Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: jKFN8cKeNF0tpJaNFQA1/WFl2ckk+p1ZsNwLyi9q5HA=
Subject key identifier: C1:CC:4E:88:68:31:35:01:09:1D:B5:F3:F8:85:9A:68:93:E1:AE:B6
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 0198D4E01A0A9745BA964D8F145C040DB8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 070F
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: B/zzBJIn2FHbAykdKM0ldJHD6MhHMM4Ivx/gFy9e/Vk=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1a:0a:97:45:ba:96:4d:8f:14:5c:04:0d:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=c1cc4e8868313501091db5f3f8859a6893e1aeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0d:da:73:31:d6:21:94:79:49:a8:47:81:56:
d4:d0:ec:02:52:d3:b8:3e:49:af:19:2b:50:32:b6:
a2:90:b9:69:eb:e3:3a:ff:b3:07:cb:23:10:07:1c:
45:f8:6f:26:61:6c:71:49:50:9f:11:94:5b:68:4a:
40:9e:cd:69:70:14:9d:8f:c8:8e:c1:e7:4d:76:f5:
b9:84:4a:7f:78:be:81:9d:c7:b7:5c:40:ae:19:45:
f6:94:17:28:0b:f0:ff:cf:5a:6f:b4:a0:01:d3:ba:
63:6c:b4:dc:61:a1:42:42:dd:b5:9b:b3:76:b8:6c:
6f:ae:c8:5c:62:78:e8:61:de:02:f5:f1:2d:56:ec:
1e:17:c1:70:65:bd:30:ca:11:03:ef:3f:5f:9b:45:
ba:3d:d8:6a:2e:89:d8:2b:ce:d5:86:dd:82:3c:b4:
73:93:1a:fc:10:d4:f5:66:63:01:07:53:f4:f5:ef:
ce:30:ba:27:ed:a5:a5:32:fd:0d:a4:50:4d:0d:61:
bc:47:a2:05:90:27:ed:6e:4c:b9:a9:bf:7b:86:84:
86:b0:2e:4f:be:34:f6:80:16:c3:3c:bf:bb:87:e3:
fa:44:51:2a:79:52:a7:fa:96:38:9a:d0:13:44:a9:
4e:61:76:9e:07:02:16:99:8b:54:73:f2:de:10:05:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:4E:88:68:31:35:01:09:1D:B5:F3:F8:85:9A:68:93:E1:AE:B6
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3a:22:f1:66:06:a8:df:7f:85:cc:2a:8b:79:ee:f7:3e:4e:
e6:a5:11:20:c2:ce:5a:3e:b0:2c:34:95:61:7b:46:bf:56:80:
be:a3:06:1f:64:4d:4a:a8:33:cf:39:f2:e6:09:3f:ce:ad:6b:
d3:19:65:48:55:71:c0:e4:25:a9:29:2f:70:a8:ae:aa:dc:5d:
0b:81:e8:a2:ef:72:30:36:7d:2e:d2:0e:91:01:1c:9d:af:c1:
7e:03:81:3d:f0:5c:7c:36:32:39:56:49:f6:89:3f:85:ea:7c:
57:5e:54:db:2f:ad:b1:5d:1c:02:91:45:cd:cb:16:f3:12:3d:
43:fa:b5:b9:36:d7:46:18:6a:77:c5:5a:14:c7:8b:65:08:ff:
99:23:87:50:a9:1c:98:56:6b:8f:8c:aa:5f:6f:55:21:c5:db:
8e:78:38:0c:55:26:92:91:c8:70:a2:53:b9:a4:87:93:a1:67:
57:02:fd:e0:df:3f:c2:16:91:19:54:ae:d7:b4:77:cd:35:d7:
d9:31:2c:a1:0f:ab:c6:cc:28:ea:75:31:6a:17:e6:ef:e4:ec:
d3:16:f3:0f:a0:9d:60:ec:10:7f:61:a4:7e:2e:af:02:ae:85:
87:a7:fb:36:13:13:6a:43:44:d5:2c:be:9e:f8:65:9f:3b:df:
82:bb:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:41 2025 by rpki-client