Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: xze4zDiSD6f8UwSTLRW4N9d/AX7xp5FyCCSlzLwYF9g=
Subject key identifier: 5D:E5:F0:1F:FD:84:B0:4B:8D:41:83:D4:16:88:59:65:C3:0C:2D:59
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 0197D1AAB5F7D3FC00D05A967C833A6A469A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 09AB
Signing time: Thu 03 Jul 2025 19:01:55 +0000
Manifest this update: Thu 03 Jul 2025 19:01:55 +0000
Manifest next update: Fri 04 Jul 2025 19:01:55 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: UWIRurJfmi8lYS/uQbqiJZEgJy+lSZTRQupKpyCfd5Y=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:aa:b5:f7:d3:fc:00:d0:5a:96:7c:83:3a:6a:46:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Jul 3 19:01:55 2025 GMT
Not After : Jul 4 19:01:55 2025 GMT
Subject: CN=5de5f01ffd84b04b8d4183d416885965c30c2d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:74:62:20:ec:80:d4:ac:e1:7f:d4:f9:07:
67:8f:6a:e2:64:06:ce:18:f5:d4:42:65:1c:89:d3:
b1:15:70:e6:7b:b6:dd:3b:00:dd:20:0c:28:80:4d:
17:ac:88:45:98:17:32:da:1c:69:b2:0b:73:74:2f:
37:e4:c3:6f:3d:ed:53:cc:f1:35:c3:e5:cd:5b:c7:
6a:2f:08:59:4d:e2:aa:ea:37:d9:81:01:58:d4:1e:
27:6b:1d:55:69:3f:c8:60:2b:79:10:5c:b2:a3:db:
77:1b:c1:70:79:63:7c:26:2c:c7:35:25:0d:50:5f:
f6:e4:39:36:a1:89:f1:44:6f:58:ea:c2:f0:df:e4:
bb:70:f1:0e:b9:5b:07:0c:7d:bc:08:d2:76:90:3d:
e4:43:50:a1:5e:ef:cc:e4:9c:7e:87:33:57:00:05:
79:63:67:36:ee:d3:a7:8b:8e:bc:3f:d0:1c:2b:2a:
b5:bd:e9:fd:33:e6:73:c0:9f:e4:55:2a:1d:1d:7c:
54:c1:2d:05:b9:c7:bf:60:58:ce:a1:69:bb:28:ba:
b7:0e:e5:cb:a7:6a:dd:00:6a:b4:9f:6b:43:3e:ef:
5b:e3:54:85:68:f8:46:e9:fa:a6:ae:36:a7:d5:28:
ba:cd:74:63:00:81:ea:39:ff:ff:a8:74:b7:90:09:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E5:F0:1F:FD:84:B0:4B:8D:41:83:D4:16:88:59:65:C3:0C:2D:59
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:03:6c:6c:69:a2:9c:cd:6e:a6:06:f0:23:81:6a:d7:3c:b0:
28:59:2a:bc:f3:72:33:5a:3b:53:72:5c:54:71:29:0b:3b:ca:
86:1e:99:4e:54:b3:98:ba:fc:f4:b3:00:c1:37:d7:1d:ce:81:
20:c6:da:bc:6c:85:5d:62:11:79:42:4d:93:8c:b8:36:26:ce:
8c:f1:a5:fe:ae:c3:fb:2d:41:4c:f7:68:a4:0d:bd:f6:82:48:
74:4a:fd:12:df:b4:cb:16:46:65:53:19:8f:89:8e:2c:f4:aa:
dd:94:26:7f:0b:87:0e:8b:df:82:62:e4:02:21:8a:6d:16:7c:
f2:bd:3d:3b:d2:5e:80:54:a6:4c:42:52:93:f7:9b:4e:af:6f:
64:fc:10:6d:5a:80:86:de:2d:d2:93:bb:09:9d:52:73:71:06:
75:bb:c8:fe:ee:00:aa:56:b5:be:ad:83:0c:ca:5d:0a:2e:7c:
ba:2f:55:82:15:33:55:1b:25:34:fa:20:69:63:70:11:09:6e:
ee:a2:1a:2a:34:7b:7a:b2:01:88:47:32:b7:41:ce:ab:b0:a4:
69:39:37:0c:ac:85:47:ab:27:23:4e:a3:7b:0d:f8:50:a9:84:
7d:20:e2:16:51:75:b3:8e:16:1b:fe:84:ca:8e:4b:7e:12:51:
b9:00:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:17:23 2025 by rpki-client