Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: BB2QKJWPgla3KE8TDI1NbUF3k7hDezYSVamleF+Ue7g=
Subject key identifier: EE:D6:9D:12:2D:0C:9B:4D:02:8A:22:F9:5F:5B:19:7F:6B:5A:E0:C8
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 01987E2ED7A7C7C048713ADA468A42726ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 01FA
Signing time: Wed 06 Aug 2025 07:00:55 +0000
Manifest this update: Wed 06 Aug 2025 07:00:55 +0000
Manifest next update: Thu 07 Aug 2025 07:00:55 +0000
Files and hashes: 1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: kFh1mCe+GvQixoJEG9OzCWHolUwVf3TUsLkiTl0ZKYc=)
2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:d7:a7:c7:c0:48:71:3a:da:46:8a:42:72:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: Aug 6 07:00:55 2025 GMT
Not After : Aug 7 07:00:55 2025 GMT
Subject: CN=eed69d122d0c9b4d028a22f95f5b197f6b5ae0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:17:29:a6:c0:64:d2:4d:51:0c:94:af:19:
2e:1c:68:21:ef:8b:11:8c:7d:39:3d:e0:19:8b:b6:
81:cb:c3:8e:5a:37:0c:46:39:51:a9:e6:a5:f2:84:
6f:ae:26:e8:f4:c1:08:34:0f:48:c3:77:a8:ff:c7:
39:19:11:57:51:82:00:ca:e0:f1:cc:12:f8:ae:e3:
04:50:fa:c5:77:f3:b2:b5:2e:cb:3c:b5:d3:53:90:
73:f5:55:c8:5f:6d:40:75:60:3f:2e:6a:d2:0a:0d:
ef:91:cf:c2:99:a7:0b:15:14:41:3f:7d:79:f6:c2:
44:ee:82:b5:69:b9:df:a1:9e:d9:8a:1e:64:7f:38:
cb:89:92:2f:06:51:43:cd:6d:57:c4:66:2a:ab:96:
50:51:87:b7:17:77:8b:94:c4:0e:f4:ef:22:27:c2:
31:61:a4:01:af:75:43:9a:d8:19:ca:33:93:eb:76:
af:c3:51:49:76:03:69:34:87:d6:8a:e8:93:7e:ac:
eb:87:e8:34:8b:79:f2:8d:2b:9f:68:58:d3:86:95:
37:5c:02:44:23:f9:9a:69:ac:48:b6:a2:a4:4b:cf:
5e:45:28:6b:5e:af:cb:77:30:95:de:51:1e:6c:df:
14:22:03:d7:8d:62:8e:d3:e8:cf:84:f6:83:2b:58:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:9D:12:2D:0C:9B:4D:02:8A:22:F9:5F:5B:19:7F:6B:5A:E0:C8
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f3:d8:ac:1a:6e:7a:54:6f:56:bc:d7:89:c3:53:b5:27:ba:
9b:0b:6d:f5:2a:5e:27:a0:0b:5e:f6:5c:45:ec:44:2f:43:2b:
08:9a:17:f8:52:b0:8e:fe:9e:7d:f4:05:77:c4:20:a7:e5:4e:
f0:3b:49:23:60:a6:82:58:15:06:ce:72:88:6d:59:fa:0d:c7:
4e:30:f5:76:01:9f:0f:ff:93:95:42:48:11:88:51:a6:bb:79:
16:74:6c:3b:06:51:a8:5f:c1:1b:cb:30:b9:72:08:9b:6c:ea:
06:f2:0c:6d:ab:c3:c2:20:8d:1d:7f:7d:9d:68:73:3c:0b:73:
89:d9:bb:a9:02:ea:c9:24:be:b0:f8:5f:21:cc:31:b6:3d:d7:
46:cb:ae:e1:eb:6d:4d:dc:39:7e:e5:8d:40:dd:85:28:6b:6f:
b2:fc:e2:32:ed:b9:b3:25:22:34:ab:09:ca:dc:66:1f:35:f7:
8c:3d:df:d1:4b:fd:d5:22:b1:69:87:42:68:c5:ad:79:a5:72:
83:19:b7:f6:c6:74:de:c3:f5:af:8d:73:e9:91:93:42:b5:58:
5c:24:cc:61:08:43:60:c1:f4:01:44:e4:8f:96:5a:8e:bc:ca:
e5:37:b1:97:6d:78:da:9c:93:1b:60:14:54:fd:c6:c6:8c:46:
c7:a7:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:56 2025 by rpki-client