Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: x1dy8RKKhEV3FTDZbhTNqfw7BPlvrhBvsRD3kHWUe9Y=
Subject key identifier: 0D:2B:1C:85:EE:9C:1E:0A:AF:57:C2:C6:96:A0:31:AA:7D:BB:87:D3
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 0198D4DFFC1D1805AEDF9CEC4CBFBBF6AC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 1147
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: ipTrmE07kYV20T9f43IQCPIhtdX9vagERZVONaQyZAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fc:1d:18:05:ae:df:9c:ec:4c:bf:bb:f6:ac:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=0d2b1c85ee9c1e0aaf57c2c696a031aa7dbb87d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:26:fd:d0:1e:b3:af:8c:19:0d:cb:54:30:
d5:d9:71:39:e6:a7:e0:f9:b5:58:b1:9c:75:43:b2:
c6:67:a7:fe:cc:f5:ef:28:e3:61:46:d6:fa:d0:b7:
58:4f:c0:76:b3:16:ce:c8:17:a1:11:7a:16:c8:97:
db:18:de:94:ae:12:1a:2e:80:b0:6d:de:b8:94:66:
cd:d6:2d:14:e0:2d:65:4c:08:11:b3:40:5a:56:0a:
e1:56:01:a9:51:29:12:d1:83:26:41:fa:0a:a7:b3:
41:d0:c4:9e:21:16:8c:a7:a2:0f:7a:9d:43:f9:74:
c5:3b:cd:fa:97:70:6d:ef:3b:e9:a5:ad:70:ed:c3:
44:f7:f1:4c:d9:d6:a2:27:74:1a:b9:49:85:14:b1:
87:56:e6:6e:37:a3:24:f1:c8:96:c1:16:79:36:f2:
ef:56:47:66:49:63:d1:df:38:02:21:62:dd:e5:72:
1b:12:e6:82:ec:28:8f:18:e0:5e:16:e1:7a:03:ab:
c7:4c:56:a3:2d:2d:26:99:83:86:3b:8e:97:45:7b:
90:27:2f:33:79:18:08:a0:62:24:30:53:55:9b:0f:
f9:5a:58:d7:dd:49:fc:92:d8:a1:cf:34:5e:40:ee:
d1:76:55:f2:98:88:7f:20:70:1f:ef:57:c1:c3:4a:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:1C:85:EE:9C:1E:0A:AF:57:C2:C6:96:A0:31:AA:7D:BB:87:D3
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:4d:47:cc:4d:2e:bc:ab:90:61:13:0c:3b:9c:a4:b2:98:
b0:88:a8:5f:67:3d:9a:f8:a1:c9:75:fc:31:23:cd:3e:9a:80:
b6:f3:a7:a9:67:b5:fc:ff:c4:51:f1:07:d5:81:a2:4a:2f:61:
f5:6e:3a:a6:a0:37:db:44:6d:ba:d3:e6:3b:aa:f9:a1:b5:86:
b0:61:a3:69:bf:f7:94:7c:c1:4d:69:d2:01:66:c2:4e:03:8a:
33:38:50:62:b1:ba:82:de:f1:8c:98:70:fc:b1:b1:74:da:f2:
2e:a5:fd:80:6b:03:ca:e0:66:9d:46:31:50:ea:f6:66:1b:da:
41:e8:f8:b3:da:ac:4d:db:17:12:61:66:26:3e:db:56:71:22:
fb:2d:4b:00:89:71:09:23:81:d8:84:fd:32:0d:50:f0:09:4b:
35:c7:53:3b:1a:82:87:09:cc:d9:a5:12:28:65:5a:ff:e4:3a:
f8:e0:1d:ce:6f:c4:b2:6b:42:ad:ed:39:db:c6:fc:f8:88:aa:
fb:04:8f:bf:d4:78:53:ed:9d:df:c1:cc:16:98:f8:40:ba:0a:
e5:7f:75:5a:e0:48:ac:05:f6:8a:a6:b2:f4:34:41:d5:fa:62:
71:5c:7c:2c:f8:c7:92:e2:c0:6c:0b:38:e6:4d:61:07:8a:72:
3c:c1:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:52 2025 by rpki-client