Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: vrCTCQ/2uGL1jifoBftJXhLkskoEYkKtt0KVLJ0Vbms=
Subject key identifier: 71:B9:5A:00:8B:E1:A1:10:1D:A7:D8:32:B2:78:47:9F:C4:A4:3B:B9
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 0198733D378A1D55FB27329EB8030FCC1139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 0462
Signing time: Mon 04 Aug 2025 04:00:48 +0000
Manifest this update: Mon 04 Aug 2025 04:00:48 +0000
Manifest next update: Tue 05 Aug 2025 04:00:48 +0000
Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: 8VR8OhQG3NEjKTQaYvo6IcktAO77A7VrTIm022K2vDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:37:8a:1d:55:fb:27:32:9e:b8:03:0f:cc:11:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Aug 4 04:00:48 2025 GMT
Not After : Aug 5 04:00:48 2025 GMT
Subject: CN=71b95a008be1a1101da7d832b278479fc4a43bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:c6:7b:b5:d0:f0:8e:66:bf:33:ed:93:64:
45:a0:3a:90:ca:45:e0:f1:94:69:d4:57:b5:17:30:
9b:52:05:b4:50:f3:d7:72:9c:34:ad:a7:12:86:27:
44:1c:93:36:79:35:d6:11:9b:0e:4f:fb:f8:9a:f7:
5b:3f:b2:b1:d9:26:2c:7e:d3:ba:6f:e1:d8:e8:6d:
cb:a3:b9:6f:23:23:7e:96:4a:45:a4:5c:54:60:43:
a6:c0:66:e6:3a:74:aa:00:58:83:c2:7a:40:1e:38:
37:90:3d:de:76:9c:1f:ee:08:04:f2:b7:de:f6:c1:
49:12:bf:a5:79:90:3c:88:35:d6:e5:0b:79:60:f2:
e9:d9:0b:ca:16:63:0e:e9:a1:79:44:83:77:8f:f6:
0f:6c:e6:74:f4:fc:c6:7d:79:8a:cd:25:af:7a:73:
21:b5:41:8b:5b:3d:3c:af:90:8f:70:ce:98:36:c2:
dd:73:53:f0:b8:46:64:b9:c6:f4:3a:6b:dc:4f:d3:
55:cb:8b:ee:36:11:ea:7f:cb:cc:99:2a:99:5a:54:
ff:b2:12:4a:7d:13:d4:e4:02:a0:d7:29:6a:88:aa:
96:af:0d:eb:17:5a:c9:37:d2:ef:2f:2c:62:9b:f5:
8e:1c:3f:f4:ba:b7:32:c2:02:09:9e:24:39:40:31:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:5A:00:8B:E1:A1:10:1D:A7:D8:32:B2:78:47:9F:C4:A4:3B:B9
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:02:fc:61:c0:5e:1e:f3:3c:d8:f8:67:c9:78:2f:38:00:f2:
7d:fd:5c:dd:07:73:70:b8:b8:82:4c:a0:a1:d7:ec:5c:15:00:
9f:c0:9e:79:9e:12:04:9e:a4:b0:4a:88:e4:2a:89:c9:15:c8:
8b:2a:ee:45:19:e0:61:47:5c:ab:7d:27:2e:ac:5c:69:da:97:
82:1a:a4:7d:20:8c:f0:b8:73:8d:b7:d7:80:c2:5a:3f:cf:36:
f9:5c:96:77:58:7d:2a:24:55:dd:29:8a:de:0a:55:93:59:a4:
d3:88:39:86:ec:4f:e5:5b:69:f4:c8:8a:ab:32:d0:ef:db:73:
0c:15:75:11:9c:7e:97:95:7e:8f:46:2c:04:81:90:90:46:e5:
12:af:f9:6b:f5:40:f9:73:da:4b:ed:d6:80:5a:35:0b:8d:36:
d0:95:ec:bb:9d:6f:3f:3e:42:bf:6c:90:dc:b3:1f:a7:80:c5:
c7:38:39:ee:51:df:8e:ed:03:9b:f9:76:1e:ec:b2:c7:65:2b:
fa:3e:d2:2f:8d:15:60:00:2c:d6:4c:dd:93:36:a0:74:38:11:
8d:bd:20:22:f1:55:e1:cc:d6:14:c8:84:21:2b:3d:cd:c5:aa:
b1:c5:9d:0d:5b:20:36:71:52:5f:34:08:4f:69:a0:50:82:17:
1f:0f:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:45 2025 by rpki-client