Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: F7GDR9bJBJP1RrtnY5vPUzTUEUw0zuVfvdXNIrsw1/A=
Subject key identifier: 00:00:68:56:5C:68:82:0D:4F:34:DE:7C:D5:7B:B6:D2:79:15:D3:35
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 019895FFFB9CA010DF634A7C4F0813C9CB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 11DF
Signing time: Sun 10 Aug 2025 22:00:37 +0000
Manifest this update: Sun 10 Aug 2025 22:00:37 +0000
Manifest next update: Mon 11 Aug 2025 22:00:37 +0000
Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: Mll68giT5McNgUF0/+gAbq8VsCvo5hmuzB7471B8TxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:fb:9c:a0:10:df:63:4a:7c:4f:08:13:c9:cb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Aug 10 22:00:37 2025 GMT
Not After : Aug 11 22:00:37 2025 GMT
Subject: CN=000068565c68820d4f34de7cd57bb6d27915d335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:8e:4b:ea:a2:d0:35:7b:d0:8f:d2:97:68:
87:4e:ea:70:22:1c:8f:32:b6:26:79:a8:99:84:a2:
dd:13:1f:72:ec:d8:2e:72:13:ef:72:9a:1c:b0:a1:
11:7b:37:76:91:65:79:dc:a9:bd:09:0a:75:e8:53:
ae:28:f2:cb:95:d5:82:7b:48:a4:0d:cc:c4:32:35:
b0:4c:0a:62:57:c2:ed:39:71:85:85:c6:e1:c6:44:
a9:4e:41:d6:24:83:1f:9a:df:ac:e6:3f:01:24:0a:
81:e2:42:7b:42:d3:86:e2:1e:68:82:35:42:5b:19:
35:d4:84:a1:22:e4:1d:ff:4e:e8:c5:ca:78:7a:52:
53:c8:8d:b9:09:af:f5:b1:ed:c1:bb:d3:cb:43:69:
0e:06:41:48:4c:3e:12:bd:8d:37:e5:03:fc:b6:d5:
47:87:4f:56:43:fd:93:a1:f9:86:e4:03:74:2a:ba:
da:cb:06:bb:09:07:21:a9:98:ee:0e:f9:6a:45:6d:
a8:27:45:4c:cc:23:ae:1f:7f:38:4c:94:0b:f1:57:
0a:35:21:92:42:3b:d2:e9:db:37:f5:49:32:60:2f:
db:4b:e8:46:c6:f3:c6:b3:61:f6:e5:02:23:43:ab:
d3:ac:68:32:12:69:48:c5:f7:3c:a5:b8:e0:a3:a8:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:00:68:56:5C:68:82:0D:4F:34:DE:7C:D5:7B:B6:D2:79:15:D3:35
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6c:cc:6b:14:76:2e:97:2d:bb:d6:9c:fa:77:50:24:d0:b6:
c0:42:8b:ea:c5:50:83:22:57:89:b8:b9:fd:fb:81:9a:b0:90:
7b:84:5c:da:eb:5e:33:2b:31:d4:37:49:00:16:d8:59:00:44:
f4:88:9f:d6:08:61:2d:66:3c:f6:e2:c2:b1:22:b9:85:76:8b:
17:0b:a0:86:2a:f9:78:74:61:ba:ff:7d:f0:ac:31:c5:ca:73:
26:7d:65:23:90:d2:ed:16:bb:5d:97:96:0e:ce:78:60:c5:5f:
b1:39:00:82:39:b5:8e:95:7a:87:fe:09:fc:90:db:38:83:7e:
66:86:fe:4c:cc:cf:b6:ac:49:3e:0b:7e:3f:4f:09:30:7d:80:
67:08:dc:be:11:55:49:c0:2a:b1:dc:74:eb:1e:cf:59:8c:9d:
62:6b:be:8e:d7:48:d9:b4:b7:1e:56:3c:09:95:1b:da:aa:1a:
68:b2:e0:f2:6e:f7:08:61:43:37:e7:19:b3:1c:5a:2a:bd:64:
18:8f:e3:22:61:ee:9f:48:cc:f7:22:66:2c:b7:90:58:42:fc:
07:f9:02:76:fc:78:67:0d:a2:26:e4:68:4c:5d:ad:0d:16:d4:
8f:50:48:c4:94:56:66:75:ec:d7:85:ba:38:50:19:f1:6c:42:
7a:9b:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:10 2025 by rpki-client