Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: 2b3IopLCXtzPl2+xPkkuhqleTnQM6FQl9uJYBONvaqg=
Subject key identifier: BE:89:A5:B0:3D:2E:AD:F7:A5:30:F6:21:5B:7E:C7:4D:8A:04:54:FF
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 0197CA270035B4D356C41AEB948F2B770919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 129A
Signing time: Wed 02 Jul 2025 08:00:42 +0000
Manifest this update: Wed 02 Jul 2025 08:00:42 +0000
Manifest next update: Thu 03 Jul 2025 08:00:42 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: OtCFWKPZdEyWm6M0ZMDnWjdibVEUskiUiTymMzCgqgk=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:00:35:b4:d3:56:c4:1a:eb:94:8f:2b:77:09:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Jul 2 08:00:42 2025 GMT
Not After : Jul 3 08:00:42 2025 GMT
Subject: CN=be89a5b03d2eadf7a530f6215b7ec74d8a0454ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:1b:e6:e0:ed:03:34:56:0f:fd:b2:ad:55:
7a:74:6d:54:91:2c:c9:59:b5:8f:d2:b5:0c:4f:b5:
5b:66:7c:fd:bb:9c:fa:92:bc:2f:1a:b2:87:07:e1:
bb:7c:19:16:cf:29:ff:ec:e5:13:e7:d1:d3:74:1b:
d4:39:93:99:1b:f0:31:5e:86:cf:d5:75:f3:1a:e6:
5c:f2:7c:46:e8:f9:e7:79:85:a9:a3:0d:0e:cf:e2:
c8:4e:7e:13:14:5a:40:cd:6d:df:3a:f0:0c:2b:2b:
d8:30:2d:7c:7d:41:bc:e3:02:fb:43:58:87:4d:29:
20:0b:f3:76:e1:67:7a:75:94:49:fa:33:df:2b:ee:
c1:07:42:e2:0c:38:46:81:7e:05:51:db:b5:8b:4a:
e8:1f:b1:76:ac:ce:7b:ab:3e:60:5a:fd:b1:f1:28:
49:1f:ed:b6:2a:4a:46:97:bc:39:c5:65:00:96:07:
e5:1a:2c:15:29:07:7a:84:a1:77:4e:0d:80:cd:58:
ec:63:63:41:30:e2:37:98:46:d0:0b:21:95:68:a2:
6a:ec:c6:18:4d:9f:e2:4e:04:fc:98:82:be:ef:1f:
60:2c:d5:53:1f:a6:d8:46:df:83:49:77:fb:70:42:
dc:ef:e1:34:8b:64:c0:c1:c6:70:b6:e8:0e:43:2b:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:A5:B0:3D:2E:AD:F7:A5:30:F6:21:5B:7E:C7:4D:8A:04:54:FF
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:05:81:aa:4f:5d:93:a3:2c:e4:59:2b:5d:bc:15:f6:e8:3b:
ca:60:55:10:ee:ed:4c:a4:d9:d8:7c:a5:ad:25:8c:aa:5a:ed:
2b:5c:a2:43:50:a1:d1:26:52:58:cc:09:2c:31:ae:bc:53:7d:
2a:c4:cd:ca:ed:be:2a:d3:99:11:9f:17:95:84:e1:f7:2e:8a:
e4:b6:6b:86:74:d4:96:1a:b1:61:3d:a7:6f:fb:7c:b0:47:e5:
b6:99:19:8a:c5:93:8d:0d:97:19:d9:a1:a4:f6:6b:44:e2:9d:
3e:65:8a:10:58:f7:9d:ca:03:44:00:40:a0:89:8a:40:b8:3f:
8e:cf:86:d1:bf:bf:ec:b8:e4:07:43:a1:23:3c:3a:0e:ec:39:
16:72:1f:29:b2:b2:2d:58:1b:a1:78:1b:89:b9:9c:0e:ef:4a:
01:d3:9f:cd:74:58:8c:b0:ce:f7:ad:8c:2e:7d:13:3a:48:47:
d7:5c:12:d9:7a:cc:ff:9a:a5:9a:9b:2e:2d:51:e1:36:5b:25:
1c:4b:a2:d8:a5:ee:42:72:15:36:e1:54:46:d7:e9:39:7b:78:
42:67:68:54:81:dc:55:b4:72:42:b8:e4:61:66:35:05:f7:19:
96:e2:3b:86:54:b8:c1:db:5f:dc:6b:f8:d9:5c:c4:5f:84:58:
f9:7f:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:45:07 2025 by rpki-client