Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier: M2XNK9tkz0AP9HaMHZDH6D2HQthPwMSNye0xnqLQhto=
Subject key identifier: 22:0D:EB:B8:82:75:CA:85:ED:0C:91:18:35:59:01:3F:F6:69:2B:48
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial: 0198D65F80BA2EC5AD50C9673E13B12E449C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number: 159D
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: 7xCuvWrqt/gQ0usQLAdszplz+69f43i7L7UdjjYouyg=)
2: fSiDlWwoGniklT0F1na2YoYly6g.roa (hash: jQShuABqrNJ6xVnXKO1phumkAcZdn3LFktiTS8/eFss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:80:ba:2e:c5:ad:50:c9:67:3e:13:b1:2e:44:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=220debb88275ca85ed0c91183559013ff6692b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:f6:6c:d6:14:2d:99:2d:ce:e1:02:29:2a:
98:4e:57:fd:8d:32:0b:cc:98:9a:cc:4d:58:dc:aa:
91:01:37:06:4a:89:d6:06:23:bc:c9:42:f4:98:a3:
0c:4f:d2:5b:7b:bf:69:57:b4:f8:eb:8d:f3:72:1e:
5b:90:af:76:1e:56:42:6b:bb:6a:59:1a:a6:4d:50:
60:6a:08:c5:53:25:09:c4:17:e2:2b:92:50:b8:a4:
ed:57:bb:04:74:9f:d1:b3:7c:bf:e2:49:37:03:17:
41:f8:af:79:df:0b:c2:7f:f3:fb:55:d9:c5:85:79:
14:7c:c0:59:b3:94:33:7f:03:e0:dd:7a:a1:ad:80:
30:52:0a:18:9e:84:68:56:ac:f1:68:03:03:35:ca:
b7:c5:4a:8c:b4:db:3d:3d:20:13:99:7c:7d:8b:50:
1c:06:c9:09:4d:75:62:eb:18:da:b2:3b:fc:f2:a0:
37:07:55:8f:bc:fb:fb:64:8e:5d:ce:f2:6c:f2:d4:
c6:1a:11:bc:29:59:bf:e0:5e:e5:b0:a6:2d:90:d9:
e7:5c:2c:0f:07:4b:f9:18:25:fb:f2:72:4a:07:81:
10:4b:5c:48:1d:5a:11:3e:18:08:25:3d:27:31:a0:
e8:cf:dc:7e:11:3b:f8:1d:a2:00:ec:27:d2:1b:28:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:EB:B8:82:75:CA:85:ED:0C:91:18:35:59:01:3F:F6:69:2B:48
X509v3 Authority Key Identifier:
keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:2f:03:11:3e:2a:e3:78:08:61:61:57:bb:e9:98:59:19:
cb:53:9f:6a:a9:5a:71:7c:34:67:b4:ca:9c:6d:74:6f:fe:54:
cc:13:0b:01:04:b8:3a:2a:39:12:7c:a2:55:6f:38:5f:c7:a6:
7c:c0:5b:99:38:f0:95:9a:a4:29:e4:bb:55:60:23:79:2e:00:
c5:46:f8:94:40:10:d6:26:24:7d:95:c1:c8:2d:e1:21:29:b1:
0e:79:ac:d3:6a:69:7a:7e:47:f0:8b:34:a3:8f:82:a0:86:18:
c0:61:4f:ed:43:5a:58:e7:74:74:ad:14:c5:cc:85:c6:ac:99:
73:2a:fa:bc:1b:d7:88:9f:bb:0c:4b:fd:6a:d9:b6:db:c9:90:
00:29:86:55:a4:7d:f8:a0:37:e5:45:75:fc:81:d7:f6:5d:e3:
2b:d0:e7:de:82:b5:78:93:9c:17:f7:39:60:8c:d1:17:c8:ac:
95:ac:d5:0f:7a:db:ef:12:ab:20:e7:e4:bd:41:8d:8b:de:9e:
79:dd:0b:f8:b0:cf:2c:42:2e:ac:0e:c9:6f:c0:1f:54:a4:b6:
78:e4:f3:b3:9e:d6:3d:9a:c3:a0:ef:9d:c4:0e:45:5f:71:8d:
08:c8:b8:95:ec:43:fa:9f:37:1e:60:af:de:90:f2:eb:19:99:
7e:b2:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:46 2025 by rpki-client