Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: VFqogwH3F9LroOmQZyf8BCEpZMfTI2s36eg63k6+nB0=
Subject key identifier: 29:24:43:CF:C4:12:03:FF:3F:6D:9E:C9:3F:E4:94:10:79:21:18:4D
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 019896A4DBD3F24537191CBE51CD79ED32B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0A11
Signing time: Mon 11 Aug 2025 01:00:43 +0000
Manifest this update: Mon 11 Aug 2025 01:00:43 +0000
Manifest next update: Tue 12 Aug 2025 01:00:43 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: OdvRtmubhEAvOQh1S+ubKdVSvb5hRWwyaKJdhCb/61k=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:db:d3:f2:45:37:19:1c:be:51:cd:79:ed:32:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Aug 11 01:00:43 2025 GMT
Not After : Aug 12 01:00:43 2025 GMT
Subject: CN=292443cfc41203ff3f6d9ec93fe494107921184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a7:16:a7:92:f3:bc:cd:b5:c3:79:4e:d9:c1:
4c:10:7d:01:12:40:b1:71:9a:4c:29:a6:9d:d7:32:
70:86:9d:cf:55:72:a3:6b:22:ee:70:01:97:34:17:
bb:86:23:c7:a2:93:9e:73:98:2d:cd:7e:ce:0f:6d:
be:31:20:d6:c0:62:e1:7e:a6:49:9a:1a:6f:e4:f9:
9e:7f:6e:f4:e6:8c:a6:eb:59:61:42:fe:f0:bc:e9:
17:b2:27:01:21:4b:d1:9f:5a:9d:28:de:43:eb:09:
4a:7f:eb:ae:42:9d:12:e5:73:0f:f6:53:0f:f9:c0:
44:f3:c2:86:ff:e2:29:e5:a0:62:82:21:f8:4c:c2:
72:61:84:9c:4d:fa:9e:39:41:09:89:fa:a8:ca:a2:
eb:57:0c:bb:2e:57:b0:af:a7:18:bc:f5:4f:c5:85:
9e:fe:f4:94:3f:f3:7b:03:b4:34:21:a2:3f:9e:8e:
bf:1c:53:39:d6:7b:e9:61:66:dc:17:12:eb:68:59:
c3:a3:83:85:cc:6b:d5:c5:0c:6a:11:b1:94:f4:fa:
e5:27:88:94:a6:06:00:09:82:0c:49:78:af:6b:bc:
c2:62:05:75:f4:28:94:c3:64:91:49:55:fd:fe:1e:
8a:f6:07:f6:c1:d2:55:1c:fe:d7:df:1d:c3:5e:c8:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:24:43:CF:C4:12:03:FF:3F:6D:9E:C9:3F:E4:94:10:79:21:18:4D
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8b:10:65:9d:5d:46:9b:e6:04:ac:cc:d8:e0:b9:59:89:ff:
c6:d9:6f:36:77:f7:d6:5b:e9:d8:c3:9d:d3:0a:1f:58:39:89:
a1:2b:58:8e:6e:06:d4:04:b4:79:fd:80:cf:e2:41:b8:a6:ab:
75:cc:1e:d3:ac:49:b3:33:e1:d9:cc:b9:18:9f:0f:16:34:f9:
1c:c2:32:8f:4b:c5:38:8e:ff:2a:72:82:fc:83:35:ab:2b:0c:
de:0c:b3:6d:ae:66:45:1b:a7:f4:d5:c1:41:c9:62:68:35:57:
37:51:93:c0:41:a2:88:53:a8:07:db:a1:2c:a2:0a:5d:27:40:
a2:e0:19:94:30:28:e0:26:ac:df:e6:80:f5:61:79:09:1c:93:
95:1f:c2:7a:aa:03:52:e9:89:c9:3a:ea:f2:92:1f:37:ef:4c:
7d:72:16:b2:8d:04:f4:39:79:f3:36:4f:b1:9c:cc:82:ea:0e:
22:78:4e:ac:e7:92:3e:44:4e:b2:f4:eb:08:01:93:62:4f:63:
ad:5a:a6:e3:96:72:5b:af:68:60:33:f2:97:88:30:46:bf:5f:
68:da:11:e3:53:73:62:42:06:59:8f:7e:a0:74:67:79:e3:9f:
ba:ba:b2:6f:2d:8b:00:45:18:3b:d2:a0:bc:a0:9c:0b:3b:c6:
56:35:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:20 2025 by rpki-client