Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: uBrnumVuQFSXLRFbmqZuyQGx6dAtY6aPFnd4oBHaLQY=
Subject key identifier: 25:8A:3B:F6:54:09:F6:34:5B:46:99:DD:90:92:E3:C4:E4:38:02:EC
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 0198D7736EBB04281534D0537DF8AB6412C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 07B0
Signing time: Sat 23 Aug 2025 15:02:03 +0000
Manifest this update: Sat 23 Aug 2025 15:02:03 +0000
Manifest next update: Sun 24 Aug 2025 15:02:03 +0000
Files and hashes: 1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=)
2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: LpFxr+5KtjTspNuga7e1n/HAD9YsBwt9tmdY+P/C7eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:6e:bb:04:28:15:34:d0:53:7d:f8:ab:64:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Aug 23 15:02:03 2025 GMT
Not After : Aug 24 15:02:03 2025 GMT
Subject: CN=258a3bf65409f6345b4699dd9092e3c4e43802ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:ce:47:6a:1f:d4:4e:ef:0e:c7:26:5f:a8:
e3:9c:27:68:3a:28:39:ed:6a:e3:90:a6:65:74:2f:
c4:f8:f8:43:12:10:04:06:24:04:fd:dd:b1:db:9b:
02:62:05:49:f2:f0:98:ce:54:c5:cc:10:c8:8a:80:
e8:e6:63:c2:7a:2b:a7:f3:5a:20:b3:bf:aa:22:e5:
c0:22:df:2b:71:0a:62:2f:95:46:2e:b2:6b:6d:ae:
15:39:4d:f4:cf:08:47:cd:86:21:33:7e:31:42:21:
d0:36:21:5e:8a:ca:50:48:d7:2d:4f:c8:d9:5c:20:
45:2e:db:63:e5:1e:c5:45:af:62:ce:e5:dd:28:22:
3e:79:92:15:9e:ff:7d:93:b3:ac:cf:df:cc:93:7a:
b5:2e:26:fe:cd:fc:ef:dd:0b:ed:47:84:c3:03:0a:
e5:80:07:2e:b6:6a:cc:64:b1:ae:b1:7b:93:57:20:
0e:c8:65:7d:2c:df:0d:80:2e:6d:aa:68:0f:7a:fb:
e9:37:c7:b3:f2:f6:26:62:6c:c9:34:24:2e:dd:c8:
f7:3e:3c:a2:f4:0c:2d:8e:ba:05:3e:db:e4:40:aa:
36:cf:10:e5:e3:3a:d9:cc:c3:c8:8c:6a:f7:74:df:
25:9e:8f:77:21:59:02:31:e7:b9:f8:8e:90:ee:c5:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8A:3B:F6:54:09:F6:34:5B:46:99:DD:90:92:E3:C4:E4:38:02:EC
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:10:1c:8a:c7:6e:35:14:89:5f:27:b0:18:d1:07:65:a0:68:
36:a7:56:18:44:21:28:cd:46:a5:fd:5a:b5:6e:e3:9e:34:0e:
fb:91:7a:72:4f:41:3a:50:f4:85:1a:7d:11:13:a1:16:27:be:
17:fa:f2:08:74:01:28:72:5b:b7:85:9d:d3:25:2f:0d:a3:5f:
f3:cb:39:c2:6c:e5:25:ec:5f:c2:94:a7:ec:ce:27:cb:e9:94:
13:5f:e7:1d:6a:2f:23:a1:15:cb:e3:d5:f4:1d:4d:76:b1:38:
d1:67:6f:de:73:59:5c:d1:99:cd:c4:63:e0:99:fd:88:61:26:
9d:dc:a1:5a:0d:00:9f:ac:15:d8:58:ae:ad:a6:93:26:1f:20:
6c:3f:7a:fe:d8:2d:9b:88:61:7e:59:72:17:62:61:43:75:27:
fb:8c:f8:22:38:d3:6b:df:b3:d7:1d:1a:ac:a9:4a:ff:9d:1f:
f8:24:c9:a6:b3:c1:64:37:c9:0d:58:91:08:cb:e2:8d:80:d0:
98:05:bd:94:15:c9:b9:a8:f0:f6:69:91:17:19:13:f8:5e:d6:
b3:f1:9c:f7:82:82:72:15:44:08:51:cd:c9:6a:de:9c:87:90:
79:69:94:c2:39:24:7d:b6:9c:0d:a8:08:0c:20:17:53:b9:81:
1f:92:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:39 2025 by rpki-client