Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: mYAkpvtNfN6HvwHtD+xAQaw1SbX6GrEBqKghpDYwOpE=
Subject key identifier: D0:83:33:A1:87:C1:CB:9A:AC:CA:F4:16:D7:67:23:AD:4A:2D:07:D6
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 0198D54DD80CA7533E23CF0E4F724ABF04EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 0E4C
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: 6sQpF6Rk8S+wh/16nhSLtNM0k0o1w4m+63FMOfXFufw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d8:0c:a7:53:3e:23:cf:0e:4f:72:4a:bf:04:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=d08333a187c1cb9aaccaf416d76723ad4a2d07d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:dd:b0:98:0c:b6:be:21:f7:17:59:20:fb:
69:15:49:9c:cc:94:02:93:71:c6:17:01:43:99:d8:
0f:2f:b8:16:12:56:3a:ef:65:57:f1:6c:ef:67:f5:
cc:8e:f6:e0:83:03:e6:72:ad:f9:ca:35:1e:48:2b:
60:da:52:7f:8e:eb:57:59:5b:12:37:d6:b1:6f:b8:
cd:86:ef:24:12:cb:5b:78:2f:ec:d1:b0:25:d2:2b:
b6:0b:26:ae:15:44:77:5b:75:e8:7f:9c:0a:83:ce:
7b:4b:1b:6b:36:f1:ee:7c:c4:67:57:85:84:2e:ae:
25:08:f5:d4:2d:5f:b7:09:5f:48:08:e1:5d:d5:f8:
bf:af:2d:79:e1:70:25:1f:53:eb:e3:c6:f2:b5:4d:
5e:60:4f:18:34:0d:ed:a7:bb:f4:24:15:e4:1f:f0:
0d:d6:99:d9:a9:a9:c3:0f:c4:68:b5:eb:16:4d:a3:
a2:1e:c2:ea:97:47:8b:01:b2:e5:ab:68:7e:56:79:
bd:f7:49:3a:5b:be:2d:33:8b:ef:26:da:ce:fd:2f:
5f:f4:e7:e0:24:89:d4:a8:91:47:94:6a:57:8b:0c:
f9:3e:2f:17:59:31:e4:73:48:5e:2f:7a:a3:46:48:
b6:65:5a:75:91:5b:f5:86:37:67:07:9a:eb:dd:30:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:33:A1:87:C1:CB:9A:AC:CA:F4:16:D7:67:23:AD:4A:2D:07:D6
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:57:3d:15:16:21:4a:1a:b4:80:98:9a:44:3a:20:02:b9:15:
a9:53:4c:c1:58:80:54:23:ad:ce:ae:d0:12:82:45:f9:b7:39:
d8:f1:dd:82:10:79:38:64:fe:5e:4d:6e:73:c2:bf:05:ae:ab:
eb:fc:c1:73:72:f2:53:1e:bf:15:ee:90:5d:98:05:00:cb:1a:
58:15:ad:b3:10:37:35:2d:10:7d:1c:fa:9b:c7:a5:40:bf:01:
a5:d6:93:bf:58:b6:0c:3b:67:a7:5a:27:9c:16:b7:60:0c:49:
e9:02:58:b9:5a:c8:82:59:8b:5d:fb:14:19:26:7e:84:fd:5e:
55:93:b1:f4:16:98:39:e8:96:bc:b0:e6:78:f2:c2:a4:c6:39:
aa:d2:9c:ef:c8:95:87:b8:d4:ce:d4:40:1f:7b:ff:3a:f8:4b:
3c:fa:b0:93:7b:2e:9d:42:92:f2:3d:e7:61:e3:93:42:fd:17:
4f:21:fc:d7:bc:de:3a:21:e5:0f:e4:32:cd:d8:26:16:30:c1:
85:3c:59:e2:2b:d9:27:61:6c:df:55:fe:50:3a:bb:9e:2a:a0:
b4:05:fd:41:b0:d1:42:05:6b:16:83:f1:12:d6:fd:8e:86:6e:
23:54:54:3f:21:d6:f2:18:6d:65:bd:b1:25:f5:2e:e1:d0:36:
b8:63:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:05 2025 by rpki-client