Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: dUnjDHe73jHqnzuZgYvb6Szs+kPPQDhAk1pl20KB1J8=
Subject key identifier: 22:D5:08:72:76:51:3B:36:1D:C7:AD:72:7D:5F:54:6C:93:5C:56:B4
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 01978E12D15BE1D2221DA041F9F6F42BAE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0988
Signing time: Fri 20 Jun 2025 16:01:27 +0000
Manifest this update: Fri 20 Jun 2025 16:01:27 +0000
Manifest next update: Sat 21 Jun 2025 16:01:27 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: cxHCnxrrt7cc+Lqo9QlbX7Jx0v/JwR635FtVAVUmAoI=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:12:d1:5b:e1:d2:22:1d:a0:41:f9:f6:f4:2b:ae:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Jun 20 16:01:27 2025 GMT
Not After : Jun 21 16:01:27 2025 GMT
Subject: CN=22d5087276513b361dc7ad727d5f546c935c56b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:8a:1c:ea:9c:a4:7f:1e:f4:89:72:6e:4f:
66:b8:13:e7:4e:7a:d0:cb:ff:11:2a:14:df:ca:ac:
bf:ed:20:d5:05:55:f3:8c:4d:ba:0f:b2:b9:9b:13:
c4:89:ce:f3:60:d2:9c:35:2a:0d:97:ea:2a:ac:18:
25:fd:7c:8d:12:5e:48:65:b5:2b:00:40:67:8b:60:
6f:71:b0:aa:9b:18:7e:0b:bc:e6:36:5e:d8:93:4e:
f4:9f:8b:c3:04:a1:e7:47:2a:90:0c:60:23:36:19:
c5:b4:f6:0a:bd:c8:1c:de:69:29:0c:82:a2:52:8d:
40:22:e7:bb:bc:f1:35:84:e5:d7:1f:70:be:76:5e:
16:a0:ed:ec:58:c9:91:74:14:23:8f:7e:ad:bc:02:
61:2f:8c:8f:7d:b6:c5:2f:63:d5:1f:9e:0f:29:23:
61:9d:f3:80:7b:17:38:f5:22:0f:6c:7f:55:22:5b:
f5:ea:5b:21:6f:f4:dc:65:67:ba:40:20:a1:c1:59:
ee:38:32:79:19:71:46:f8:32:0e:19:66:0c:e9:ce:
81:74:28:00:a3:8d:36:22:d7:14:6d:e9:ca:57:c9:
4d:e6:e8:1c:05:fb:9e:bb:94:ad:cb:b0:fd:c2:26:
78:08:60:fa:47:eb:29:58:fa:5e:fd:ae:ba:53:df:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:08:72:76:51:3B:36:1D:C7:AD:72:7D:5F:54:6C:93:5C:56:B4
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:38:80:52:12:75:90:da:76:34:7f:0c:6f:71:a4:f9:5b:7c:
a3:5a:b5:7a:f0:1a:45:57:14:35:cf:67:ea:d1:63:61:b6:8a:
77:67:45:99:f9:a8:e8:a2:f8:30:84:20:63:a3:17:4b:39:c9:
c6:5f:35:d2:c4:c5:bd:5e:bf:e4:c1:bb:99:b5:ca:64:60:8c:
df:bb:de:b6:6a:69:d2:17:b4:97:65:40:63:6d:26:7c:f9:2f:
6c:0c:55:33:ec:ee:be:19:57:a2:f6:dc:c4:52:5c:fb:80:0c:
34:51:33:47:7d:e9:68:df:32:f3:52:cb:60:2c:22:bb:d7:6c:
10:db:8a:5b:ce:57:87:6a:73:4b:e5:f4:3b:80:f6:25:4e:d9:
21:48:52:88:44:ec:86:28:fe:4f:6e:85:3e:a1:ef:9d:1e:5f:
60:71:ac:02:27:fc:a9:64:4f:f2:c3:b2:0e:0e:4e:68:e0:99:
8e:51:7d:c4:f4:22:a6:e4:b7:d0:e8:76:fa:5e:83:59:af:78:
8f:5f:4b:07:5e:65:c3:0b:f7:6b:1c:22:a5:12:45:1a:9f:23:
03:15:aa:3f:6f:ae:14:32:48:5f:25:0e:e4:9e:fd:9e:c2:18:
e7:9f:7e:36:e6:6f:ce:e1:e1:cc:5f:79:93:5f:f9:f0:00:43:
a0:7d:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:25:46 2025 by rpki-client