Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: 5l2FerNtyROh/V2XEtxnnjYMqi0V55dNfUqdg3jM9k4=
Subject key identifier: 42:EB:B5:BC:51:AB:41:9E:1C:62:5E:D7:5C:62:3B:BC:F6:FF:20:EC
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 0198D6CDF48A5BE1C8DB4471F8329BA4B818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:01:18 +0000
Manifest this update: Sat 23 Aug 2025 12:01:18 +0000
Manifest next update: Sun 24 Aug 2025 12:01:18 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: zqsRvBQvDyhPkPkj7l9IMAgE2Vhm4RTG4mmjPEmebbY=)
2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:f4:8a:5b:e1:c8:db:44:71:f8:32:9b:a4:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Aug 23 12:01:18 2025 GMT
Not After : Aug 24 12:01:18 2025 GMT
Subject: CN=42ebb5bc51ab419e1c625ed75c623bbcf6ff20ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:fa:99:b9:61:79:e0:8d:78:c6:db:a5:8e:
b0:19:7d:c5:f6:4c:c1:9c:a5:62:5f:ad:20:e1:5d:
5f:9f:5b:a2:3e:43:db:1e:fc:c8:4e:f6:ba:96:17:
86:3d:11:f3:af:00:74:32:d7:e6:e2:36:c7:a7:f6:
4d:58:61:86:d9:e8:c6:a8:c1:5f:09:da:13:56:19:
6c:4a:f8:28:a0:1d:4e:8a:99:23:98:27:bf:3e:4a:
8c:40:22:10:60:dc:6f:f6:02:35:cb:07:64:13:77:
83:4b:d6:c3:ee:2d:37:3f:dc:9a:5a:ca:91:86:08:
e4:3d:96:76:37:19:fb:79:f8:df:eb:ee:a0:18:14:
52:f9:6c:4f:32:b4:85:b6:0d:93:38:e7:46:91:60:
c6:1f:30:7b:23:a4:3e:ee:8d:e6:e1:c3:17:17:58:
9e:38:b4:2b:f0:0e:05:4b:12:be:7a:01:8b:a3:85:
86:bb:22:49:4b:45:6d:9d:de:2d:f0:20:12:3e:3c:
6b:aa:78:c7:17:85:64:2b:dd:1e:dc:30:0f:1f:d8:
00:52:c4:5c:66:d8:8e:0f:df:33:fd:bd:23:7f:49:
b4:91:d1:9f:4a:6b:6e:00:ca:5e:5e:82:28:14:a1:
b9:88:c8:c4:f6:c5:f8:bb:60:80:5e:84:96:b8:3d:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:B5:BC:51:AB:41:9E:1C:62:5E:D7:5C:62:3B:BC:F6:FF:20:EC
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:5f:ae:1f:09:d7:44:5e:60:e2:8b:e1:c5:5f:bb:32:31:
bd:f1:91:ca:ae:92:58:52:f2:b8:4d:2b:e6:37:46:12:3a:38:
82:a1:22:ed:0d:f2:e7:50:ba:bf:d2:e4:7b:08:15:1b:3b:8c:
46:bb:3d:7a:a6:88:7b:87:fe:96:7f:21:78:11:c0:1a:37:01:
75:77:b8:2b:3e:f6:39:e9:84:e3:47:dc:32:ba:2e:77:ab:55:
52:a2:bf:3f:2d:47:0e:a3:93:91:55:07:29:8d:b0:dc:0c:00:
bb:32:77:f1:bc:d9:43:12:af:a6:99:72:07:d9:e6:2a:65:d0:
81:ed:71:6a:a6:34:28:39:cf:51:eb:d7:7c:b4:b8:e5:5a:ac:
fd:17:f5:a3:51:73:09:e2:eb:b6:72:c8:07:b0:9c:b4:f4:2d:
02:b3:e2:b6:f3:35:57:66:aa:74:1f:4d:59:9a:0b:24:9a:3c:
fe:4d:12:a7:05:ff:39:65:f0:a7:74:3a:09:10:79:6d:c1:0b:
87:fd:97:ed:80:0d:6d:3c:ac:0b:af:af:2c:78:8c:04:48:64:
ea:4e:82:ee:3e:e1:1f:70:9f:18:15:00:7d:51:05:08:f3:be:
b5:dc:b3:40:6b:fa:eb:79:51:71:dc:ce:a8:6e:b4:2b:5e:76:
43:b1:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:37 2025 by rpki-client