Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: GkncpJ2/VKUbU29YGfDq7QJEthUfaZamDiYS5zo5klo=
Subject key identifier: 20:C1:2F:50:51:AE:25:BE:CD:0F:7A:EE:44:2F:83:4F:06:03:77:BD
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 0198D5F1B04D6DFA5C88FF3D32226570803A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 0224
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: 44iv9VN4/9InpTQHVBgLlAFAyTDZmnDHIN36Yv7Rk5A=)
2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b0:4d:6d:fa:5c:88:ff:3d:32:22:65:70:80:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=20c12f5051ae25becd0f7aee442f834f060377bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:e1:a6:1d:59:31:23:ac:da:c2:89:c7:82:
a5:c6:93:1b:34:45:ef:71:c6:2c:02:7b:da:77:51:
31:9b:43:5d:66:eb:af:8f:75:bc:05:f1:10:17:7e:
25:76:9c:24:3c:14:7b:69:9f:ae:98:cc:c1:f4:6d:
53:29:44:3d:12:78:a3:bb:7e:42:fb:75:20:8f:bb:
d8:ed:b2:00:59:2c:df:75:3a:92:be:c9:99:72:77:
a3:31:32:f0:31:fd:fd:d0:ab:f1:9e:6c:f6:b3:a8:
da:61:ea:2b:4f:f5:db:8a:b2:96:b3:a4:c6:e8:99:
1f:79:fd:04:48:93:0e:a3:f5:89:79:a2:fe:45:d5:
3d:78:7f:f1:66:5c:df:e0:ef:2e:c7:65:8e:c5:58:
70:a4:cb:b0:c0:7e:f6:4a:f4:9f:37:ae:8b:1e:9f:
af:84:f8:1b:34:24:d9:17:7b:39:2a:d6:bd:fc:a3:
d3:88:a5:ec:b4:57:5a:86:d6:65:3b:2f:6f:4a:31:
b1:e1:26:f0:48:78:53:e1:d4:df:ea:f6:76:c8:3a:
fe:d5:50:2d:11:69:13:b0:a7:e7:85:d7:2a:a0:84:
a1:98:b9:12:86:9c:92:2e:a3:c1:5e:4a:ba:c0:fc:
33:1c:f6:67:3a:b8:7a:73:6e:9e:da:15:5b:c9:87:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:2F:50:51:AE:25:BE:CD:0F:7A:EE:44:2F:83:4F:06:03:77:BD
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b0:8e:af:c4:9e:cc:28:b9:d1:59:34:71:c8:22:c8:4c:81:
31:bf:01:cf:bb:76:3e:e8:4a:c0:56:f2:4b:44:ba:eb:d4:99:
60:88:ae:60:b3:8a:1a:02:0e:aa:03:c3:1d:3d:68:83:1f:1f:
fc:04:f7:20:66:8c:f8:9e:18:99:b1:0a:51:c9:8b:39:2d:92:
2a:41:a1:c9:a5:73:c5:02:16:fe:04:81:b1:b5:ea:30:70:2c:
ce:33:42:dd:fd:bb:3d:68:c1:53:ea:24:9d:75:f9:31:64:0d:
df:97:dd:32:ae:d4:d1:9a:d1:cc:21:57:bc:09:30:5a:b5:4c:
36:11:bd:8a:d9:e6:9b:57:89:45:ce:47:c1:4f:c1:ef:36:7c:
33:31:88:72:2d:b4:b1:14:8f:55:18:5c:94:df:ae:f4:37:4d:
fc:b8:c8:6b:c1:d3:1d:32:4b:6e:5f:e2:af:d2:9a:40:c6:95:
7b:05:19:3e:d1:68:e9:6c:23:e2:df:b5:cd:82:4d:42:1d:25:
b8:dc:1d:eb:d7:63:e6:ed:4b:0d:06:b0:db:65:eb:51:32:7e:
80:82:df:49:1b:c4:68:56:95:b2:1e:67:7c:53:04:80:8f:00:
9c:b6:66:e8:d0:69:34:1a:55:ef:15:bb:62:3f:25:bb:91:f0:
4d:95:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:34 2025 by rpki-client