Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: gmSRbR38SQQZPY+vBABpSWIXUTcTZZH1lfIvy59znn4=
Subject key identifier: 26:D9:B1:FB:9B:CF:CC:CB:A0:A4:2B:70:AC:B8:7A:88:35:89:D7:45
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 0198D5F13FC7E2A715464BBB46A55B18CB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 1386
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: 5c2NLI1QDWoaXuE5JMDlFQ/3SBwyI9loRwq0LuhdHos=)
3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3f:c7:e2:a7:15:46:4b:bb:46:a5:5b:18:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=26d9b1fb9bcfcccba0a42b70acb87a883589d745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:3d:2c:25:54:27:6f:24:8e:ea:4d:b3:5d:
70:75:0c:08:e8:f4:ec:13:ef:bb:9e:b7:89:46:e2:
7a:76:b7:a1:36:9f:ad:2b:f1:43:e1:4d:b3:2e:14:
6e:74:3e:da:47:a0:80:4f:10:74:e6:61:43:83:c2:
a6:ef:94:6d:35:af:77:8d:7e:79:c5:8a:3d:cf:54:
49:eb:c5:00:56:b8:cd:9e:93:30:cd:0b:8b:18:66:
90:4b:51:43:68:6d:25:35:4c:34:a4:97:dd:f2:69:
0e:67:48:d6:9d:b4:a7:6d:c1:c0:4a:e5:56:bb:84:
60:7c:f7:3e:e5:7e:68:ef:4c:a4:4b:ef:bc:33:d5:
88:d7:2f:26:01:f8:26:99:09:b3:41:2f:25:a9:fe:
da:48:d8:0e:b1:35:8d:be:a3:1c:6e:c9:16:73:9b:
9f:5c:5b:d6:ce:e4:d2:1a:cd:e4:9e:2a:81:27:27:
4f:a9:85:da:55:c8:4a:02:1e:fb:6f:6e:3e:e9:96:
59:3c:24:4c:3b:a8:e9:00:52:92:f0:be:52:fb:d5:
9d:d0:69:58:da:b2:b5:3a:0b:9b:6d:45:10:4c:ae:
c9:5a:97:49:05:90:92:5d:62:97:c7:40:19:41:2e:
c1:f9:c2:bf:67:ea:6d:75:cb:c3:a5:95:b2:40:9b:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:B1:FB:9B:CF:CC:CB:A0:A4:2B:70:AC:B8:7A:88:35:89:D7:45
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6d:36:66:7c:d8:c8:bc:20:4c:0a:d5:d1:02:4a:2c:ac:ef:
02:55:36:ea:4a:9c:cd:1b:3c:fa:3a:75:69:22:c0:75:61:35:
32:5b:e4:52:17:32:ae:6d:e5:65:17:07:4b:ed:0d:90:ed:98:
c2:1c:d4:64:a5:a3:1d:7c:8a:06:a3:ea:93:e2:63:69:04:b9:
ea:d8:a9:d0:0f:03:f3:49:75:48:57:27:2c:48:84:23:85:df:
83:a8:71:72:d8:f6:98:f4:1f:19:07:a2:52:29:95:7a:b5:1a:
17:a0:ea:27:9c:83:e7:3a:f0:b5:56:47:39:80:ab:df:8a:a5:
4e:ad:a3:c8:df:b2:1e:1a:da:b4:8d:24:97:eb:2d:7a:7e:a7:
33:36:83:d5:8e:00:fe:c2:b7:9c:1d:24:7b:9b:95:d1:7b:1e:
78:ff:af:ff:b4:a9:35:b4:13:be:34:38:51:75:c3:8e:ef:79:
ca:c8:a8:ae:27:dd:68:5b:90:6c:33:ad:ea:27:2c:b9:3b:2d:
39:38:02:e1:38:e2:44:64:8d:dc:0d:11:e4:b3:11:3b:cd:c5:
10:6f:08:3e:92:01:d6:25:31:42:a6:58:a3:90:ea:0a:64:42:
d9:d7:4f:a9:7d:89:35:cf:18:cb:b2:b6:59:f4:b1:63:30:83:
13:f4:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:27 2025 by rpki-client