Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier: ltXDyRzZsCZgpW4k664v2x+k00DNjsQppkLI3EoLdSk=
Subject key identifier: 7C:E2:84:3A:ED:8F:C6:89:87:73:34:61:49:35:51:19:86:0C:24:F1
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 0198D5F1CAFB4E80D8FA9D6FBB7766FC55C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number: 12F6
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: t5QRSRMo4DSvZVqmWTwuw5uGwnCMO8JoKea6J5k9Bbs=)
2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ca:fb:4e:80:d8:fa:9d:6f:bb:77:66:fc:55:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=7ce2843aed8fc6898773346149355119860c24f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:93:91:00:4b:93:7a:35:00:a4:17:b4:03:
43:f9:63:98:be:46:5a:41:72:ce:53:d1:1a:ef:cd:
7e:ed:29:12:86:bf:2b:a9:a5:96:8d:eb:8c:eb:bf:
ea:79:38:4c:e9:f5:0a:df:07:d0:38:57:6f:c5:0a:
b6:5d:a8:e8:e2:f9:45:84:59:86:f1:6b:5a:45:f0:
05:a6:a8:ce:03:5a:5c:b4:0d:4f:df:af:d5:93:44:
32:41:a4:3c:b8:7c:1f:8f:14:17:35:23:4b:62:ac:
67:19:2c:4a:53:14:27:b4:c1:7a:57:e7:2a:e9:7c:
5a:55:15:2f:73:0a:e4:64:fe:7a:85:f6:a1:c8:33:
2e:b6:ec:99:51:59:e5:ec:44:0e:92:32:f8:32:13:
b7:7b:c1:24:71:94:03:86:df:fe:5d:f2:b3:e9:78:
ff:74:3a:dc:29:12:35:9c:d6:6c:52:f7:b1:cf:8f:
7e:2c:bf:48:46:42:ff:f4:3f:1f:d6:4e:39:6d:9b:
66:9b:94:16:46:0b:12:3b:1b:f0:63:d9:6f:02:f8:
73:67:66:7c:02:15:47:0c:84:f8:4c:35:80:54:d5:
d8:66:0d:8f:f3:2f:ea:8c:02:16:6a:2b:61:52:9a:
8e:7f:fb:21:7d:5e:43:95:72:97:3d:9d:54:51:1a:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:84:3A:ED:8F:C6:89:87:73:34:61:49:35:51:19:86:0C:24:F1
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:c7:e5:38:18:0c:24:0d:6c:41:de:08:5c:5b:39:03:63:
e1:4b:c4:4e:e6:c9:45:bf:b9:0d:41:db:1b:89:91:8f:f9:94:
c7:8a:93:0c:9f:ae:6b:73:ff:aa:f0:f0:89:ec:18:43:b0:5d:
d8:c4:1e:ae:2d:9c:f6:bd:6d:6a:81:68:ad:12:b1:90:e4:d5:
ed:fb:06:01:d9:d5:d0:e5:42:49:40:6f:f6:af:9d:e9:06:25:
81:40:1b:35:6e:41:42:02:dc:ec:34:d5:e3:ad:57:f1:f3:99:
05:25:6e:03:b6:66:82:cc:7d:37:06:21:4f:c8:3f:fc:fa:b2:
13:87:79:11:ce:32:5a:45:08:d6:ee:6d:b0:44:3c:fc:5e:29:
1e:42:32:fa:11:af:64:ee:71:d1:32:ce:6d:29:ef:33:03:a4:
ad:c4:06:99:45:7b:79:d2:8a:6f:34:eb:54:6f:7e:4f:2b:3e:
74:0e:96:f9:13:cc:4d:d6:52:b3:4b:8b:0d:3f:ed:14:29:69:
be:11:6f:5f:ba:5b:d7:9f:92:08:28:8b:70:d8:b8:b0:5f:46:
15:f3:d0:16:de:b2:ee:3e:af:4e:e5:f4:6a:0c:2d:99:85:e1:
82:bf:d8:96:17:bc:05:2b:10:53:29:fb:1a:0d:8a:3e:2b:5e:
50:a4:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:57 2025 by rpki-client