Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: MKzWB1X7EM5PvueHltSiRgtpE9C//7qh7S6nY2noub4=
Subject key identifier: 0F:BF:DB:A7:A9:11:10:1C:3D:9D:14:61:8B:6D:71:63:FA:E9:76:AF
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 019873E1E5D7BD0EE7645D2ED28A5962931A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0A85
Signing time: Mon 04 Aug 2025 07:00:40 +0000
Manifest this update: Mon 04 Aug 2025 07:00:40 +0000
Manifest next update: Tue 05 Aug 2025 07:00:40 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: j3ALZ+NfMwhsctZfIVDkb14gmZHlG6zruDJlA5QapU8=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e5:d7:bd:0e:e7:64:5d:2e:d2:8a:59:62:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Aug 4 07:00:40 2025 GMT
Not After : Aug 5 07:00:40 2025 GMT
Subject: CN=0fbfdba7a911101c3d9d14618b6d7163fae976af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:62:61:79:68:02:88:08:8d:c6:cc:7f:90:
eb:5c:70:18:bd:45:90:2a:14:1b:0d:97:5f:78:ab:
c2:34:ba:f7:81:b4:be:f2:38:1e:cc:7f:37:5f:34:
49:0a:23:fa:d4:bc:87:a9:52:19:5a:c1:42:19:fb:
3c:d2:d7:5b:79:e5:58:73:a3:ea:eb:14:a4:7a:9e:
0c:86:13:21:cc:0c:21:1f:d9:4a:54:15:98:0f:58:
5f:b4:5f:b0:7b:83:1f:3c:e6:f8:8d:ee:4b:c7:e6:
55:3a:f8:be:cf:20:2e:a1:a0:84:19:ee:35:1b:4c:
e3:bd:f3:32:3c:5a:fd:38:fc:9a:7e:54:26:6f:9a:
5b:11:28:6d:53:f3:fe:79:45:12:99:10:e5:54:d0:
a3:10:f8:2d:b4:82:c8:fd:bf:9d:27:17:31:c0:7e:
18:1e:17:5a:cc:03:eb:f1:9d:a4:81:89:90:1a:34:
b0:5a:bb:d7:bd:00:4c:e9:e0:46:a7:bf:01:4e:b2:
06:14:39:21:b1:67:7a:d5:e5:c0:f3:4a:c3:36:8b:
09:ee:38:21:bd:b4:e1:49:07:a1:e4:87:ce:e4:a6:
2b:82:bc:46:06:56:15:d3:f3:77:6b:38:d5:69:c7:
7c:65:ea:80:0f:05:32:be:39:7f:28:62:37:75:a5:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:DB:A7:A9:11:10:1C:3D:9D:14:61:8B:6D:71:63:FA:E9:76:AF
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:64:6b:a5:91:09:32:60:61:bf:71:fb:06:82:16:c1:a9:2d:
0b:32:f8:79:58:a7:37:25:ac:e1:67:73:f1:d8:42:45:a9:cf:
14:56:fc:ec:c6:45:dd:bf:70:7b:a6:69:43:0d:70:90:3d:e9:
d4:20:7f:09:42:c9:cf:97:c8:bc:de:7e:97:51:8f:75:1e:bd:
10:bc:60:8f:3e:19:56:28:55:11:a1:16:17:3b:a7:f6:23:bc:
37:09:71:85:4a:24:de:c3:ab:d4:e7:3f:26:7d:05:51:dd:13:
3b:9a:10:c9:df:fb:b5:44:99:f1:f9:a3:b9:b4:27:ff:9f:64:
86:91:9f:48:67:d8:ca:5a:fb:2a:b4:87:4d:5b:d4:33:ae:49:
5f:6c:84:9a:34:5b:22:09:82:31:44:a4:eb:ae:b2:68:2a:5d:
b6:be:65:79:72:52:1d:9a:6b:bf:12:ac:55:2b:2e:d3:78:51:
83:4b:6e:b3:34:07:ef:16:ce:82:bd:f3:ed:bf:37:1f:6c:86:
ee:fe:65:0d:8d:25:86:36:c3:b9:52:85:64:e0:4c:63:6c:9c:
88:1a:db:a7:16:72:8c:9f:bb:78:98:9f:94:a1:bd:cb:2a:59:
ec:20:54:e9:69:5c:22:1f:ec:fa:3c:3b:39:d5:a2:db:15:4e:
82:84:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:43 2025 by rpki-client