Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: XvdoIffGyL2cjZQr2HB0oM69DeCsz9kEIW7Y3lN3voI=
Subject key identifier: A2:3E:54:7C:8A:74:F5:90:85:DD:99:CA:0F:CC:CB:60:65:C3:6D:B4
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 019891B5333E0DDE3FC480E28051E701CC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 02:00:27 +0000
Manifest this update: Sun 10 Aug 2025 02:00:27 +0000
Manifest next update: Mon 11 Aug 2025 02:00:27 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: OBgfudxo2wXwM7m5Oy1pU5oKoV30kj93yusxrrLTs8k=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:33:3e:0d:de:3f:c4:80:e2:80:51:e7:01:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Aug 10 02:00:27 2025 GMT
Not After : Aug 11 02:00:27 2025 GMT
Subject: CN=a23e547c8a74f59085dd99ca0fcccb6065c36db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:fa:a6:ab:ba:d3:8b:3b:48:80:f8:a8:6d:
94:57:76:87:92:bd:43:f7:93:66:af:b7:3a:36:87:
97:e0:04:85:80:4e:73:b0:72:5d:e2:97:c7:b5:f5:
be:ab:89:79:95:aa:ae:f5:6d:53:6c:00:f8:42:df:
09:d8:f8:a9:6e:2d:da:82:77:de:12:87:91:17:17:
78:56:29:0d:d9:df:8f:e0:10:f7:6f:ff:0c:5a:8c:
33:a9:10:23:2c:fd:1a:db:77:bf:4c:a3:10:d9:95:
53:f3:76:bf:88:17:fa:9b:22:a7:4a:16:36:e2:aa:
74:6d:d6:49:49:f3:c2:a5:e9:51:01:bb:36:d5:3f:
4d:2f:8a:ca:7f:e3:03:fa:07:a9:77:b6:26:4f:34:
8d:ab:d9:16:b1:58:fd:fb:d1:c0:19:07:b6:f0:32:
a8:11:c5:58:3c:ff:c4:3e:21:c3:7b:20:51:ba:c9:
4a:9d:d1:8d:6f:40:07:6b:74:17:8a:79:2c:62:3d:
27:d7:4c:0f:c2:67:e4:19:ae:74:8c:a4:2d:5f:00:
5b:c0:1b:a2:29:a1:9b:fe:4b:08:5d:cd:02:4e:86:
14:7d:f9:9b:6e:51:8c:59:26:59:e5:87:9e:fe:af:
9e:7b:ea:83:e6:d1:b7:97:45:28:34:9a:7d:77:14:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3E:54:7C:8A:74:F5:90:85:DD:99:CA:0F:CC:CB:60:65:C3:6D:B4
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:73:2b:ea:14:2c:90:ee:f4:6d:7c:32:18:2d:e3:78:b6:62:
c6:26:17:1f:20:b8:d2:4a:12:01:af:e9:07:c4:49:bd:2a:2d:
bb:1f:5d:1b:16:84:89:13:a6:c3:50:77:c1:08:9e:e6:f1:e2:
ac:90:90:cf:a8:86:34:4d:0a:09:3f:7b:77:b3:6c:2d:3f:37:
8a:31:80:e5:12:bc:b6:4c:93:26:89:2d:a9:a8:2b:72:42:d7:
21:84:bd:e1:45:ac:10:97:43:d7:0e:24:cb:26:d8:09:1e:c4:
d2:89:82:a3:7a:6b:b3:b6:9e:e9:98:98:ef:c7:51:9d:bd:5b:
25:7c:be:02:b7:25:fb:0a:b2:f0:a4:1b:1f:2c:17:97:b1:62:
49:9a:32:07:5f:b4:6b:64:b3:b0:23:22:57:e7:76:d3:44:29:
f5:ec:ef:fe:96:7f:b7:83:19:26:88:10:a5:a6:c6:59:b9:c0:
3c:05:c9:40:f7:8a:3a:46:b7:0e:3c:86:53:50:ff:e4:76:46:
49:75:ef:3e:95:f9:ea:62:77:42:e9:9e:84:a1:23:fe:5b:f9:
3c:dc:97:92:3a:0a:d9:03:22:85:7d:dd:97:c1:9b:fb:cc:ac:
df:5e:8e:ca:4c:34:7f:b7:20:a9:a7:59:71:d9:c8:ce:d3:89:
1a:69:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:46:30 2025 by rpki-client