Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File: QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier: Qc9ooi8hDNOodBbH9xvdQMjkjJmAI1Oi5dl774Q+68A=
Subject key identifier: 29:8A:AD:1E:11:A9:00:71:31:02:E3:4B:8C:FC:4D:6F:01:2C:A1:A6
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 0198D4A81BA1648BDCD1D9DA071E5664AE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number: 0F0B
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=)
2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: u+Tr8ALZZiOWMPIqE2OF4Ks+lxduIMa2E0/9hxb9u0c=)
3: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=)
4: d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa (hash: eCiVHw72+bTZlv8fotK++2o6VMWQ+UX2AuVuNcdkIqk=)
5: iXw_41SDwVWtAf5ihJuQUw9Lk8I.roa (hash: IeaHE4eJJAlQPpX43/jtDGK9a0UQu+G72Lz6Qc9LhBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1b:a1:64:8b:dc:d1:d9:da:07:1e:56:64:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=298aad1e11a900713102e34b8cfc4d6f012ca1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:de:d6:a6:71:06:75:0f:7a:22:a5:61:79:
aa:3e:20:11:3b:cd:08:88:d1:0e:eb:ca:04:4b:70:
41:a7:05:0e:7e:e0:70:f8:d5:7d:90:6f:e4:77:da:
56:12:28:f0:33:38:5a:99:9d:4c:97:c3:5a:f4:7d:
4b:d1:04:cf:c0:50:ca:2e:95:be:99:d6:5a:4b:c5:
bc:3f:01:10:45:4d:40:1f:34:25:37:d7:b4:70:b2:
fa:f9:16:3f:13:3e:2d:55:f3:98:dd:a9:39:4c:7e:
ec:9d:42:18:5d:be:0f:b3:45:b1:32:60:f6:e4:92:
a7:1b:44:31:ce:f4:fc:b3:a2:05:f3:12:5e:38:98:
3b:aa:64:bc:5b:f9:3d:fe:8c:06:41:0b:4b:36:6b:
e2:74:47:6f:ee:c8:e3:ee:03:ca:83:43:e8:b4:4a:
66:51:45:d1:e4:8c:57:f4:ef:8d:01:e4:e8:47:11:
42:70:2d:33:c4:d0:fe:ac:ff:d9:77:eb:3a:a0:43:
1e:75:9d:80:bf:9d:85:ad:78:24:be:95:a1:73:ef:
f2:cc:08:65:5f:0d:cc:02:72:64:3a:5c:a3:79:db:
9a:ee:5a:91:c8:b9:c4:c1:bf:73:c9:a3:dc:8f:74:
a7:d1:8c:68:99:82:ba:87:a0:12:ec:93:b1:49:e6:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:AD:1E:11:A9:00:71:31:02:E3:4B:8C:FC:4D:6F:01:2C:A1:A6
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:0a:32:c7:46:63:29:69:2e:ab:a9:e6:e8:0a:ee:33:69:
d3:76:30:9f:0e:a2:10:ee:59:d3:15:20:a6:5a:00:0b:5f:c6:
bf:55:d8:2b:21:e2:d9:fd:09:43:89:58:79:29:9b:e8:08:9e:
bd:9e:8c:70:41:bb:46:51:71:69:25:ee:7e:99:5d:a2:cf:58:
f1:c3:e1:20:ad:28:f9:95:76:f7:b4:53:42:c0:be:96:3a:0f:
81:bd:c2:10:8e:75:2d:53:a2:3e:32:f5:2b:fe:0b:e5:18:7b:
f3:86:65:bb:e1:94:7b:77:87:6f:1e:f6:20:65:2f:0c:dc:5d:
22:9c:e6:d5:d0:73:c5:98:0a:6a:86:d3:6e:36:7f:51:7f:f9:
e9:96:28:1e:83:85:42:3e:e9:5f:21:74:c0:7c:83:bd:84:5d:
04:4b:1b:dd:d0:13:53:f8:da:4c:dc:56:8c:98:85:b1:e0:fb:
d9:9b:f1:e2:40:6d:1a:38:f3:af:e2:b8:c1:a1:fd:a2:6c:12:
a5:6b:52:cd:1a:8a:40:be:ff:8b:7c:ec:58:40:9c:df:a9:ae:
74:cc:86:be:3f:e7:85:61:34:a6:9b:e8:a4:7f:fc:12:0a:47:
8b:16:1c:a0:74:f0:57:7b:56:95:b2:64:b6:8b:2d:d8:90:41:
92:88:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:36 2025 by rpki-client