Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: NKPG55m0QOU3OMzda3sFlkly7YXewm0KeEC62dsPvvY=
Subject key identifier: 52:AC:DE:88:12:F3:F6:11:09:1C:47:85:F6:56:7D:B4:9D:A7:8A:F8
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 019894B73F70DBA95E3BCCDEE379E894262B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 02B2
Signing time: Sun 10 Aug 2025 16:01:33 +0000
Manifest this update: Sun 10 Aug 2025 16:01:33 +0000
Manifest next update: Mon 11 Aug 2025 16:01:33 +0000
Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: DBcaT/EXafsMZU5dZOoYKnpsxhJ7HrV91V8JzdlJ2no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:3f:70:db:a9:5e:3b:cc:de:e3:79:e8:94:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Aug 10 16:01:33 2025 GMT
Not After : Aug 11 16:01:33 2025 GMT
Subject: CN=52acde8812f3f611091c4785f6567db49da78af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:c7:8e:6e:d4:ad:7b:ce:c8:aa:02:06:46:
24:3b:7f:9f:b2:be:05:c8:d2:1e:e0:a9:0e:c9:86:
f3:04:b1:87:a8:1a:dd:d4:21:58:96:1b:70:f2:6e:
ee:38:80:a5:2b:19:54:19:9b:8c:a5:a6:da:53:24:
4e:24:b4:e4:e6:21:5c:31:a8:55:62:b3:20:3f:62:
9e:d6:60:b0:dc:fc:13:ab:e1:06:1a:b0:de:0f:1c:
07:1b:38:5e:8f:20:59:61:65:e0:d3:fa:6e:c0:e3:
d2:f7:7f:8e:8a:b5:43:17:12:f5:c7:9c:a8:bb:15:
8f:ac:d7:e0:41:e2:67:3d:ac:22:e3:22:d1:e7:b1:
30:5a:08:b1:9a:52:12:6a:76:5d:d6:75:52:7c:4d:
d8:49:29:f2:17:0e:0b:91:f7:00:33:35:e6:2e:e5:
b7:8e:fe:f3:73:c9:e8:e9:a0:02:a7:d3:1e:c0:f5:
0a:0f:da:1b:28:46:26:1c:95:aa:d7:c6:02:d9:c2:
2d:40:b6:7c:f8:01:54:c6:e7:04:17:63:be:14:c8:
1b:f5:88:82:0f:d9:ef:e1:f1:bf:0b:91:22:b0:06:
2d:77:de:cc:00:4f:12:5e:5d:8a:fa:1d:db:bb:bc:
9c:38:c7:dd:99:5f:d7:2d:c6:d3:f8:63:ec:88:12:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:DE:88:12:F3:F6:11:09:1C:47:85:F6:56:7D:B4:9D:A7:8A:F8
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ed:35:3b:b7:a2:66:50:6e:1d:8e:f8:2a:fc:df:9c:3f:72:
f3:7d:6b:03:20:04:7b:5e:6c:da:f8:1f:2e:5d:ab:6b:84:81:
0b:be:15:f3:0d:36:98:ea:8f:4e:cd:1c:6d:ee:8a:c0:35:2d:
8a:3b:b1:87:78:08:25:65:bb:57:df:7e:b8:b4:82:77:8b:ef:
f8:81:98:e8:41:45:25:b0:44:5e:63:22:2a:6b:03:03:85:cf:
04:39:88:b1:7b:93:99:68:91:9c:d7:bc:6b:91:83:9c:c6:d6:
6e:79:e8:49:37:95:9c:3a:e0:ea:58:58:d2:2b:dc:98:f8:b6:
eb:cf:a5:c4:6b:82:15:ad:45:31:d2:f7:3f:89:c6:4a:98:3a:
13:3b:86:15:6c:12:fa:3c:06:4d:de:11:8b:48:52:02:80:00:
d4:14:e8:3c:cb:48:21:d1:98:a1:75:97:56:e2:24:6d:4f:c8:
d7:ea:d7:c5:70:4b:c3:e4:ed:0d:48:71:13:88:6d:d6:f2:17:
19:f3:90:79:d9:80:39:26:67:1e:86:31:11:ae:1c:88:81:c5:
3e:13:14:85:a6:4a:e2:97:32:6f:cb:a7:f8:ad:3d:3e:79:fe:
53:af:f0:6e:2e:9e:8a:82:1f:2e:68:8b:48:af:19:6e:f7:03:
c0:09:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:24 2025 by rpki-client