Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: bvsnPw8B+5Zd+kmTVujPp5o3YNOUl/ylap7Mq7IfHqc=
Subject key identifier: 94:1E:79:6B:F8:44:82:87:D6:F1:E2:71:26:E6:96:A9:32:CF:42:B5
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 0198D5F18D5E43C47261C2C388B47A673959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0C20
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: JHYkoYzeTJ6gJjrJAMU/FqxVml64KBw4vupl2/FR6t8=)
3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8d:5e:43:c4:72:61:c2:c3:88:b4:7a:67:39:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=941e796bf8448287d6f1e27126e696a932cf42b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:3d:08:27:34:4b:91:98:54:5e:19:f4:54:
3f:e0:cb:d6:e4:99:68:d5:c2:b9:0a:38:1c:2e:bd:
1e:ef:ac:33:96:50:bb:f2:c1:87:df:e2:1c:9d:62:
56:9d:99:38:e1:b3:c2:ea:2e:b3:df:4c:5b:6b:45:
35:58:42:57:d1:b1:ce:be:08:37:eb:4f:b3:ac:fc:
98:6a:4c:89:11:39:04:58:50:70:58:fc:62:5c:22:
23:11:dc:ac:ef:5b:bc:23:ab:90:f3:96:79:5b:6d:
f1:f6:40:9d:f1:8a:2b:75:dd:a3:49:4b:04:b1:99:
1b:e7:17:31:15:ba:ed:fa:19:1f:c1:43:96:4e:32:
bf:c7:45:ef:b4:32:6f:35:65:c6:5e:6b:04:95:86:
c2:56:09:ec:fc:c5:9d:a3:f2:74:10:21:bb:2c:f1:
93:d3:81:aa:32:7e:b7:74:29:f7:15:ca:e6:4e:a8:
44:d8:95:9e:d0:00:1c:6d:a5:30:06:36:ab:84:e8:
b4:8b:cf:3f:1f:07:f4:6e:df:3b:96:87:36:3f:83:
c6:78:6b:07:7b:e6:eb:5e:a9:d9:d4:0c:36:ba:37:
e9:33:32:6c:82:ae:a3:cc:e3:0d:11:02:84:ce:a9:
e6:d4:bb:88:08:e0:cd:9b:c4:05:ce:da:d7:33:ab:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:79:6B:F8:44:82:87:D6:F1:E2:71:26:E6:96:A9:32:CF:42:B5
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:55:1e:2e:1f:a2:6b:ae:d6:73:e5:4a:a2:84:f6:bb:93:c0:
04:7a:da:65:69:14:b8:6b:71:da:be:f0:cf:c4:86:52:d9:db:
52:3e:0a:b2:4c:5d:11:d7:f0:d5:a4:81:0c:41:a4:49:00:6a:
f5:69:6e:32:01:85:3c:01:0f:7e:d0:07:1f:59:c3:5a:08:b5:
09:d7:61:f8:98:46:41:8a:3b:02:a7:45:64:4e:a1:a2:cc:c1:
5d:99:34:ea:bf:9d:61:90:ca:e8:e1:0f:32:57:27:03:58:cc:
47:83:1a:39:d3:b5:d0:32:43:d1:0b:33:3d:41:7e:12:59:2d:
1c:0d:b8:67:9f:49:fc:03:3f:ba:85:29:17:8f:35:3c:25:14:
b4:b7:a7:40:74:3f:4d:b8:e6:0a:63:6a:0c:2a:2d:43:35:3e:
e9:f6:01:8a:6d:ec:4a:de:7c:bd:c6:e0:f1:6f:3b:b6:bd:c5:
d5:18:fe:94:80:fe:37:84:ae:af:7a:31:bd:b7:93:cb:b4:59:
03:ac:eb:a9:5f:41:83:b9:e5:d7:3d:42:24:0e:2b:b3:d3:99:
c6:d3:1c:41:20:ef:33:4c:c1:ed:72:08:2d:56:98:20:d1:04:
42:57:f9:fb:1b:f7:bd:12:2d:18:ad:d6:84:36:29:da:58:cc:
a8:22:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:55:07 2025 by rpki-client