Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: ZPrmGqYpzmwr4ZAtKkO2aU42W484aaiH8w/2J+y3JRg=
Subject key identifier: 0E:B4:06:83:61:A7:79:DD:39:8A:EC:44:56:32:1E:CA:E1:0E:8C:A3
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 0198D5F17BA7E0DD4A5ADCA48CBE6AC648A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 09D3
Signing time: Sat 23 Aug 2025 08:00:29 +0000
Manifest this update: Sat 23 Aug 2025 08:00:29 +0000
Manifest next update: Sun 24 Aug 2025 08:00:29 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: HxFoWyjudv4ilhdzsageSw8nN1celoSqqqcBi6RtFE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7b:a7:e0:dd:4a:5a:dc:a4:8c:be:6a:c6:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Aug 23 08:00:29 2025 GMT
Not After : Aug 24 08:00:29 2025 GMT
Subject: CN=0eb4068361a779dd398aec4456321ecae10e8ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:32:8b:3d:d7:aa:be:9b:46:53:ea:ed:26:
9f:84:46:bb:9a:1a:7a:49:ac:a0:59:4f:3d:ae:d8:
69:34:08:e6:1b:5a:59:16:bb:cd:60:7e:bd:5e:06:
70:a0:b3:d2:8d:46:fd:60:35:57:a8:4d:e2:d7:cb:
79:a3:11:e2:8c:41:a7:b2:26:f0:e2:17:a6:fc:27:
bd:66:f0:d6:df:51:7c:89:b4:c1:c9:12:9f:d2:30:
d5:80:16:0c:7a:ac:32:53:24:76:35:f6:35:c6:fe:
58:33:04:af:48:64:17:f4:10:71:e1:8d:3b:c7:35:
a0:4b:a9:f4:19:a2:d8:47:76:17:6a:fb:b3:5d:5a:
2f:a3:79:42:fb:d8:2b:38:c6:76:3c:27:e3:ce:f1:
99:95:a1:25:d4:7a:77:d2:79:e0:12:ba:fa:c9:78:
b6:bb:37:5d:ac:98:0c:63:95:f9:3b:5a:29:aa:e0:
6c:0b:3f:78:d6:ae:f6:2d:72:26:2b:5e:62:2b:6a:
14:d9:9d:89:d7:e1:d9:a0:c2:21:3c:05:e8:e4:c6:
c3:31:bd:66:5c:a8:32:4e:f7:ad:67:ee:aa:25:b4:
49:93:2b:94:85:01:6e:a0:a2:21:5c:2f:d8:30:44:
63:98:b4:2f:6a:45:02:28:5f:09:c7:f9:cf:23:09:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:06:83:61:A7:79:DD:39:8A:EC:44:56:32:1E:CA:E1:0E:8C:A3
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7d:d1:40:61:b4:73:c4:3a:ab:e4:f0:d4:7f:7a:c0:4a:99:
4a:54:19:4f:dd:2e:c6:de:2b:0c:18:30:3a:2b:30:4e:7e:5c:
90:55:c0:dd:fb:59:87:40:08:fb:af:e2:b5:fc:82:d4:e2:c2:
72:e5:d9:82:2d:9f:19:5d:fe:dd:9d:26:cb:16:e8:5a:d5:ba:
f3:2e:7d:62:5e:c4:8d:5e:5d:c5:06:15:3f:4b:06:20:f9:29:
f7:e3:e3:15:89:6c:73:b1:b4:50:ce:0e:da:49:c6:d6:f8:34:
12:50:ea:e5:fe:14:9a:ca:d7:6d:0c:4d:7c:a3:20:46:53:60:
0c:53:5c:49:7f:0b:7b:1c:09:4d:f2:95:cf:f2:70:e2:a3:6d:
24:84:85:a7:bf:27:fa:41:2e:b4:0f:92:a9:d7:21:37:e5:39:
f4:66:4d:63:d3:f8:1e:2e:26:c2:79:5a:59:78:e5:cb:33:6b:
6b:9d:14:13:cc:d9:a8:b6:d4:e5:3f:72:03:15:ae:67:81:f7:
e0:d6:37:33:e0:dc:0f:f0:8c:16:da:9a:a4:67:59:0a:47:f4:
9e:53:60:32:37:10:57:3f:9d:63:28:19:5f:13:82:d6:14:82:
e7:84:1d:6b:2a:34:dc:b7:b1:21:01:5d:0b:5a:fd:10:92:47:
3c:a8:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:04 2025 by rpki-client