Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json)
Hash identifier: g3/4Fiv1l+oNod4okVJvbIvn/eEbUxd++SgFA9fgoA8=
Subject key identifier: BE:0C:67:A6:B5:A2:49:A6:69:86:1D:54:F2:74:C7:7C:FF:5D:51:85
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 0198D4E01DD6B2E26FE25AABB7A5208DE18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
Manifest number: 018F
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: TwjK4B8LQ2p81/hGgGwv55pYXmc5dXPIcA5CyKqN+Eg=)
2: rg92faZanaYES8NBj5pg8WmI5nI.roa (hash: 8R4hL47sFCLdHAmoIZE8IPnGm4ZN8Yi2FpnpcDwoEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1d:d6:b2:e2:6f:e2:5a:ab:b7:a5:20:8d:e1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=be0c67a6b5a249a669861d54f274c77cff5d5185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:fd:7e:58:d3:b6:0b:8a:3b:8d:33:9f:db:
d2:70:e0:3e:1c:44:fe:09:54:ee:ac:67:bc:46:2d:
b9:3e:55:3f:48:a0:66:78:3b:31:76:39:27:c9:c4:
2f:75:14:4d:87:a9:ce:83:7d:33:e9:a0:e0:0b:71:
65:c1:98:70:de:0e:a4:72:3f:64:1b:64:07:4c:93:
ae:37:1b:dc:61:c7:83:82:52:65:fe:e9:1c:63:72:
bd:6a:b0:d1:9f:a5:bc:f1:79:a4:a6:d2:c9:bd:64:
28:1e:11:57:ff:c9:c4:26:96:9f:9e:58:64:81:d8:
8f:7c:42:23:78:47:d5:40:0d:70:bd:34:46:c0:58:
26:34:8a:fe:b8:5d:68:8b:bc:ff:2d:29:cf:ac:f5:
0f:d5:40:15:21:cf:af:6d:d1:a7:ee:20:03:32:a9:
9c:89:54:24:13:2d:80:96:87:1a:f2:b3:50:39:66:
15:10:2a:52:24:54:09:f8:e9:99:58:a3:b8:95:4e:
c6:62:7c:2c:85:3a:d9:58:5a:81:f7:c0:b9:4f:4d:
21:7b:96:9e:32:2d:0c:6b:20:f2:74:ef:5f:4c:34:
4f:fc:ab:4c:d8:ad:ed:29:21:55:13:7b:4c:ca:13:
48:e0:6b:ee:5e:7a:62:44:65:cc:b2:95:a7:24:ee:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0C:67:A6:B5:A2:49:A6:69:86:1D:54:F2:74:C7:7C:FF:5D:51:85
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0b:e0:46:b5:26:22:65:d3:45:b4:85:cc:fb:cc:f8:7e:e1:
ba:fa:cd:4f:09:1a:1d:e8:a1:8a:90:e3:40:75:9e:17:d9:31:
de:4b:aa:7c:d9:b2:60:02:1b:27:96:98:62:0f:71:7a:cd:33:
38:a0:98:5b:d5:0f:6b:a1:0c:60:43:dc:5a:7b:61:7c:42:8e:
71:cc:0b:fd:74:02:e7:40:8e:46:6a:06:63:77:a2:e0:f4:eb:
77:9d:48:fc:9f:eb:8c:9f:26:c0:91:68:ce:12:d8:92:cb:80:
5f:c4:4b:94:07:ac:ca:a8:8a:1b:76:59:b0:06:52:ba:fb:e7:
60:11:01:e0:96:1d:ad:d6:a6:d2:cf:9b:39:aa:34:8d:f5:a0:
e6:cc:cf:9f:d6:3f:88:e6:dc:80:9d:02:3a:cc:f6:38:6a:41:
2e:2c:98:f0:95:89:d3:5c:ca:b0:98:cf:31:ad:a1:38:cd:6b:
e5:e2:95:28:45:b6:a1:48:a5:f1:ca:e9:0a:37:32:48:80:49:
9b:21:b4:27:f6:73:6c:f3:08:1c:2b:8d:cf:21:70:64:1a:b7:
30:2e:dc:bc:33:0a:c2:ec:93:a0:13:0e:b4:60:66:5d:f8:48:
b5:ed:78:37:bd:93:9a:29:82:47:81:ac:88:28:b2:76:11:26:
7f:84:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:34 2025 by rpki-client