Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: xktsgGM/XcC2b+EYcIzyLrxWq1hozGEKQbbPQ6LXOfA=
Subject key identifier: E9:D7:77:65:17:AC:AD:A8:B0:AD:59:EE:B5:53:67:EB:FC:05:B2:A2
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 0198D65F86BB34D550AB9346B6A1D7A0DC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 10:00:41 +0000
Manifest this update: Sat 23 Aug 2025 10:00:41 +0000
Manifest next update: Sun 24 Aug 2025 10:00:41 +0000
Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: XpWyTtdcHBGhJX8N2u4WGIJZc8IMPlf+cJIuyfqatoM=)
2: gbHDNVxhp631JF7kQGHN7jVCQUE.roa (hash: vJG2GjwA3KMSIr2ScTupuKanJzuxl2pcpBm74i5fk/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:86:bb:34:d5:50:ab:93:46:b6:a1:d7:a0:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Aug 23 10:00:41 2025 GMT
Not After : Aug 24 10:00:41 2025 GMT
Subject: CN=e9d7776517acada8b0ad59eeb55367ebfc05b2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:ea:fb:5d:86:36:06:54:ec:07:c1:d1:7f:
31:1a:c7:49:dc:5c:b4:08:62:be:87:ec:b8:8b:23:
c1:fe:51:b4:6b:50:da:db:0d:6b:a6:4b:a6:c1:7f:
ae:9f:e7:f5:02:01:bd:b3:78:57:22:51:b8:09:55:
a2:d5:b8:65:f2:ef:84:af:2d:72:97:97:5f:7f:18:
8c:23:f1:b1:0d:69:dd:fa:b0:7b:c7:30:82:71:67:
6c:a9:47:45:07:cf:17:bb:7c:9b:8f:1a:c2:db:c0:
bf:12:e5:c8:c0:40:a3:54:9a:b9:c1:cb:9c:bb:b4:
e2:28:29:98:64:a4:53:50:9e:1a:48:b2:f2:be:0e:
2b:b3:c3:bd:17:07:4d:d3:09:34:ae:48:67:fa:e4:
02:0d:53:73:ad:27:fd:16:4b:5f:e2:a3:e9:67:8e:
4e:9c:ce:99:94:39:1a:56:09:b1:ee:b2:dc:0f:db:
37:eb:f3:1c:5c:29:ad:8f:9c:2d:66:87:08:34:de:
71:7f:0c:95:71:ba:7f:9b:19:ce:14:05:c7:dc:93:
aa:55:d2:6e:4e:f7:d1:99:b0:ef:3a:b2:0b:46:76:
69:88:11:6f:1e:eb:a6:85:f7:38:b9:54:a6:12:a3:
20:cd:4b:ad:fc:81:35:c7:56:cb:b2:6e:6b:dc:51:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:77:65:17:AC:AD:A8:B0:AD:59:EE:B5:53:67:EB:FC:05:B2:A2
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ae:74:c2:fc:e6:96:39:15:61:76:0f:3e:ff:fc:85:4e:e6:
c2:a5:56:77:88:b6:1c:ff:02:f4:10:b2:94:7c:df:33:7f:b7:
65:7c:36:17:15:32:1e:7a:58:d9:35:12:69:ec:44:78:00:43:
a0:85:99:d2:c2:b7:42:dc:7f:32:17:a4:e3:a4:14:cc:e4:85:
4a:36:3f:92:28:6b:99:0b:9c:a2:8a:49:e0:a5:8c:70:e1:0f:
44:de:51:8f:1c:39:de:5d:60:ea:4e:8e:ee:3c:b2:a9:4f:4f:
8c:1a:d4:b2:82:e8:f5:7d:0d:d0:76:f5:cb:f0:e0:20:5e:dc:
19:61:39:17:0e:19:12:e2:f0:c1:2d:26:fe:19:33:ae:dd:9f:
48:42:04:f2:48:bb:58:2c:a7:ed:56:b1:88:7f:e2:3d:e1:39:
9c:6b:17:42:b3:e0:f5:b3:02:dd:9f:37:28:b4:b9:46:70:7d:
78:f6:26:42:11:32:cb:53:9d:00:91:4a:3b:39:b0:13:e7:6f:
17:c2:3a:60:9f:80:8c:3d:4d:e3:16:5c:11:d3:5a:d7:5f:a6:
e6:e5:df:49:7a:91:9b:dc:58:2f:42:3a:05:5f:51:ec:97:99:
6f:8f:9c:ed:7a:f4:8d:4b:de:11:c7:4c:63:7c:6e:24:22:53:
7b:d9:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:57 2025 by rpki-client