Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: dDBeYuQijJQiBsZsMrkAvFfWhEVDep9aeuJ3e4KjgOQ=
Subject key identifier: 14:0F:BA:3E:40:95:BC:E0:48:86:0E:F0:79:EE:A2:AA:77:12:98:E2
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 0198D6982E156F02ACA32B1B9A37D69FA7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1325
Signing time: Sat 23 Aug 2025 11:02:34 +0000
Manifest this update: Sat 23 Aug 2025 11:02:34 +0000
Manifest next update: Sun 24 Aug 2025 11:02:34 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: rZ4wF7OwGLQiUVnUcVaV3rD8WWgXUnx9HT0ygRZWUUo=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2e:15:6f:02:ac:a3:2b:1b:9a:37:d6:9f:a7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Aug 23 11:02:34 2025 GMT
Not After : Aug 24 11:02:34 2025 GMT
Subject: CN=140fba3e4095bce048860ef079eea2aa771298e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:d2:6f:21:57:fe:78:0f:6f:4c:57:e5:eb:
f3:6b:83:1d:ea:c5:b3:04:93:22:b0:4f:f2:57:70:
da:3c:1c:f5:e5:6e:71:de:fd:37:fa:0e:39:d2:c8:
c7:53:5d:e8:b5:61:12:af:75:9f:6d:f5:3b:f7:45:
b8:79:e7:be:77:bd:26:0f:7f:73:18:70:74:06:44:
c6:c6:95:82:0e:93:cf:46:a6:72:27:5b:1f:1f:ae:
b6:c8:6d:f9:af:a0:92:94:4d:f2:d3:32:67:03:81:
e9:82:8e:93:81:6e:f7:ee:00:c2:9b:c5:6a:b8:37:
7b:96:d3:e1:bc:f3:ef:41:b5:04:27:32:a3:63:33:
66:f9:86:c4:b9:4c:1d:9b:c6:e2:3a:45:eb:ac:8c:
fe:4f:ff:2a:dd:b4:fa:d0:0c:da:0d:83:dc:d9:33:
7f:a1:b6:89:ff:99:40:69:ff:2b:65:a0:c2:05:b4:
91:d9:23:33:59:89:7d:b7:32:6a:d3:10:1d:bf:d2:
96:3a:12:77:db:a6:da:c0:11:6c:1b:88:6a:72:d3:
86:bb:40:04:9b:72:13:fa:0a:3f:ff:99:34:da:07:
fa:5c:d8:17:1a:67:52:4c:e6:42:d5:50:7f:54:f8:
ff:18:29:20:76:ed:82:ab:a3:96:4d:69:a1:bc:61:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:BA:3E:40:95:BC:E0:48:86:0E:F0:79:EE:A2:AA:77:12:98:E2
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:54:6f:81:3d:b1:23:94:ab:a3:1c:c0:bb:93:6a:b3:51:
82:12:c7:5f:7c:fd:af:18:cb:f6:59:3d:4c:07:7f:26:e7:16:
5f:9a:b4:5a:e7:b9:9d:c6:e4:45:84:83:d4:dc:f6:c0:e2:c1:
66:83:fa:01:e0:98:9b:9a:c9:40:78:41:ed:24:1a:71:b2:b2:
06:7d:4a:06:a2:dc:dd:c1:d5:2d:20:2c:89:5a:80:15:4f:87:
ad:fa:62:38:35:3b:1f:04:20:30:b8:86:16:a9:38:54:a4:f9:
03:31:4f:45:7d:84:bb:4c:c4:49:db:fd:57:49:91:e0:78:67:
d0:f2:51:be:ea:57:17:f6:6a:7e:95:f0:e3:8e:74:94:15:5e:
2f:c1:24:c7:55:cd:80:9a:c0:59:16:1a:3b:16:44:4f:37:2f:
8c:08:58:cf:e5:e2:e8:33:5a:d9:78:b3:90:0c:17:f3:fb:38:
87:91:e1:7b:0d:df:7f:75:6c:25:6f:d2:15:69:75:ed:c0:af:
2e:d9:9b:c7:f2:52:83:3c:91:43:51:b3:66:4f:9b:03:7b:99:
47:59:f7:40:43:14:68:89:0b:a1:9f:7c:7d:a6:c8:af:6b:c7:
db:84:9d:f7:de:41:a3:18:1c:25:57:42:be:96:31:97:24:cc:
e9:8d:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:37 2025 by rpki-client