Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: l5LXYGEm02Tu5XAwvK66VlwNcHX0vmry0xmYjhpKw/M=
Subject key identifier: 18:BD:3D:E8:78:6B:53:39:E7:0F:F7:BA:9B:CF:E9:A5:C8:DF:9A:DF
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01988AA0D4DEC7DF330F836A10669BC4B9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0B2F
Signing time: Fri 08 Aug 2025 17:00:52 +0000
Manifest this update: Fri 08 Aug 2025 17:00:52 +0000
Manifest next update: Sat 09 Aug 2025 17:00:52 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: uXhHSj7IBkzNXLX82bvL6/5arA36P8r5Bbn0sxS0o/8=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:d4:de:c7:df:33:0f:83:6a:10:66:9b:c4:b9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Aug 8 17:00:52 2025 GMT
Not After : Aug 9 17:00:52 2025 GMT
Subject: CN=18bd3de8786b5339e70ff7ba9bcfe9a5c8df9adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:86:4d:f1:05:6f:7e:e8:10:be:8c:ee:66:
4e:9d:96:35:3f:84:cd:4d:46:69:51:c3:f9:63:f6:
c8:74:fa:e1:dd:cc:e0:9a:9b:3e:7b:96:bd:4b:ec:
17:56:a2:ad:a7:4c:5c:a2:cf:78:34:56:25:f1:a3:
85:3b:af:84:d4:b5:3b:a4:9a:8a:1a:c7:00:c3:a1:
23:69:f2:a9:98:17:08:1c:15:77:ba:c9:c4:bd:a2:
1d:6c:62:69:e4:e3:4f:b3:66:4c:38:1c:ec:6b:fb:
c1:a1:7f:17:ae:fd:d8:c6:9f:e6:49:65:ec:a2:98:
2b:7e:fd:dc:a5:36:81:12:1e:46:0d:33:00:79:47:
3f:e8:57:2c:ce:eb:2c:38:58:4e:75:39:13:c6:d9:
36:ee:82:f8:f0:c7:b9:f3:5e:ca:a8:a2:dc:30:e8:
fb:a5:05:fb:5d:e7:20:b6:27:f2:f9:8f:54:a2:43:
60:45:ba:bc:e9:8e:c5:fc:99:3d:10:7c:49:4b:6e:
ce:da:c3:0b:7e:12:37:71:c7:26:ee:35:ee:1d:20:
60:46:28:c8:fe:fb:e6:1d:42:8d:4d:5e:a7:98:75:
00:01:46:a0:00:86:30:e4:1a:e9:0d:83:03:b6:e0:
91:db:fb:a7:3b:a0:74:8a:2d:53:a5:b0:70:4d:ba:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BD:3D:E8:78:6B:53:39:E7:0F:F7:BA:9B:CF:E9:A5:C8:DF:9A:DF
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:30:2f:9e:ad:b8:f2:f4:e8:bd:1d:a4:f8:7e:4b:8a:be:e5:
47:80:79:0f:e1:38:80:ae:3c:22:f0:a4:d3:0e:60:e5:80:2c:
7b:3c:7b:32:bd:18:69:61:8e:96:71:f3:5d:0f:a3:06:e0:a9:
39:89:c9:e3:6a:83:bd:81:45:68:96:55:fc:48:51:4c:90:a5:
7a:c4:9a:91:de:26:62:d0:57:aa:d1:92:9a:cc:db:69:22:24:
f1:f6:c4:24:62:77:45:3b:e8:14:e8:f6:9b:15:b0:65:91:c7:
e6:27:7c:16:44:10:d2:67:96:86:b2:1c:e1:6b:33:63:8c:92:
60:35:0c:75:9e:89:d3:60:ef:4c:b2:35:df:87:b1:57:44:85:
62:0f:94:5e:44:b3:de:a7:7c:46:41:b0:55:32:55:85:85:60:
6e:11:51:42:36:d3:b1:df:e4:84:01:ea:d8:24:63:dc:0d:73:
1e:43:80:e6:cb:5d:34:38:b0:15:21:35:8b:38:b7:b6:c6:8f:
9e:43:c1:ce:d8:06:2e:7f:23:70:91:6c:29:71:70:26:87:9e:
8e:36:a0:fd:31:e3:5f:6f:56:59:08:c2:03:c8:f9:17:dc:82:
ee:76:c1:c1:8d:b6:b7:c8:be:91:36:a1:e5:a5:ec:9b:43:90:
a5:18:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:09 2025 by rpki-client