Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: FVSig2NuhAL5nddsS+86Wg2M/WmzVDxC55whGVsWGSI=
Subject key identifier: 73:8E:DC:EB:34:E8:64:AD:43:DF:CE:3C:AD:33:41:55:23:9C:F5:5C
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 0198D5BBBB405E42D24C63AA9E7BA10258DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: c4Z9fIzfqoexQAaaWTH8inhInIVOYxY3V4eilVz7Fn8=)
2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bb:40:5e:42:d2:4c:63:aa:9e:7b:a1:02:58:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=738edceb34e864ad43dfce3cad334155239cf55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:d1:2c:12:6d:5e:f8:a7:80:98:c2:c6:e9:
a6:45:ff:48:79:a6:fa:4b:7b:a8:94:10:4c:76:a8:
df:15:b4:b5:4c:66:6e:9d:a3:0f:50:93:f5:10:db:
db:36:6c:d7:97:c2:3c:e8:ea:d5:31:0e:a7:2a:60:
2d:db:b5:40:51:e5:e8:1e:36:a4:aa:15:65:98:a8:
fe:a6:f0:c2:96:8e:93:21:48:5d:5f:1c:4b:a7:d3:
a4:22:0f:20:ce:23:b5:67:c6:0f:6e:a8:7d:dd:b7:
2c:18:47:6b:10:29:25:62:e4:16:e4:9f:f1:b0:f7:
e1:85:8a:87:00:0f:04:2a:2f:f2:e9:77:17:4a:c0:
33:c8:3d:71:87:ec:08:2d:2d:19:15:6e:2c:0e:86:
1c:71:11:43:08:19:36:bb:3b:60:0a:94:99:20:8f:
46:81:be:7a:0e:d3:bf:59:43:29:04:cb:0b:1b:5d:
c2:ef:8b:ef:e3:04:16:fb:2b:d8:00:f2:43:37:37:
4c:21:6d:33:a7:e6:0a:17:7a:48:92:ee:33:d0:19:
e4:6e:53:a3:d3:3c:fc:66:5e:ed:5b:44:b0:03:83:
ec:fa:ce:22:33:1a:13:27:82:2c:bb:48:35:ea:00:
9b:b4:0f:bc:14:26:9f:11:93:9e:8a:82:f7:7c:c0:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:DC:EB:34:E8:64:AD:43:DF:CE:3C:AD:33:41:55:23:9C:F5:5C
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:37:d7:55:27:d4:8c:41:5e:aa:68:d6:c3:57:cb:36:81:2a:
8e:0b:ab:24:bc:29:90:d8:ca:10:50:42:26:1a:b5:24:66:b7:
a7:2a:78:80:93:76:e5:75:32:e1:dc:11:f4:c0:68:70:f8:c9:
5a:72:eb:90:87:3b:7e:4a:86:0a:e6:b0:d1:ff:90:b6:54:6e:
d1:04:46:08:fe:f4:ba:c3:55:b7:75:59:93:e0:f3:d2:dc:38:
ab:a3:9b:16:5d:1c:87:c8:25:ea:79:be:36:3c:ae:8e:a1:a2:
b0:7c:42:6f:3c:fd:03:42:fc:34:2c:68:b9:cc:40:65:d6:10:
f1:f3:75:ea:cb:0e:7b:66:b2:8b:d2:b5:69:74:f8:9f:60:e1:
49:f4:4e:a5:6d:36:b3:81:70:c9:8d:46:4a:e6:5d:f2:23:60:
4e:91:c4:2e:87:9e:8d:ea:00:f0:14:8c:77:8a:66:15:47:0f:
87:04:cb:7a:12:bf:3d:0e:c2:85:9c:c8:81:06:74:9f:a7:4e:
bd:17:8c:94:c6:ed:67:a2:4c:f3:fb:55:80:c9:d9:39:f9:9d:
b5:29:31:82:6d:85:91:99:58:63:08:b4:e4:bb:77:d8:cd:e4:
de:6c:07:0a:1c:54:7e:63:fa:dd:0d:a5:9f:6e:2a:45:6f:a7:
b8:e9:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:24 2025 by rpki-client