Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File: QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier: 4FOgO5Wxka3E/ALA8qYl3/zIn+ryMGl3smodianvA8E=
Subject key identifier: 83:71:B6:F2:2C:DA:BF:78:35:2F:D7:CA:2C:D9:7B:A7:DE:C6:48:10
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 01987373FE8D89EA99CDA32A5E33EA2C7620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 05:00:38 +0000
Manifest this update: Mon 04 Aug 2025 05:00:38 +0000
Manifest next update: Tue 05 Aug 2025 05:00:38 +0000
Files and hashes: 1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: mZHOwNd0GdHCx9HFQ8yl+xtkCEU2U/HDTJwqEQr3zP8=)
4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:fe:8d:89:ea:99:cd:a3:2a:5e:33:ea:2c:76:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Aug 4 05:00:38 2025 GMT
Not After : Aug 5 05:00:38 2025 GMT
Subject: CN=8371b6f22cdabf78352fd7ca2cd97ba7dec64810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:51:ae:98:d2:ad:90:43:d9:4b:bf:8e:b5:
80:cb:09:b2:00:96:c9:e0:17:24:b3:d6:10:e7:7c:
58:f7:f7:d2:49:8f:89:0f:f3:f6:26:94:27:b5:1c:
04:72:9a:d5:9f:7c:48:80:39:c8:27:8c:e1:43:80:
0f:48:98:8e:d0:4d:2f:14:de:f8:65:f3:d0:1d:e1:
30:bd:4a:8d:2b:91:1c:9d:60:cd:81:e3:23:8d:e8:
4a:6a:fb:2d:55:ca:36:6f:09:8e:0d:7a:11:e9:3c:
5f:19:5a:a0:29:97:fc:64:4e:d1:f1:19:ca:26:82:
2a:50:21:e0:37:5b:37:dd:3e:d3:3f:f4:41:94:67:
fb:57:49:04:15:d8:91:25:3d:1d:1d:6b:76:8f:26:
1c:17:1f:9b:f2:8c:68:e9:9e:c5:cd:c5:a9:0d:6f:
e5:c5:3a:26:2c:33:b6:2c:b0:84:7a:f3:20:1f:6c:
d4:91:47:5b:b5:28:4d:c3:11:39:ea:22:64:02:d1:
96:f1:51:ef:4b:26:95:77:29:c8:a6:3c:1c:b4:ee:
c2:19:7b:5b:37:60:80:12:cf:60:84:f8:a0:77:9a:
a2:06:82:a9:a3:bd:b5:da:dc:a2:66:0f:89:d5:e2:
76:f8:e5:9c:c8:0f:b0:b0:76:60:26:61:45:83:fd:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:71:B6:F2:2C:DA:BF:78:35:2F:D7:CA:2C:D9:7B:A7:DE:C6:48:10
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:6b:b5:7c:54:a4:c8:9d:92:33:2f:07:92:c3:c8:3b:49:
7f:ff:7c:96:13:e7:dd:50:ce:84:d5:8e:a5:32:f1:9a:d4:90:
55:7f:32:bc:fc:56:20:3d:90:b3:b4:41:ce:85:c2:9b:e0:b6:
96:85:b3:4e:39:d9:c6:49:07:54:d3:f7:a2:81:95:76:bd:77:
ea:3b:47:e4:7c:3d:8f:56:84:58:84:95:bb:12:1e:92:ef:3b:
42:13:07:a5:00:44:ab:db:b7:c3:2b:25:84:6f:11:f9:bc:5a:
67:3c:54:f2:88:4e:8b:c3:7e:af:7e:99:46:39:09:4e:0c:e8:
4f:24:03:59:46:87:ad:9f:50:2c:22:4e:49:78:90:fc:39:ae:
f9:62:79:96:5b:4b:02:24:48:1a:93:fc:a2:bf:1a:2a:03:5d:
fc:3d:1f:1a:d5:28:61:82:ec:4a:98:b7:41:fc:b9:8f:eb:1b:
fd:7a:02:66:1f:55:7a:0d:99:64:ef:09:ff:a4:02:09:c0:56:
23:30:ec:78:29:2c:7a:3a:bb:8f:28:3a:78:49:08:36:82:61:
b1:10:ea:d6:aa:3c:d4:c7:fa:e5:0c:fc:b0:23:ff:6a:1b:6f:
9c:d9:dc:c3:33:ef:b3:d3:73:e4:f4:14:cd:ab:ca:19:24:09:
06:a8:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:56 2025 by rpki-client