Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
File: QaCIiaXMcoT9MkqZK_qN59bCwYo.mft (raw, json)
Hash identifier: RFdHyU/KL0hodTSPWj37P8hiOE5lBAIOYRx2e6Iq+LA=
Subject key identifier: 1A:23:A5:E1:2C:51:E9:3B:4F:8D:0A:12:27:8A:31:24:9B:C1:50:C8
Authority key identifier: 41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
Certificate issuer: /CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Certificate serial: 0198D73BA5861FC34AAF40DB2579339536E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
Manifest number: 05A7
Signing time: Sat 23 Aug 2025 14:01:07 +0000
Manifest this update: Sat 23 Aug 2025 14:01:07 +0000
Manifest next update: Sun 24 Aug 2025 14:01:07 +0000
Files and hashes: 1: QaCIiaXMcoT9MkqZK_qN59bCwYo.crl (hash: nanYsxY5yHDN44olLWsWhuWlotjb2OzIzksBsSNqiFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:a5:86:1f:c3:4a:af:40:db:25:79:33:95:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Validity
Not Before: Aug 23 14:01:07 2025 GMT
Not After : Aug 24 14:01:07 2025 GMT
Subject: CN=1a23a5e12c51e93b4f8d0a12278a31249bc150c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:43:b9:32:22:87:ac:06:5a:c7:65:86:1f:
ff:f4:da:cd:75:25:17:d5:84:28:17:f0:ad:b9:38:
4f:61:d6:f2:e8:2b:ed:2b:87:f9:af:69:05:75:22:
d1:6f:9b:2a:23:51:74:3a:6b:0e:1f:d9:06:ec:01:
64:37:c0:83:f5:76:e4:0a:cf:da:cf:cf:6f:d7:f6:
9a:4e:de:79:06:b8:75:9f:45:2b:fc:2e:c0:be:23:
d9:ae:af:76:07:92:5e:40:85:50:2c:38:5f:f3:f9:
09:12:3a:e0:3a:93:6d:6c:ca:09:62:dd:23:b5:0f:
1a:10:b3:95:aa:c6:28:58:11:c5:73:67:9f:ad:93:
3d:60:3a:53:6d:12:23:f7:50:43:45:8a:e8:c0:5a:
48:a9:df:0a:f5:29:84:27:7e:8c:77:e9:c8:f0:41:
38:c7:19:4b:f3:e5:12:a8:9f:4f:8e:e9:8a:f6:1b:
b5:ed:aa:f5:22:24:ef:03:45:88:b6:d5:bb:52:35:
0e:e6:93:38:fb:6f:4f:80:58:46:2a:83:a6:7e:f3:
31:55:8e:ce:e5:6a:3a:74:4a:c3:ce:1b:09:5e:f5:
9e:e0:29:11:1e:90:6b:05:11:15:2b:0e:9b:27:95:
cb:e6:c5:1b:8a:48:3b:fa:9f:18:09:53:f5:f7:64:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:23:A5:E1:2C:51:E9:3B:4F:8D:0A:12:27:8A:31:24:9B:C1:50:C8
X509v3 Authority Key Identifier:
keyid:41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2b:10:4e:66:b1:b4:a3:72:19:3a:75:6f:3b:5e:fd:d6:13:
cd:f7:c9:bf:60:67:46:ee:b7:d5:f8:79:08:b4:ad:e4:30:4b:
c6:a6:4c:9e:c7:49:27:54:04:bf:ad:4e:7c:54:e7:51:2a:4c:
81:aa:db:2d:e2:8d:fa:67:73:a1:34:a9:97:45:0e:49:01:ea:
89:cd:50:26:06:dc:00:78:f4:67:74:6f:47:2e:2d:dc:ec:1d:
db:ac:89:65:8d:28:83:8e:64:51:1a:5e:1c:73:d1:85:bb:d0:
18:0f:53:70:61:3e:e6:34:7a:c4:73:37:b3:6c:b4:ac:1c:73:
27:6c:29:e0:a4:62:ae:d9:fd:b6:26:d2:80:85:32:5b:62:06:
d8:22:01:bc:38:4b:8f:91:82:93:8b:75:39:bd:ec:f1:ba:19:
42:76:14:93:ac:f3:ad:9e:8c:f2:1b:db:da:cd:77:ff:bd:51:
8e:c5:76:06:0c:e2:bf:cd:b9:35:dd:d1:83:c7:22:de:ba:ab:
d3:c6:26:58:66:92:53:9e:06:f0:18:89:78:7e:68:a1:86:38:
d9:df:44:ca:2c:2f:c8:dc:8b:55:37:05:08:0d:0e:c9:5c:6f:
e2:77:43:1d:53:5f:4a:e3:a6:18:c3:5a:65:c3:c8:0f:73:ca:
7c:24:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:33 2025 by rpki-client