Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: LFFknLb3PINIkoO6EhFf1jPwCPqBUVbuBnb4rSZWbk0=
Subject key identifier: 44:A7:EE:4D:34:7E:CE:35:68:F4:5E:49:B6:30:AA:92:2A:B8:64:7C
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019A00356A06BA42867AC9F4425D5554F9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 1357
Signing time: Mon 20 Oct 2025 06:01:31 +0000
Manifest this update: Mon 20 Oct 2025 06:01:31 +0000
Manifest next update: Tue 21 Oct 2025 06:01:31 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=)
3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: HdmnaejIkiE4fEBguApsqLtCNLggmKBRqRr2z+s4BLA=)
4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=)
6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6a:06:ba:42:86:7a:c9:f4:42:5d:55:54:f9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Oct 20 06:01:31 2025 GMT
Not After : Oct 21 06:01:31 2025 GMT
Subject: CN=44a7ee4d347ece3568f45e49b630aa922ab8647c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:41:04:c0:8c:29:55:a5:ec:82:11:ac:a3:
fb:30:5a:5b:d1:6a:a0:d2:98:1a:f0:84:c8:f9:24:
f3:a1:49:ff:c8:7d:dd:be:2f:99:fe:92:4c:d3:d0:
f3:5b:72:0d:d1:f5:19:f7:ea:ac:62:2c:6a:2d:60:
c4:70:db:c6:05:69:7f:ff:69:9c:98:db:ca:85:ac:
f3:78:fd:99:b7:30:8c:69:15:16:ee:ce:55:05:a3:
5d:65:e0:7c:be:35:0d:a8:08:51:a1:fb:72:3f:83:
e7:19:93:93:58:9d:b6:a5:7b:2b:cb:9d:1c:20:6d:
02:b6:97:5a:4e:2d:ff:8c:99:c7:1c:9d:23:67:10:
ba:cf:3e:62:9d:67:10:6e:5a:1e:aa:b1:11:f9:66:
79:90:d5:2e:88:f4:1b:0a:bf:c9:8c:66:89:a9:1e:
44:c2:ec:84:37:8a:35:3d:2c:c7:3a:13:c7:1e:ff:
77:10:12:39:28:6d:51:2d:b1:db:63:3a:2e:64:5b:
86:42:4b:4e:a6:3d:db:1c:25:99:55:f9:f0:e0:7f:
0f:b7:96:e2:58:9f:c2:a3:7c:56:20:00:ff:b8:b6:
2d:f4:c7:ce:72:47:18:8c:77:3a:dd:d4:1a:9e:c9:
e3:79:3f:0a:43:d3:41:4d:c2:70:56:57:38:19:36:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A7:EE:4D:34:7E:CE:35:68:F4:5E:49:B6:30:AA:92:2A:B8:64:7C
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bc:dc:47:2a:d7:43:77:87:a6:d2:49:90:46:25:68:86:c3:
6c:dc:cf:44:79:40:05:38:8f:d4:b0:a5:d4:e0:bd:f7:41:6c:
23:07:ff:e8:74:34:6f:fb:c2:eb:10:87:29:60:5f:46:7a:cb:
1f:f4:51:12:01:71:ed:be:82:19:8b:d3:7b:21:f7:b9:92:49:
da:37:05:0e:c5:d9:71:36:02:bb:e1:80:05:24:65:f0:fa:a1:
d2:7a:2f:90:ce:a3:90:6b:4c:18:66:80:e9:bb:16:a9:16:84:
d8:54:bf:85:81:47:b6:72:1c:af:8f:4b:4d:a2:cd:a0:04:64:
d5:97:f8:5d:ef:92:fa:97:49:70:e3:08:b6:f3:be:21:bc:0a:
b1:6f:1d:c3:8d:5f:e8:8e:9b:e0:49:b5:90:56:4b:39:9c:93:
e8:f2:5d:a2:17:37:d2:91:47:bd:a0:4f:01:ec:ce:03:4b:a6:
25:eb:f0:87:f3:a6:a9:d8:e5:5b:71:ab:a7:84:9b:5f:b2:e5:
6c:9a:02:e5:40:9c:17:93:e9:e9:19:2a:75:db:3b:dd:8b:6f:
a6:93:dc:48:73:f1:2d:54:81:5d:9e:c9:d0:e5:9b:e3:98:d1:
1f:21:42:f2:ac:7c:7c:28:63:2a:32:14:be:8c:49:cc:19:4a:
2f:34:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:57:48 2025 by rpki-client