Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier: VRFehT9kcK7rpzdKHGCYI+VaMy73ULP8nKn/9jlNb80=
Subject key identifier: 66:BE:15:A6:44:B3:3D:8E:AA:A8:6C:03:5C:B1:31:36:0F:67:87:E2
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial: 01987E9CFB94021FBFAC580C58CF896A3196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number: 0F20
Signing time: Wed 06 Aug 2025 09:01:13 +0000
Manifest this update: Wed 06 Aug 2025 09:01:13 +0000
Manifest next update: Thu 07 Aug 2025 09:01:13 +0000
Files and hashes: 1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=)
2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: 8rXmXBbEji5gyzb5Yqfd3eKbYc1F8qEq0x3fPgb6FSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:fb:94:02:1f:bf:ac:58:0c:58:cf:89:6a:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Validity
Not Before: Aug 6 09:01:13 2025 GMT
Not After : Aug 7 09:01:13 2025 GMT
Subject: CN=66be15a644b33d8eaaa86c035cb131360f6787e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:05:ab:57:bd:d7:41:d0:19:a8:13:7b:7c:
f0:00:d5:e1:f4:ec:20:08:8c:be:e5:3f:cd:aa:68:
51:20:17:51:d9:c5:0f:d0:fe:1f:8a:8d:ff:ce:74:
74:5f:51:30:43:94:98:58:46:94:a0:f9:a8:0a:df:
22:73:c9:d9:e2:60:41:c9:0e:82:89:74:81:f8:b5:
cb:fa:85:01:22:76:45:ce:38:d6:67:71:a0:97:fd:
88:a2:98:42:8e:18:c6:73:6e:8e:8b:90:ca:6a:eb:
45:a3:e6:88:95:b9:cb:1b:6d:a9:19:95:21:c1:aa:
10:e5:48:a3:4f:95:fd:6f:b6:01:fd:46:82:12:ce:
6f:e5:6a:15:12:64:e3:df:bb:e0:c1:96:e3:ea:4f:
49:59:9a:45:b8:09:41:ee:95:89:b3:67:3a:e6:2b:
5c:44:dd:1b:4a:9f:68:15:98:b3:75:1b:f9:53:8e:
19:5b:2d:6e:d1:ef:9b:81:c3:2a:80:0e:1d:06:ca:
e4:63:2e:35:f1:77:bc:ef:18:d2:c6:05:bf:d0:b3:
ed:35:7f:31:53:86:6c:90:a1:5a:d9:79:6f:0b:4c:
02:5e:5c:b0:62:fc:83:ef:7e:a9:d9:d8:e7:47:8a:
c6:d2:a5:a3:82:d5:00:99:07:5c:4a:c7:64:d7:3c:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:15:A6:44:B3:3D:8E:AA:A8:6C:03:5C:B1:31:36:0F:67:87:E2
X509v3 Authority Key Identifier:
keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b8:c7:be:c9:ce:e4:59:5e:80:f7:f1:0b:b4:40:7f:3e:8a:
3f:dd:ac:63:f4:ca:0d:05:3e:8c:b7:e6:5c:2b:66:24:00:95:
42:f0:fc:f1:53:fb:87:e8:39:c4:1b:27:8d:2a:5e:b4:12:a2:
26:58:99:cc:de:5e:40:71:60:cd:a7:15:78:b5:94:a8:76:bf:
78:73:5e:4b:ac:84:67:d3:f0:0d:9c:6f:fe:31:6c:f5:01:05:
32:47:73:06:5f:4c:45:f0:fc:b8:40:8e:f6:ba:ff:59:99:ee:
96:a1:4e:f1:46:ed:be:2e:98:bf:2e:b5:d3:75:02:2e:a3:5d:
ee:9b:fe:0a:cf:6e:65:80:9e:50:04:8e:b0:20:a4:09:10:f4:
c6:35:17:16:2a:76:da:4b:f0:06:34:b6:89:69:e9:43:a6:47:
9e:12:11:9c:e1:6e:68:87:97:91:22:8c:1f:16:81:e5:84:40:
86:59:f8:58:0e:a4:fe:8a:5a:ca:83:a5:ac:ab:29:2a:ad:21:
e2:38:12:56:b7:bf:6b:e4:61:f9:50:71:c0:27:78:43:17:66:
61:0c:0c:6d:5e:2a:dc:d2:62:51:ee:38:b5:02:a4:54:c8:25:
f8:80:f3:78:13:3c:34:f8:cf:90:79:29:95:e6:1e:b1:dd:51:
6d:18:b5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:56 2025 by rpki-client