Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: OO6KZXeaW3Gyfb28aB7YUb0J1klMocLPfa+X4Q86kWI=
Subject key identifier: 2A:51:4F:11:7F:7E:03:2B:AA:06:E2:CD:0D:EF:30:1D:B2:5B:36:5E
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 0198D51617175038635D9D86DC3EE0D9D9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 04:00:51 +0000
Manifest this update: Sat 23 Aug 2025 04:00:51 +0000
Manifest next update: Sun 24 Aug 2025 04:00:51 +0000
Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: ZoY+reB321w/Pu1KKGTtXOJ0YPbrA5BlcPO15mM34JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:17:17:50:38:63:5d:9d:86:dc:3e:e0:d9:d9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Aug 23 04:00:51 2025 GMT
Not After : Aug 24 04:00:51 2025 GMT
Subject: CN=2a514f117f7e032baa06e2cd0def301db25b365e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:5d:3e:7a:7e:ce:fe:e0:70:1e:f5:5d:bc:
19:dc:9a:99:aa:ec:28:00:35:31:e4:7d:2e:ff:83:
02:2e:c1:bd:8a:bf:95:46:32:3f:b4:e9:93:82:df:
7f:56:a4:79:a6:62:26:af:e2:6a:39:51:af:6b:07:
cf:02:c9:0d:7d:0d:ff:af:fd:bd:6d:e6:f9:33:83:
a8:41:be:15:db:78:ab:9e:02:cc:3b:51:44:d7:24:
fd:5c:bf:e9:bb:43:e6:fc:3a:8e:61:96:a9:9e:b2:
f7:e4:16:7e:9e:39:80:72:09:ab:31:cd:01:c4:8d:
a9:c5:e8:bd:83:b9:a6:2c:f3:c3:59:0c:f1:9a:b8:
b1:41:0b:56:66:79:a0:65:52:47:2d:bc:de:90:25:
ac:b1:dd:a7:3a:3d:68:c4:d7:1c:f7:6e:d8:34:46:
8c:89:f7:02:16:d7:87:9d:0f:8e:66:25:ae:bb:0e:
0a:e9:9d:02:69:3e:ee:5d:b8:e5:96:09:05:fc:9d:
af:6a:36:70:4e:34:8e:a5:8a:ca:ad:f8:0c:13:19:
26:aa:88:e9:a3:e3:e1:4a:68:92:eb:7b:bd:e1:7b:
ff:10:db:b3:fa:0a:75:23:f8:57:13:99:3f:60:1f:
e2:43:b5:80:65:a5:6b:1e:cb:c1:0b:2d:f3:c3:17:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:4F:11:7F:7E:03:2B:AA:06:E2:CD:0D:EF:30:1D:B2:5B:36:5E
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:90:65:64:52:5f:b3:f0:1e:76:67:b6:94:18:93:ae:20:1a:
d1:70:d5:26:42:f5:29:5c:29:6b:1d:bb:25:5a:4b:1c:ac:54:
1c:ee:ed:f7:20:9e:b2:8e:fb:b5:cc:59:c9:de:30:51:b2:78:
b2:07:c2:19:78:99:99:eb:12:19:6b:ee:ff:03:a4:6c:44:66:
57:c4:5c:d5:43:4d:57:e0:c5:a9:9f:2e:bc:a9:ab:b5:d5:7b:
36:c7:12:56:ca:11:e8:85:e9:dc:08:d8:8d:1a:9d:21:2a:93:
be:d9:9d:e1:39:33:4c:43:9f:a4:c2:0c:9a:ac:99:29:1a:56:
c3:bf:71:48:04:89:f5:d7:b6:dc:a9:1a:d8:e7:35:ab:2b:8f:
4e:91:ec:99:ec:b7:55:b9:be:08:99:16:b8:ae:ee:68:e6:c8:
1b:d6:d9:5f:ad:68:47:3a:ed:52:6d:dc:d1:1f:1c:bf:59:ff:
bb:b2:8a:c1:4d:e3:59:e0:29:d4:d4:a7:0f:dc:8f:4e:cf:fb:
6a:8f:bd:0a:ae:1c:20:97:23:38:4e:e2:a7:57:f8:1c:b2:d5:
2e:93:ba:6b:71:e5:b6:75:7f:b7:57:a0:e3:94:b5:01:68:94:
89:a5:51:23:a1:9f:2e:47:bc:14:7b:1d:70:f3:69:61:df:10:
27:c1:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:40 2025 by rpki-client