Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: EST/CY4JQX3ZBL3kOVwHBnlRzzhQD6OrOhxoXAu5QK8=
Subject key identifier: D0:F7:19:E3:FB:2E:EE:2F:17:E4:7C:79:EC:6B:DB:DD:AB:EA:19:9D
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 0198D5F19BF19E48F120A1CDC7F80C066277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 0816
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: 2ysQHoWimUTmucBTVxwQCyzuZzA3JSYH++CQMUciPSE=)
2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9b:f1:9e:48:f1:20:a1:cd:c7:f8:0c:06:62:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=d0f719e3fb2eee2f17e47c79ec6bdbddabea199d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:ec:36:8e:df:3b:c8:20:e2:a2:f6:06:e4:
e5:ee:fa:f8:5e:b5:4f:08:76:62:1d:8d:3e:fe:9f:
b4:0d:d9:22:a2:b9:9f:a8:0b:9e:43:0e:8a:d0:07:
15:2a:61:10:b8:4b:d2:50:f6:ba:2e:39:0f:95:c6:
fc:1c:08:0c:6a:32:c7:81:d6:41:50:05:af:0a:34:
32:a1:35:0f:ab:88:f2:28:b1:dd:be:58:a1:7a:df:
5c:99:ea:73:be:fb:fe:10:81:b8:34:61:1e:4d:f4:
ea:f3:ed:8d:28:62:11:ca:3c:1c:9b:78:31:8d:49:
51:8c:05:19:99:fd:c3:af:36:2b:25:e4:83:c9:fd:
ce:eb:96:37:d8:95:c6:1e:48:17:d2:76:e8:04:e7:
5d:ed:dc:1b:fc:c3:d4:1d:97:16:2d:4d:c2:99:76:
7f:39:18:3e:b9:1d:74:22:e1:6c:70:ad:db:16:e8:
30:3a:b9:b7:b0:e7:83:cb:e7:71:02:b1:5f:85:55:
74:26:d8:bb:ac:77:1f:07:d2:f4:a1:78:34:b3:c8:
0f:23:de:83:92:0b:65:74:7c:56:67:e0:c2:bd:f9:
90:bb:ae:36:56:81:d2:a3:f6:ea:23:55:96:23:70:
76:97:22:bb:0d:ed:71:bc:43:9e:7c:6d:58:76:30:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F7:19:E3:FB:2E:EE:2F:17:E4:7C:79:EC:6B:DB:DD:AB:EA:19:9D
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bc:81:d6:ad:ae:c9:64:69:e2:bb:d8:c3:ee:43:cf:8f:9f:
e9:50:2c:d1:3d:d0:23:db:aa:16:0d:88:e3:d0:ce:e1:9f:89:
93:d5:a5:e5:d1:6c:e2:e7:e4:b6:83:77:6e:65:ae:6d:55:5b:
e2:a5:9a:37:13:f8:03:0b:b5:0a:ff:65:31:6e:05:6c:16:d2:
fa:c3:ef:eb:7f:1c:a4:89:60:c3:32:91:0f:7e:0f:ba:2d:f5:
4f:59:b0:bb:dd:c3:0c:2b:80:9c:0f:eb:2b:b8:a8:02:41:87:
7e:f6:da:b9:8b:00:95:5d:53:9b:48:e2:c5:fd:1f:94:19:3d:
fa:17:6e:18:8c:f2:e8:46:7a:32:fd:1f:ef:8d:bb:90:39:e8:
7f:ba:de:9b:66:55:f0:d9:20:e1:44:03:4d:96:ab:a0:91:bb:
da:77:4d:9b:b3:f8:4e:58:a6:90:75:02:ff:73:15:34:ae:b0:
4f:bb:06:75:68:aa:35:47:5e:05:51:2f:85:3e:3f:b0:ee:9f:
e6:5c:6f:a4:c2:89:9d:08:26:6b:f8:04:d9:87:41:7e:b7:72:
0a:6e:63:e7:73:1e:b9:38:bd:ec:7a:8a:2c:8f:87:62:48:22:
81:fc:1a:ec:43:fc:b0:c3:80:36:1c:de:03:13:c4:7c:b3:c1:
02:50:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:43 2025 by rpki-client