Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File: QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier: EBQwFghAhJVSurQzafKVxJO6Om/J4nvr2qMGcxLlgvQ=
Subject key identifier: 86:CA:55:A8:4A:DB:8C:EC:91:6B:DC:81:6A:61:7E:7A:00:83:D6:C7
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 0197B74508D82D074AEF9E6DA76E95E4B92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: PcOUt3uwuNZt+kYUINAButeLLDUDbgvu94aqbZz1XaY=)
3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:08:d8:2d:07:4a:ef:9e:6d:a7:6e:95:e4:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=86ca55a84adb8cec916bdc816a617e7a0083d6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:56:e2:f0:8d:9d:61:92:1e:a3:6d:cd:f7:
84:44:d1:99:c8:51:e2:40:49:47:4e:d7:23:e1:eb:
9c:27:14:1b:41:cb:b2:cd:f7:3d:b8:c0:20:bb:e6:
fe:12:6f:49:53:65:5a:95:52:a1:81:4c:61:3f:b8:
5f:db:13:a9:70:86:2a:b1:cf:c2:a4:79:bd:b4:b9:
28:1f:8a:8a:7e:10:51:43:78:41:64:53:6f:7f:7e:
08:f0:24:fa:57:2a:33:d7:f6:a0:82:61:ba:8c:55:
03:e9:a2:2c:bf:e9:bf:9f:d8:f0:a0:03:ee:d2:a1:
6e:b4:50:7e:68:d2:6c:a3:82:3e:64:80:31:cf:f3:
b4:68:c1:e0:8b:c1:f4:80:65:15:00:ab:75:2a:ec:
09:dd:95:50:3c:b0:38:0e:9b:f6:72:b2:2a:0d:93:
cf:d6:15:f8:4e:d4:b5:28:d4:40:b6:8e:23:e7:96:
2b:8e:88:c2:48:10:f1:d3:08:bd:36:88:3c:d5:d1:
11:09:f8:47:ca:bc:0a:0e:1b:ff:5f:2c:42:8b:ff:
70:17:61:a9:e1:a5:b4:aa:d3:e7:b6:53:80:1e:f7:
76:5c:22:2e:e2:dd:ea:7f:18:0b:ed:30:6c:e4:ec:
7d:fb:76:c1:56:e7:65:97:cb:04:74:eb:44:31:2d:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:55:A8:4A:DB:8C:EC:91:6B:DC:81:6A:61:7E:7A:00:83:D6:C7
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:03:0c:30:2e:7d:e9:47:20:cb:1b:fd:07:b5:0a:9d:fb:d6:
1d:03:87:be:ff:8f:85:00:4c:7b:3a:05:81:4e:c3:5b:bd:ad:
9b:fa:0c:7a:d5:6b:29:13:e2:c5:0d:47:f1:74:ea:b6:b1:48:
2b:b7:63:3c:ef:66:8a:67:be:99:a1:42:26:52:76:61:1a:90:
dd:74:50:d6:6e:fc:f1:00:2a:0f:42:5e:f6:3a:6a:0a:24:0d:
dd:dc:b8:36:26:1e:b1:84:26:e5:3d:3a:96:c3:d9:28:e5:a6:
1a:07:a6:47:8e:f8:d3:f8:ea:6a:26:10:9b:47:4e:4a:28:96:
59:39:24:0c:33:1c:df:3f:df:8e:0c:80:1c:df:f6:aa:97:c5:
68:bb:9e:60:b5:4e:c2:7d:1e:51:fa:69:6a:74:7e:ac:c1:1d:
4e:6c:87:dc:24:ab:fc:2e:8a:10:4d:4d:fd:a4:2e:32:21:b3:
62:8b:b2:5f:d8:73:57:72:02:8a:a9:cf:50:40:b4:ea:e7:41:
f1:8e:c6:76:68:ed:a7:25:b8:7e:c4:54:f7:e8:6d:58:f4:79:
fc:76:64:2b:ec:29:de:4e:4b:6e:ab:67:24:2d:0b:11:8e:02:
2a:5e:25:f3:d1:b6:3f:0a:c2:d0:fb:19:ea:03:95:78:f3:3d:
51:fe:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:43 2025 by rpki-client