Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
File: QPwHKZcRrfoiLiexKLdtHZdFBYI.mft (raw, json)
Hash identifier: +U0EqdwLnV/gjJhIzAcZ7A+DK+Y6HzRt/4pjPq80l1Y=
Subject key identifier: CC:C8:63:21:6E:4A:1A:A5:89:60:53:CB:DD:89:2C:FF:BC:3D:DA:7B
Authority key identifier: 40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
Certificate issuer: /CN=40fc07299711adfa222e27b128b76d1d97450582
Certificate serial: 0198D77373D88BE6B78010B43B8F66908284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
Manifest number: 12F8
Signing time: Sat 23 Aug 2025 15:02:04 +0000
Manifest this update: Sat 23 Aug 2025 15:02:04 +0000
Manifest next update: Sun 24 Aug 2025 15:02:04 +0000
Files and hashes: 1: 6KpfPRVUGyFsCkAEFBqf-wSXAyw.roa (hash: kWhiEuOzAfB/QvRqngqpda0Xfcej2KhLVFQbnAjy7tQ=)
2: QPwHKZcRrfoiLiexKLdtHZdFBYI.crl (hash: PZVgTDNc0ADGxXynMbDO4EHsHyIuYToRo6An2xbNZaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:73:d8:8b:e6:b7:80:10:b4:3b:8f:66:90:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fc07299711adfa222e27b128b76d1d97450582
Validity
Not Before: Aug 23 15:02:04 2025 GMT
Not After : Aug 24 15:02:04 2025 GMT
Subject: CN=ccc863216e4a1aa5896053cbdd892cffbc3dda7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:49:cb:f1:8f:0f:59:84:24:a3:0b:4f:ba:
46:13:44:60:df:db:72:f2:37:24:16:32:33:5b:fe:
ab:bc:0b:98:f4:4f:36:99:2c:75:a7:c8:44:90:00:
0d:59:a8:d8:27:d0:8b:b2:79:15:3b:ec:d0:4e:98:
6f:eb:6b:14:47:59:b2:7b:cd:93:f2:e2:d0:94:1d:
ae:93:97:8f:5a:b5:f1:39:7e:9c:b3:f1:53:9c:1a:
24:9b:f8:0a:eb:c2:a1:67:e5:26:db:21:08:7b:60:
bc:91:03:ef:4d:6a:ca:17:8d:47:3c:fe:fd:a1:61:
8d:2f:ca:a9:06:94:12:74:b2:2f:55:a9:c1:44:d8:
23:9d:b4:bd:9b:0c:77:43:c8:32:81:50:dd:7c:a5:
f0:f1:02:c3:87:4e:56:c8:05:e9:ee:5f:19:5e:dc:
36:2c:a8:59:5b:77:54:bf:6b:61:2c:1c:6b:7e:ac:
ca:79:b4:16:d5:64:05:30:ba:7c:f6:73:10:a4:a3:
42:47:9f:1c:db:1e:05:3c:87:19:2c:f5:8d:b4:cb:
80:ac:50:1f:80:c7:f4:54:cc:d2:8a:4f:a3:fb:f8:
2b:21:84:90:33:64:12:ca:7f:64:04:4a:c8:81:09:
aa:7a:ea:e4:c9:a0:7a:dc:97:13:3c:25:55:60:d2:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:63:21:6E:4A:1A:A5:89:60:53:CB:DD:89:2C:FF:BC:3D:DA:7B
X509v3 Authority Key Identifier:
keyid:40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d2:50:c3:e0:e5:b5:46:90:4e:bc:cf:ef:6e:45:d1:27:d3:
84:b2:fc:89:2a:02:21:90:37:c6:38:9c:19:6a:f4:05:0e:91:
a2:cf:d8:fd:e8:4f:51:63:3b:a8:41:2b:6b:5d:84:8a:c8:1c:
ec:52:0a:c7:d3:2a:67:a9:ac:d6:fc:81:34:fb:b5:74:3e:f4:
cf:61:b2:5a:c4:6b:ba:9c:8b:f9:03:7b:9c:01:a9:9f:33:76:
f4:f3:a3:ed:dd:b5:6a:36:27:13:47:82:fb:9a:03:de:42:d5:
1b:ba:9d:c4:ba:93:9e:7b:6c:bf:6b:f2:0e:9d:c1:b6:1a:5d:
31:dd:db:86:ee:d5:26:8c:6c:24:05:e4:86:fc:64:be:75:1a:
fd:29:40:81:ce:17:1f:67:65:1b:77:63:97:a7:f8:80:36:69:
ff:fa:d9:d3:ff:c6:64:73:a9:54:9a:86:d5:e0:f7:07:75:0e:
a6:db:f5:8f:41:bf:5d:f4:8e:6b:8d:55:e7:8d:67:6e:cd:ab:
04:c3:fc:25:0f:5d:64:65:2c:d6:f7:55:b8:80:43:da:0e:d1:
e3:78:97:0c:25:ea:15:c2:99:61:25:00:60:9c:76:62:4a:05:
36:23:4d:9f:6c:e8:10:84:1e:8a:b4:e7:32:a8:6a:cc:42:80:
c3:45:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:57 2025 by rpki-client