Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: J90j9ulAhQGs8TjJAwfwMlwHYhDbRzZSGI0/RVNJ3D0=
Subject key identifier: 82:63:41:C9:68:A5:6E:FB:56:C8:F5:B3:51:21:C3:BC:CF:58:8B:54
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 0198D705E24832B9B4A1B099D9DFA9FF0C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0BA7
Signing time: Sat 23 Aug 2025 13:02:23 +0000
Manifest this update: Sat 23 Aug 2025 13:02:23 +0000
Manifest next update: Sun 24 Aug 2025 13:02:23 +0000
Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: Ekl04bQ7iUVsxORLDGViwV51GaRkKhgo9fWY8wxFM/o=)
2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=)
3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=)
4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e2:48:32:b9:b4:a1:b0:99:d9:df:a9:ff:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Aug 23 13:02:23 2025 GMT
Not After : Aug 24 13:02:23 2025 GMT
Subject: CN=826341c968a56efb56c8f5b35121c3bccf588b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:cd:0d:39:91:34:57:d0:c2:69:af:e5:78:
63:08:bc:1f:85:ec:c6:dd:d5:b7:b0:02:ac:86:66:
36:7b:a9:8d:ad:00:9b:4d:f4:5a:d0:f6:ae:e4:a7:
88:1c:ef:73:27:1c:64:61:9e:1f:1c:43:f9:ee:ce:
f1:34:7e:b3:a1:ae:a0:36:6a:43:4d:af:2f:68:a3:
91:8b:81:27:0f:20:ed:0a:68:e3:34:5e:39:c8:91:
d0:39:f4:4d:3f:a0:97:df:29:5b:07:1c:4d:ca:ab:
3e:e4:0a:94:bc:bb:d8:13:d5:c7:48:eb:98:66:c7:
c0:6c:8f:6d:66:6a:a4:b1:65:c1:65:26:6d:d6:9e:
7f:7d:82:3f:ec:63:c8:14:c6:08:46:5d:00:3f:ff:
1f:d9:2f:79:f5:f5:5f:3d:7f:26:3c:0a:b2:cf:32:
02:73:98:2e:7e:0e:0e:bd:35:35:13:6e:8c:5f:45:
a7:ae:59:18:8a:be:9f:93:a2:e5:d2:02:53:34:29:
9e:67:fa:89:98:f8:7b:ae:6b:ff:0e:44:20:49:70:
57:38:e4:14:f7:b4:8b:64:ed:19:94:90:fb:52:37:
25:07:8e:e9:05:60:29:2c:9e:62:03:e6:83:24:c1:
b0:1b:ce:b0:59:99:1d:b9:31:d1:76:e8:d9:e7:85:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:63:41:C9:68:A5:6E:FB:56:C8:F5:B3:51:21:C3:BC:CF:58:8B:54
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:b6:fe:90:3a:64:1c:35:92:d6:3b:b5:12:73:32:49:30:
95:c4:a4:06:8c:df:ae:fa:a8:83:f5:04:7b:ce:88:a0:2c:93:
ff:7a:84:94:f5:c7:a3:a5:8f:38:0c:d6:c3:1d:2e:2b:d1:45:
9e:d4:30:63:d4:2c:70:ae:39:93:74:c7:4d:9a:54:9d:46:86:
73:c1:a0:54:60:6d:9d:11:57:30:0d:fb:7d:c7:52:53:c9:bd:
35:d9:b0:f5:f1:f6:3a:24:db:d6:37:a1:ec:c1:21:fb:09:b2:
a3:26:3e:24:00:21:61:32:f1:30:1b:ef:dd:5b:28:43:b7:3f:
52:43:33:51:6b:00:62:c0:5f:79:fb:ef:71:61:c1:f6:1f:68:
62:50:cf:34:9e:d9:58:48:dc:63:68:b9:41:24:88:7a:e2:72:
c9:35:a2:e3:a7:12:52:96:e9:2e:e4:fe:f7:79:52:32:29:77:
68:21:0a:8e:0e:2f:74:88:e7:e8:0f:fb:b2:b7:8e:21:ce:dc:
e0:9a:66:05:58:c9:70:21:8a:dd:dd:f0:54:bb:c0:fb:3c:34:
9b:f3:d2:da:46:2e:c7:b9:5d:a8:3f:1f:86:a7:cb:6b:c7:6a:
32:e1:63:3e:de:aa:b1:ad:b8:22:c4:1b:25:a1:56:f0:ec:e0:
b8:2d:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:29 2025 by rpki-client