Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: Rv2dvtBZHqcXR5tjDV5YWTz2QtE9njrK2XohS24vfc4=
Subject key identifier: 07:08:76:F9:43:91:E6:89:DD:6D:C0:F0:FD:FC:CB:19:D5:27:AD:9E
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 0198D40477A63D1E415245DF6203429BB839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 1647
Signing time: Fri 22 Aug 2025 23:01:59 +0000
Manifest this update: Fri 22 Aug 2025 23:01:59 +0000
Manifest next update: Sat 23 Aug 2025 23:01:59 +0000
Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: E3hvlIq/w+kgXtiKingTNUFDTk+82fY7PdzWA0nrcf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:77:a6:3d:1e:41:52:45:df:62:03:42:9b:b8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Aug 22 23:01:59 2025 GMT
Not After : Aug 23 23:01:59 2025 GMT
Subject: CN=070876f94391e689dd6dc0f0fdfccb19d527ad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:1a:39:7c:ca:7f:f4:4b:f9:f7:78:40:74:
6f:77:00:d4:67:96:0f:2b:ec:c7:64:85:19:f0:9b:
92:7d:a6:fa:a4:4b:51:30:a8:2d:29:e3:09:16:5a:
3e:8c:1b:2a:ae:c5:d5:b5:00:6f:b7:93:c4:42:c1:
5d:c1:66:a4:18:97:e0:8b:67:00:0f:e7:6b:3b:7f:
cc:21:2f:ad:c3:06:c4:ec:7c:ad:2f:6b:8e:4c:df:
74:10:f5:b4:96:2e:0f:87:84:86:dd:af:6c:e2:0f:
46:30:bf:d3:00:92:2c:e4:5d:6f:13:7e:48:18:0f:
9c:d1:3e:51:9d:f3:91:38:af:c6:e7:ad:69:10:cd:
e8:03:21:c4:6e:a8:c2:81:18:73:2f:07:f0:f9:63:
9f:6f:d4:0c:6e:34:33:be:ea:b3:9f:20:01:62:6c:
28:16:c2:4a:3b:4d:bf:4e:a6:9c:cc:13:66:8a:5e:
4b:97:f6:68:87:4d:8a:15:d9:06:39:c9:92:bd:88:
07:cb:e0:2c:23:dd:1e:fa:22:94:ab:d5:11:e5:8b:
bc:5b:5b:ba:ed:cf:4e:90:3e:6b:7e:ff:a9:aa:90:
6e:3c:ec:5d:35:07:1e:ac:c7:5a:85:23:26:38:6d:
1f:83:b5:af:a5:ba:d9:70:c5:ea:4c:83:5b:64:e8:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:76:F9:43:91:E6:89:DD:6D:C0:F0:FD:FC:CB:19:D5:27:AD:9E
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6d:b7:7c:eb:b4:1b:f0:3f:7d:b9:76:d9:31:a0:23:3d:b6:
15:a4:be:13:c5:08:bd:6e:22:fe:c0:4b:08:f6:08:d2:ed:59:
00:ac:53:07:b7:8b:8e:4f:69:44:50:e4:ca:26:e2:15:56:c0:
78:08:00:cc:e3:3d:f1:bb:ce:f5:d6:bf:b2:82:98:50:c5:8f:
80:87:2f:96:99:59:36:f3:0a:f7:ba:89:18:84:6c:0a:7a:3c:
3e:e6:54:19:fb:57:23:4e:d1:69:3b:2b:1b:e1:09:62:5e:f8:
bb:bc:99:53:bc:7a:62:a1:c2:b0:22:b8:63:d0:37:8f:2f:95:
43:02:f7:04:ba:8f:bc:47:11:03:69:8e:19:1a:81:2b:63:f2:
9c:64:4d:17:7d:18:72:17:a7:3b:96:a9:e0:16:88:f7:5e:95:
7e:e1:71:2e:e2:18:d8:72:01:f9:2f:24:7c:92:9f:0e:72:e4:
c1:a0:fa:06:ee:bf:5e:4d:c0:95:00:9b:31:ed:2b:48:fd:0b:
56:22:bc:7e:d2:1d:fa:be:c8:89:b9:27:e7:7a:91:7a:dd:d7:
b5:9f:df:53:21:a8:df:d3:d8:57:06:f0:2d:72:8d:21:b5:e9:
6a:0a:66:9e:7e:b1:dc:4a:fc:b8:06:5b:23:eb:82:94:53:85:
5b:84:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:33 2025 by rpki-client