Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier: begs/fjoWePsxxiHMmkFJrYUPd4ES4Sg4HPAujveJzk=
Subject key identifier: C6:6A:59:83:12:18:7E:76:A1:B4:65:22:1D:5F:E5:27:F4:45:5E:69
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 019873E3F9A29FDD41EABAAFD67A5646F248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number: 136F
Signing time: Mon 04 Aug 2025 07:02:56 +0000
Manifest this update: Mon 04 Aug 2025 07:02:56 +0000
Manifest next update: Tue 05 Aug 2025 07:02:56 +0000
Files and hashes: 1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=)
2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: H3pR2J9MEpu7DHNae0oKTVKqr2BkCWaKBoqncl9yqZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:f9:a2:9f:dd:41:ea:ba:af:d6:7a:56:46:f2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Aug 4 07:02:56 2025 GMT
Not After : Aug 5 07:02:56 2025 GMT
Subject: CN=c66a598312187e76a1b465221d5fe527f4455e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:8d:46:32:7d:0c:34:bc:5e:56:75:c0:2a:
da:58:f4:59:03:e2:f4:ff:58:40:ac:c5:99:7f:06:
d4:5b:7e:e6:44:2a:cc:2b:d2:4e:c3:6a:b2:f3:68:
bc:29:b7:3a:86:09:87:d7:d2:90:86:7b:ef:74:e0:
92:c4:c6:1e:82:51:2c:70:f9:3b:79:b9:b8:a1:3f:
31:b3:84:95:5c:27:32:26:80:12:3e:e4:89:ae:f6:
32:77:13:07:05:d9:45:cb:07:28:16:c1:7b:ac:0d:
cb:59:51:64:19:16:bd:36:d6:6e:cc:7d:b8:1e:7a:
87:29:35:34:55:e5:30:50:0c:0b:55:af:5b:52:c0:
32:d1:28:ee:d1:63:41:1f:54:6f:80:dd:fa:30:da:
1f:48:17:8f:46:37:48:e5:89:6d:2a:8a:69:18:c4:
a7:ad:b7:44:39:02:4e:2c:20:b0:df:f6:e4:50:2b:
4d:34:d7:6e:4b:04:39:4c:a0:cb:cc:f0:4d:7d:7f:
fe:94:a1:ee:c7:88:d6:99:d1:24:d7:17:a6:2e:fe:
96:ed:dc:49:17:0f:76:68:11:14:ab:8c:f3:7e:7b:
1e:51:d3:76:c0:06:90:4f:8b:c7:f1:bb:d6:4c:6e:
db:ee:ce:91:1d:58:89:6a:52:03:eb:30:a3:93:b6:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6A:59:83:12:18:7E:76:A1:B4:65:22:1D:5F:E5:27:F4:45:5E:69
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:62:19:69:36:90:11:32:af:a1:1f:0e:c8:6a:f8:41:f5:d2:
7a:15:d5:ee:31:34:da:a7:50:7d:6b:4a:96:02:11:df:88:e3:
97:62:14:33:a2:8a:23:ee:35:83:c9:de:2b:da:1f:91:58:51:
00:60:35:06:8b:f4:97:b9:9a:9e:de:cf:ce:53:71:6e:15:42:
21:ff:46:a8:f0:a7:91:ed:e0:e7:ce:02:a6:d3:3a:06:f7:2f:
c8:5b:c1:17:f1:f8:59:ae:dc:46:b5:5e:4f:80:9c:7f:5a:d6:
44:38:e6:92:5f:1b:23:f3:da:d4:a0:e2:33:a2:d3:de:88:5f:
ae:ac:23:5f:cd:22:bc:b5:3d:d3:01:00:f3:8b:79:8e:5b:03:
e7:4f:38:44:ab:39:81:8e:ff:65:d9:01:19:91:02:60:f6:4a:
40:2c:be:97:02:13:fc:cd:71:68:36:2f:ab:de:cd:45:92:0a:
4c:c4:7a:98:4e:4b:17:8a:0e:c7:04:f4:99:77:8b:9d:69:e8:
87:46:59:29:0e:ef:49:13:68:85:0b:c2:5c:27:f6:4e:ac:04:
64:ea:81:b2:3d:f8:ac:7e:d9:00:c5:c0:8a:37:74:4a:39:41:
e5:0c:9b:bd:09:8e:0d:50:84:70:62:0a:29:6a:33:cb:f9:fb:
c8:61:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:41 2025 by rpki-client