Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: NlRFQ363DwXI0WE4RWSctoO/swWgkXE2sShKsM16Ogo=
Subject key identifier: 72:4B:11:35:A0:5B:1D:B7:03:D2:9E:35:F4:D4:AB:68:92:23:22:17
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 0197D9D1529D958206F760F0C8C144510AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 15CB
Signing time: Sat 05 Jul 2025 09:01:03 +0000
Manifest this update: Sat 05 Jul 2025 09:01:03 +0000
Manifest next update: Sun 06 Jul 2025 09:01:03 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: d7IHc3R6sYpOog1an7EeQ8r22VUPEjxjbG1VhXrmxRc=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:d1:52:9d:95:82:06:f7:60:f0:c8:c1:44:51:0a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Jul 5 09:01:03 2025 GMT
Not After : Jul 6 09:01:03 2025 GMT
Subject: CN=724b1135a05b1db703d29e35f4d4ab6892232217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:50:aa:24:09:a0:c1:82:aa:c0:01:f3:b4:
87:cc:da:d2:e6:fd:31:29:1e:91:bd:1a:5d:a1:1e:
48:79:05:7b:7c:76:28:ed:ed:fd:6f:35:ba:ea:7c:
28:8f:f7:21:c7:67:50:b0:f7:9a:01:65:22:37:60:
59:cd:b1:3f:17:de:aa:32:74:38:fd:84:e8:33:f5:
0c:6e:b6:20:0f:a6:d1:c3:40:bf:dc:06:f2:78:3f:
a2:ef:4c:bd:5f:9d:75:b0:b8:9b:5e:a3:8c:16:4c:
ed:c4:d6:54:20:a7:71:63:6a:0b:f3:24:86:94:70:
1a:f5:b2:3a:d2:11:21:75:66:6d:9f:47:89:06:68:
2a:4a:b1:50:51:02:d9:71:f5:8e:6a:30:97:f4:a4:
e9:79:95:e5:ff:2e:a5:70:a7:b7:d8:51:ed:4f:2b:
d2:39:45:dd:50:48:6d:75:82:eb:9a:53:43:f0:5f:
b5:a2:04:ad:a2:4b:61:ba:16:57:ee:e7:54:e1:59:
ae:9b:94:53:70:fd:0f:1c:2e:ab:d6:c8:f0:34:a7:
09:f4:ed:d5:2a:2e:f6:82:91:78:f2:5b:d3:3f:ca:
da:c5:34:95:5c:5e:93:c5:e8:9c:fd:ab:e4:54:5e:
4c:9e:43:7c:2b:85:da:49:f0:7e:5e:54:f9:3e:f4:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:11:35:A0:5B:1D:B7:03:D2:9E:35:F4:D4:AB:68:92:23:22:17
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a6:84:99:5d:17:ec:b9:d2:01:af:75:8e:7e:ce:77:1e:98:
a0:44:fe:50:03:dd:74:f7:1f:bf:79:54:a4:34:98:9b:0a:16:
3e:4c:cf:3e:e2:18:af:0f:5a:9b:7f:80:d5:76:6f:be:5f:a4:
01:f6:c3:4e:83:d3:bc:66:41:06:c2:2f:ce:29:d9:08:44:90:
6c:34:c4:21:63:2a:13:9f:c5:41:46:8d:67:77:e5:70:37:35:
f1:54:e9:52:27:0f:0f:6d:0e:3f:7f:59:3a:49:f1:8e:32:e5:
a0:e7:1b:37:ef:9c:2d:c4:22:ec:33:9e:eb:93:e3:50:4b:3f:
d8:7c:28:2d:19:20:7b:82:c1:e1:f5:6e:12:fa:cb:ec:a2:94:
a0:99:8e:e3:a8:af:61:7a:a9:dd:01:d7:de:c1:14:fc:5d:28:
4b:6f:05:4c:12:1d:10:7f:d0:19:22:15:80:f3:51:fa:87:67:
d3:c2:1a:f1:92:44:81:ff:09:9a:c6:9e:a9:65:ef:0c:7e:2c:
e4:f2:54:c8:a1:38:a7:07:58:ce:1f:1f:10:c9:24:78:3b:0a:
ac:f8:d1:48:c1:87:73:b2:13:ee:72:5c:07:11:a5:a8:84:0b:
85:9a:93:0b:77:c8:f5:1a:d3:1c:04:70:8d:07:a0:9b:7b:74:
e2:5d:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:33:32 2025 by rpki-client