Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: CZjtMeZjPWKXPksAZeFdFweKWegYGlndqIYozPe2INo=
Subject key identifier: D1:1B:AE:1B:C1:30:6E:BC:F1:71:0F:C6:DF:93:F9:2C:3B:44:2E:A4
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 0198D515F174137EEC6422D1B0DC08C9997B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0D30
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: DIA9XkOGuH/bTDPq6H+RRAnJAUK9Gza5uPLy6Xeyh+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f1:74:13:7e:ec:64:22:d1:b0:dc:08:c9:99:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=d11bae1bc1306ebcf1710fc6df93f92c3b442ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:b0:63:71:bf:bc:70:c2:ff:5e:12:56:09:
58:03:a5:4c:13:a0:9b:a2:c6:11:41:0e:4a:4b:bd:
9e:84:9a:f9:de:08:41:3b:ce:e4:1f:00:b9:9b:64:
f1:d2:56:30:41:81:05:aa:97:1d:98:39:49:ea:00:
01:90:21:f4:18:0e:cc:70:df:06:e0:99:95:31:91:
d8:15:da:bd:16:5c:aa:98:56:f4:50:e3:0f:91:c9:
79:57:21:75:33:63:03:61:73:0c:69:4d:45:9c:07:
01:96:50:2f:a6:11:98:d3:37:21:cf:8b:50:9f:04:
3b:08:81:32:0e:e3:f5:be:9c:70:e0:93:90:7d:dd:
2b:72:dd:fc:8a:67:e4:b1:0e:e2:75:b4:4c:16:f7:
20:53:bf:ca:15:b6:8a:d4:1f:d0:cd:09:f8:fc:7a:
c6:57:35:f9:83:a7:a7:ca:3c:59:3f:35:3f:08:56:
09:f1:41:38:65:49:d6:1f:79:60:28:6e:d8:a9:e7:
be:38:25:ff:be:1b:c5:05:c7:50:cc:40:5a:1e:63:
11:ee:1b:10:6f:24:04:fe:7a:d8:4b:72:72:4b:f6:
43:bc:77:67:bf:b5:db:03:f3:40:7c:98:fe:c7:a4:
08:a6:32:f9:8c:bc:a5:3d:a7:71:5d:5c:dd:6e:00:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:AE:1B:C1:30:6E:BC:F1:71:0F:C6:DF:93:F9:2C:3B:44:2E:A4
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:42:c8:d4:1e:04:8b:23:eb:cb:68:55:04:55:da:11:cf:
1e:e2:0f:00:0a:d0:8f:55:bc:27:6f:f6:da:e3:b8:e4:73:e2:
ff:9f:77:ef:c2:97:95:15:e7:eb:62:a0:27:97:1f:19:93:58:
f4:9c:a5:2e:7f:ba:82:e4:0a:52:ca:0c:2e:88:45:37:e1:a1:
10:6a:cf:6d:fc:5c:6d:c1:80:de:be:76:1d:3d:51:e1:e2:d6:
de:58:b6:6e:01:c2:a0:30:c1:55:6f:ab:bd:fa:ec:ff:c6:b5:
82:0f:2d:a9:45:57:8b:db:eb:8b:05:cc:98:15:29:0f:b9:9d:
41:5f:bf:27:9c:6e:bc:64:13:3f:9d:fb:4b:95:57:01:00:b8:
c7:9e:5a:ce:03:cb:c0:2a:33:bc:23:6d:6f:a7:4d:b0:5f:c9:
e5:de:34:48:6f:b3:f7:0a:6d:ae:2b:d0:26:2a:d2:f7:69:44:
fc:b5:50:a5:83:cd:e6:9a:6e:cb:84:30:63:fb:ba:47:0c:d7:
b5:8e:c0:67:2c:93:1f:15:07:7e:3f:c6:94:98:b6:a6:16:b0:
50:df:e9:c2:d8:a5:93:e4:ad:39:e9:27:22:18:5f:53:7c:80:
09:50:ca:22:61:3e:95:df:77:ce:67:65:fd:15:63:c7:dc:fc:
ec:c3:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:13 2025 by rpki-client