Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: 0B1YyJEB4XXNpoW/FBaHIbUNMJygLfbH1Wj+BGaVsnQ=
Subject key identifier: FD:8D:6B:5B:20:3E:74:DA:C2:AE:BF:24:A4:D7:BD:F4:29:52:10:10
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 0198D5837DA0D0C29A0A58E8F1A8C5866A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1299
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: BvIPRLzFNGpqc/BCJ4Plk1YNMxN8h5t8j1UWTD/y880=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7d:a0:d0:c2:9a:0a:58:e8:f1:a8:c5:86:6a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=fd8d6b5b203e74dac2aebf24a4d7bdf429521010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:c4:5c:9d:db:53:66:8b:63:bc:9f:be:37:
38:a1:53:2d:82:3e:72:48:3b:a1:69:4b:ac:5a:27:
43:7a:cd:32:e9:39:dd:a9:4f:25:8d:c5:64:f0:16:
42:01:99:39:1b:58:0b:8f:37:89:fb:84:d2:e4:db:
32:7f:fd:a3:bb:1f:0d:ac:3a:1e:d3:4c:59:3b:82:
b0:e5:06:91:ba:7c:9e:46:51:43:00:7d:62:06:5d:
c6:7a:ba:71:44:a3:f5:e2:11:5c:d1:5c:e5:ce:34:
76:f7:70:bb:75:1c:9b:39:35:87:4d:8d:a4:04:dd:
64:88:63:e2:37:58:52:99:99:f3:80:09:b1:f4:6f:
28:ee:55:22:a3:1f:6b:73:65:64:fb:23:62:8e:78:
b3:8c:99:7b:26:6b:88:bd:fe:57:c3:37:16:e1:ef:
47:84:2b:56:d7:5e:64:df:f1:5f:4b:89:d5:48:b5:
81:8e:20:9c:16:ca:cd:4f:96:1e:cd:f1:ed:3e:6c:
70:63:f9:e8:5b:55:e4:0e:04:38:48:9e:16:25:10:
45:5e:96:5a:aa:a4:d6:4f:79:34:f2:52:9e:43:31:
d6:9c:29:ce:ad:4d:01:0d:d9:ac:39:10:eb:fd:5e:
68:f5:83:9c:70:ea:0e:e6:1c:17:db:bd:db:4a:ff:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:6B:5B:20:3E:74:DA:C2:AE:BF:24:A4:D7:BD:F4:29:52:10:10
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5a:b1:12:03:e3:42:60:af:5e:09:94:5b:1b:53:a8:76:17:
eb:6d:3d:71:21:76:e8:3b:bc:46:8e:b5:9f:f1:11:af:10:99:
b7:0d:fb:f0:c9:3e:c5:80:1b:8e:dd:87:7a:11:d9:57:cc:41:
22:ac:cf:9a:d0:dc:6f:75:39:ef:27:6f:00:75:cf:8d:c1:1e:
69:30:03:2e:95:6f:ef:2b:0d:c5:91:bd:f8:3e:31:76:b6:a3:
b1:59:36:3d:a3:78:8e:d2:58:7b:8d:99:89:19:83:b9:fd:40:
d3:c1:13:d1:1d:c9:77:05:ce:f3:e4:4e:7e:d2:69:bf:6b:c1:
58:a1:5a:3c:e2:4f:4c:53:74:e8:9e:c9:c7:a2:d5:b8:85:fe:
64:bb:b0:0b:96:ba:7f:8f:6a:da:7d:59:d2:71:1a:52:59:46:
87:aa:e8:29:aa:6a:80:b1:18:8d:d7:90:ed:cc:75:6e:ae:e1:
41:60:23:b6:e5:5b:c6:9e:bd:c0:ab:52:48:45:0d:87:10:5c:
c6:9d:73:cb:4a:80:d1:6c:27:7e:60:4d:65:1c:db:a1:88:0c:
a4:1c:99:17:2a:05:97:87:a5:23:89:a4:52:ad:46:bb:8d:c2:
26:ea:17:5d:62:0e:1e:bb:a9:fc:03:07:22:5a:d2:a8:d6:8a:
d8:34:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:01 2025 by rpki-client