69:0c:d7:db:22:72:ad:0a:50:5f:db:
9e:bc:da:bb:df:ea:d5:2b:18:4d:6e:45:8d:1a:ea:
e8:6c:28:a6:74:51:ad:ff:57:6c:31:f5:31:fa:da:
7d:12:67:e6:c1:00:0e:34:43:ad:b7:24:3e:42:81:
80:ba:68:f2:47:a7:0a:2a:81:eb:59:69:5f:95:ad:
6e:96:0d:47:5f:46:3b:b5:3c:97:31:30:05:ad:0f:
c0:55:f1:23:92:18:1a:08:56:e6:fe:ab:c2:8a:ee:
d8:ec:cb:fc:87:56:b7:cd:ae:de:32:99:3f:85:ae:
a4:6e:73:31:12:fc:b0:9c:69:fd:d9:c5:3d:20:e8:
d0:58:58:80:15:cb:89:88:4f:e6:01:7b:03:c1:96:
5e:81:f7:e4:6a:14:93:eb:f5:8b:a5:0c:3b:f0:3e:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DD:04:82:98:67:07:40:8F:D9:5C:A6:0B:58:DF:E2:2E:FE:B2:AF
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:77:3f:dd:4d:6f:e2:3d:6a:6b:30:7e:52:70:31:8d:3b:96:
53:4e:44:8c:7e:7b:85:db:f1:33:39:84:b3:d6:bf:f0:06:eb:
3f:60:cd:bf:da:89:d2:08:12:ff:57:81:81:c4:11:a9:17:4e:
81:65:38:1f:fc:6b:71:c6:aa:d3:d2:90:74:06:4a:96:db:96:
c8:71:aa:15:f2:e2:9c:41:94:e1:55:92:92:64:dc:15:fd:41:
1e:75:52:cb:ee:11:e7:6c:04:8d:b5:e7:de:0c:42:12:17:d2:
dd:aa:8a:a4:d9:e0:77:61:ee:dd:05:e4:ec:b8:97:9e:b6:5d:
99:0f:6f:1f:78:34:c4:63:20:c2:a6:2c:f1:b1:c9:fc:e8:70:
f5:79:71:4b:48:78:91:27:d0:3d:6c:f7:31:6c:83:3f:d1:c0:
da:9e:fb:96:49:cb:c9:1b:01:24:1a:5f:94:ba:3d:71:45:e1:
c1:7a:cc:d3:11:01:00:b1:a0:c0:9d:ed:14:74:06:bb:ad:18:
89:6d:38:4d:6b:cf:25:09:26:51:be:d4:3a:aa:9f:d5:e8:d0:
49:e2:f2:f3:d1:c4:20:8d:db:bd:4b:42:c3:44:ec:9c:3a:26:
df:8b:1f:3b:ee:04:33:87:67:18:29:3b:59:38:12:65:a0:3e:
89:60:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:23 2025 by rpki-client