Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: 4y0MEktV7Ds39TtnMrMrStQa7/blU/b/HlpQj3/iwXA=
Subject key identifier: 9B:F3:F9:A4:00:A7:F5:73:5D:0E:75:2C:6F:70:10:19:FF:E3:94:F3
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 01988D6BAFE1ED8982700E7F6B67BC4DCD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 13AD
Signing time: Sat 09 Aug 2025 06:01:41 +0000
Manifest this update: Sat 09 Aug 2025 06:01:41 +0000
Manifest next update: Sun 10 Aug 2025 06:01:41 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 8XptI3f3yC3vtbvkEELs/6SEoz9d7rJlUR9zuhPLccg=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:af:e1:ed:89:82:70:0e:7f:6b:67:bc:4d:cd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Aug 9 06:01:41 2025 GMT
Not After : Aug 10 06:01:41 2025 GMT
Subject: CN=9bf3f9a400a7f5735d0e752c6f701019ffe394f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:b8:39:28:d0:04:03:9b:b0:ad:57:8c:d7:
22:6d:63:96:ea:12:c0:f5:3c:08:15:60:5b:3f:fb:
e0:fc:c5:ee:e9:3b:6d:f8:19:6b:18:f2:0d:64:78:
4c:ed:e7:12:61:dc:55:c1:14:16:82:fb:9a:90:b3:
a7:9f:06:3c:a5:13:1f:74:c6:cc:8e:56:b7:8c:ce:
de:69:2b:19:35:a7:7e:55:fa:16:77:57:7a:e6:85:
7d:d6:c9:d9:14:7f:c1:89:af:7d:d7:d3:0c:77:56:
71:80:1e:44:b6:a6:bd:9b:c8:af:8f:dc:e6:ec:ea:
27:46:cd:65:8f:b3:e7:d1:d7:ff:f7:9c:1b:c5:93:
b8:27:07:1c:f1:67:b7:1c:82:cb:ab:93:0e:f6:31:
46:51:db:a4:18:46:be:f6:30:9e:f3:62:b4:93:a9:
d8:fc:95:8c:74:1d:cb:4b:2e:e5:1a:1a:91:df:4f:
41:75:16:f0:91:a1:72:34:cb:54:1d:d1:67:1f:f3:
90:55:54:e2:a5:98:bb:cc:0c:dc:4b:73:d5:ea:2d:
01:48:0d:1f:7b:b2:85:9a:a5:e8:d6:97:ad:0a:9a:
da:19:06:6d:2b:99:02:ff:14:03:6a:9f:3d:4b:ed:
95:3b:77:97:22:c3:0c:c2:1b:b5:76:2f:9e:6a:f6:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:F9:A4:00:A7:F5:73:5D:0E:75:2C:6F:70:10:19:FF:E3:94:F3
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6d:e3:e6:c5:26:a0:5c:31:ed:c7:81:b7:f8:4b:cc:47:99:
36:ee:90:ba:bb:5d:17:f8:ab:10:47:24:bb:30:5e:09:ec:d9:
71:4d:4f:d1:6b:78:13:62:a6:54:98:28:98:a7:37:b0:dc:96:
a9:2e:91:0c:8a:ac:3b:c0:70:fc:6d:b0:78:60:b4:5f:c9:1a:
e2:5d:62:e7:35:86:45:7a:9f:64:45:1c:4b:79:48:7b:ac:42:
66:71:45:60:b8:a8:58:ec:61:64:e5:f6:e3:6e:d3:23:56:58:
70:8d:1d:55:85:c7:7d:59:9e:b2:94:43:a2:c1:95:63:47:f3:
3e:3c:bb:41:f9:5c:c3:61:bb:d6:0d:f1:12:6e:f2:c5:7f:44:
de:1f:b5:d9:c3:2d:78:e4:1f:64:98:a1:e0:c6:82:70:a7:ff:
b9:b7:97:b2:e4:c9:a4:48:6e:1d:e8:47:02:95:fe:c7:d3:24:
a4:e0:f6:95:b6:cc:da:8a:c5:0d:94:3c:24:2e:b9:40:0a:2a:
7f:11:5e:fe:d9:d4:8e:fe:27:49:82:96:83:09:02:8a:28:c3:
d0:8f:36:02:17:93:7c:d8:b4:98:49:b6:d4:af:15:95:64:d5:
da:d5:a8:8d:56:18:93:2e:c8:5d:77:ad:cc:54:9b:26:f2:aa:
46:aa:1c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:51 2025 by rpki-client