Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: Px80nInC3gfA/AiIFNTUfwuR4qIGly6GqqtxyPkd5oc=
Subject key identifier: 4F:70:0F:CC:DB:5C:5C:78:1E:DD:64:9E:3C:F3:9C:D9:5F:C9:B1:B9
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 0198D4727F5AF8122BC0FDECB4552BB1FBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0A31
Signing time: Sat 23 Aug 2025 01:02:10 +0000
Manifest this update: Sat 23 Aug 2025 01:02:10 +0000
Manifest next update: Sun 24 Aug 2025 01:02:10 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: BGJ7gitbZR8Y4QZX1G5K7OdAble5mPyaecKYjJgQid0=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7f:5a:f8:12:2b:c0:fd:ec:b4:55:2b:b1:fb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Aug 23 01:02:10 2025 GMT
Not After : Aug 24 01:02:10 2025 GMT
Subject: CN=4f700fccdb5c5c781edd649e3cf39cd95fc9b1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:40:17:fd:66:50:dc:c0:08:d9:07:22:0e:
a4:e2:84:d6:71:23:b4:77:19:b6:f5:bc:30:fc:03:
50:7b:54:37:ab:ea:c1:b7:1a:5d:a7:e2:e7:5e:b6:
a4:d9:89:ae:0e:a0:4f:5e:7f:38:1c:fe:24:49:10:
1e:38:1f:ed:d2:2a:16:b6:29:1e:a4:3c:5a:37:a3:
9d:4c:60:d3:20:ff:06:80:2f:e2:96:39:3f:18:b4:
f7:4d:06:12:6b:99:3a:47:e6:58:7f:9b:3f:38:5f:
c4:f0:11:44:8b:eb:56:19:06:40:43:0d:89:d7:c1:
c2:6d:0b:78:70:14:ac:92:4e:fb:b9:05:08:22:dd:
2c:6e:81:7a:2e:c5:89:51:e8:92:70:2e:3d:d7:48:
1e:e3:43:c2:a4:ee:3e:47:ac:d8:50:ba:ef:9e:8e:
dc:c4:7f:33:db:9d:ad:41:57:0c:b3:66:77:40:87:
a0:b9:83:ed:e5:de:ca:ee:9c:38:63:bf:e2:0e:21:
b8:c7:bc:3b:26:9d:1b:58:30:71:a1:a8:50:c8:2e:
b6:7f:56:1d:c4:7b:5c:1c:1a:c3:02:fb:77:4f:9a:
1d:62:79:c8:70:bc:be:fb:84:28:33:c0:37:a8:a4:
e2:f4:4d:83:29:27:1f:c3:ba:1b:cd:f7:25:20:b5:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:0F:CC:DB:5C:5C:78:1E:DD:64:9E:3C:F3:9C:D9:5F:C9:B1:B9
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:66:38:f5:4d:c7:f8:c4:f8:ed:bc:14:84:e2:af:6a:1b:
48:d6:77:33:62:b0:43:14:df:37:e0:0b:79:ff:2a:1b:14:af:
42:33:40:b7:c6:1a:80:c2:b8:76:a4:2d:31:9b:fe:55:c1:09:
58:d3:15:06:c1:a4:57:8a:b5:f5:ec:6a:77:bd:8e:b2:40:5c:
67:c5:e1:73:9f:dc:6d:d6:9e:8d:f4:1e:07:d7:8f:eb:aa:5c:
a4:6e:d8:17:51:70:19:b3:98:ea:68:f8:b3:a5:df:d0:d0:b2:
fa:69:17:7e:d1:e0:36:17:ee:62:a4:00:10:a5:b1:76:bc:dc:
8a:76:e1:47:e8:bb:b6:9b:4d:ef:9a:c6:d1:aa:9e:a1:99:db:
62:83:e3:9c:74:8c:2c:20:85:dc:cb:37:67:b8:46:24:54:3f:
d9:9d:ba:7d:8a:a5:4f:eb:c2:23:38:49:57:1e:d7:54:db:a5:
06:9d:32:40:4c:d0:b6:06:0d:e4:f4:ac:1a:26:00:8e:46:64:
f3:2f:6e:b8:ca:d2:d2:25:8e:6c:12:1d:6b:91:f0:82:ae:88:
5d:b3:e9:4a:44:fa:1a:a9:84:17:de:03:0a:e4:83:4a:61:43:
22:56:c6:37:27:2f:80:65:c6:fb:0f:29:c0:4e:03:b0:ad:a3:
3b:c3:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:42 2025 by rpki-client