Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: YH6VvjLCpjxDPAqFbXYusKbpseCI6COjT4mfRd7zvrI=
Subject key identifier: E9:FC:42:D6:20:16:21:C4:D0:AB:8D:D7:F1:F0:93:29:4D:34:0F:30
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 0198D516258C1FDDFC2E4244FACBB6086B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 13D5
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: VCQwKpkYil2NWgEfOT5vw8yegzSg9FG6Jzl4fgKsnI4=)
2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:25:8c:1f:dd:fc:2e:42:44:fa:cb:b6:08:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=e9fc42d6201621c4d0ab8dd7f1f093294d340f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:54:32:8a:87:63:41:fa:22:04:63:47:21:
e5:ce:79:4e:7d:46:a5:6d:6e:ae:a2:c0:5f:4a:f4:
d4:9c:2f:4f:8b:b3:ac:10:37:14:02:3f:b0:90:0f:
98:a5:e1:09:07:d6:c4:e8:93:74:4e:25:a1:21:6e:
e8:f5:03:f5:51:d3:6b:2d:40:2e:e2:2d:2f:67:0e:
fa:e6:d6:62:6b:8c:20:b7:87:f9:e2:7a:5b:3b:a5:
30:90:a8:8e:07:a1:3c:fa:33:52:59:14:67:44:7d:
d0:d2:b8:ae:68:2b:18:93:83:15:6a:1f:7c:b2:f4:
59:72:0b:bd:e4:cc:00:f2:f4:09:bf:d3:a9:8f:5e:
02:3b:15:bd:f4:aa:2e:6e:98:82:e1:3b:83:ff:fd:
ce:53:69:00:cc:9b:0d:58:77:9d:51:36:25:e6:25:
ce:1b:d5:ff:a2:df:e8:4b:98:ca:af:49:e2:b9:d5:
fa:05:01:d5:48:0e:a6:b6:3b:10:8d:ce:2f:04:63:
2a:f6:6d:5d:c6:5f:9c:bd:c6:52:5f:ea:ed:9e:0a:
bd:d8:44:f7:c6:23:63:2f:79:45:5f:57:89:8c:54:
52:d4:78:0e:f2:50:17:0f:cb:c9:35:ab:2a:fe:48:
e6:db:fe:e7:16:eb:b8:6f:63:c6:75:67:e4:b9:d5:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FC:42:D6:20:16:21:C4:D0:AB:8D:D7:F1:F0:93:29:4D:34:0F:30
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:10:a4:fd:cb:9f:b0:73:3b:5c:e3:fd:4d:dd:a9:7a:43:
53:be:d9:1b:f7:21:f7:c3:bf:79:dc:22:b5:48:ac:1b:af:82:
41:9b:ac:3b:98:ce:30:ca:3d:54:7a:31:8d:63:be:c8:34:94:
d6:a1:58:1e:e2:82:64:72:61:a7:18:54:57:78:58:5d:13:7f:
ce:7c:9f:1b:4c:5f:e8:34:6b:99:b5:ad:58:89:27:74:56:5d:
8e:5a:55:36:e6:76:52:fc:da:08:67:3f:a8:2f:4a:9d:dd:54:
24:eb:9f:d2:e4:1c:c1:ef:18:fc:53:ab:a7:2b:18:0d:10:b0:
70:6c:59:34:e4:79:49:b9:b5:3d:a6:12:4a:09:3a:70:3c:d6:
84:b4:1b:1a:60:5d:ae:0e:49:84:a9:44:a5:62:e4:2c:b4:9a:
0e:81:5f:a6:34:f3:27:40:51:dc:e7:79:13:0d:03:ee:3a:22:
d5:85:2b:6b:63:4d:45:fb:5a:95:26:c0:ac:74:73:b7:5a:e9:
b2:ec:dc:13:78:20:2a:c9:c5:a0:02:b7:fa:d0:29:3e:8a:35:
10:25:44:9d:8d:ee:a0:13:fa:89:a0:d2:65:1e:c9:56:b9:d5:
5a:4b:fb:97:4a:b6:59:32:9c:37:92:1c:87:db:ba:6d:39:5b:
fe:7c:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:48 2025 by rpki-client