Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier: YQaLZj2FSmRQX36H9FzN0kc96gySuXr7hiwvh4kngkA=
Subject key identifier: 5D:58:DC:E0:0B:1D:9F:C2:AA:A5:2E:66:EA:87:48:35:BD:81:40:21
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 0198D47277347223579CE5E8323119E8FAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number: 13A1
Signing time: Sat 23 Aug 2025 01:02:08 +0000
Manifest this update: Sat 23 Aug 2025 01:02:08 +0000
Manifest next update: Sun 24 Aug 2025 01:02:08 +0000
Files and hashes: 1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=)
2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: k5qWGJQAWUe/TkK54EorRP89DsGhSu8V4SXLIFbZ3Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:77:34:72:23:57:9c:e5:e8:32:31:19:e8:fa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Aug 23 01:02:08 2025 GMT
Not After : Aug 24 01:02:08 2025 GMT
Subject: CN=5d58dce00b1d9fc2aaa52e66ea874835bd814021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:36:a1:3f:5d:60:86:94:7e:e3:1f:52:65:
cd:a0:4d:60:23:ea:1e:a0:70:c9:aa:03:91:6f:f8:
5f:09:54:0a:a5:33:55:93:95:eb:a7:2f:40:9c:7b:
e9:37:f9:2e:59:25:fa:34:d6:87:a0:dc:7d:de:b1:
fe:19:bc:f8:3b:09:fc:6e:0c:89:f4:3a:17:63:5a:
28:29:0c:ec:f4:6e:bd:a9:c3:57:5b:6b:20:55:1e:
de:ba:90:2a:96:69:af:e7:6f:08:33:d1:1e:a2:06:
0d:f0:ac:bf:65:3a:52:df:2d:59:89:ca:28:46:7f:
88:94:12:0d:48:00:01:03:95:5e:e1:a3:11:4e:79:
58:97:9d:76:09:0c:cc:cc:55:04:1e:0e:05:cb:5e:
3c:c9:fd:05:b3:46:da:c1:96:d9:4c:90:1d:27:04:
8b:8b:27:83:76:63:49:70:ad:dc:e1:0e:5f:a1:e3:
f1:f0:0a:1e:0f:d4:e3:bd:ca:b2:c5:16:33:22:9f:
6d:ff:8c:72:82:2b:12:54:8b:9b:03:a4:0e:0b:c2:
be:51:2e:a2:ab:80:e7:22:a8:c4:4d:58:fc:57:24:
11:f1:44:f1:0a:18:02:5c:09:1d:21:86:b5:32:9a:
f2:e1:3e:b4:17:7a:5b:ae:ff:d2:60:fb:13:74:f8:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:DC:E0:0B:1D:9F:C2:AA:A5:2E:66:EA:87:48:35:BD:81:40:21
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:97:6a:8e:5a:c0:3c:65:97:01:a9:e9:6e:26:58:3f:11:eb:
b5:8f:d6:d0:64:16:79:45:3b:21:9b:4e:fc:43:fb:04:0c:aa:
76:c4:b7:26:61:10:06:44:67:b0:61:37:ef:bc:b7:b0:80:d1:
bc:ac:68:54:55:b9:20:75:29:98:41:be:45:fa:94:e7:10:c3:
17:72:f6:d3:be:d3:43:fc:85:7b:dd:79:84:a6:c4:2f:ba:df:
9d:9f:90:4d:cc:fc:2a:3b:b7:6c:f5:35:8f:35:83:30:7d:ac:
ac:60:9d:cf:50:e1:16:8b:83:44:53:ff:a7:ac:38:18:fe:de:
a6:45:ce:be:0d:53:e0:64:61:e4:4a:38:04:e5:bd:f9:7c:85:
83:25:01:84:ec:91:ad:1d:5b:1d:4e:ed:09:de:5f:d8:7b:4e:
a9:8a:ab:d2:cb:53:bd:90:e2:b5:86:5c:b7:d7:ef:0e:9f:91:
bc:5f:24:c0:ea:93:50:98:d1:ec:51:be:66:3b:14:12:e7:a2:
9c:40:9f:a6:c4:fc:c6:f7:0e:33:b4:16:44:2c:3f:45:56:5d:
81:7a:76:7c:19:e7:be:9d:47:73:30:d1:76:2e:7d:be:23:76:
f1:e5:8d:71:b0:56:97:73:d8:a2:28:b0:1b:12:ef:1c:bc:95:
38:fc:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:59 2025 by rpki-client