Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier: anu1VrhGxfLTFoqvK8ovLwGMkfaGZtMi6QS+uFqHgOA=
Subject key identifier: 57:53:43:CF:75:7E:5F:73:DA:65:98:D1:92:29:F4:ED:29:40:4C:29
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial: 0197B7B337E024F4682BFB20F136DD91B730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number: 02BB
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: GNKF2i544q62u85/E9DdK/Miib2oYZ1nOe2XoSfjLoY=)
2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:37:e0:24:f4:68:2b:fb:20:f1:36:dd:91:b7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=575343cf757e5f73da6598d19229f4ed29404c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:ba:bd:90:33:c7:ef:cd:d6:02:dd:e8:1e:
b6:40:be:1c:8a:46:fb:9c:f7:04:e2:6e:75:4a:b1:
c5:96:cf:a9:c7:9d:d0:d0:ea:3f:67:85:c9:a4:bd:
68:87:bc:05:1d:49:21:ac:44:b0:55:1c:60:a2:b9:
96:b3:11:fe:d4:44:e1:51:f6:85:74:79:b3:0b:65:
15:68:a5:8b:4c:66:29:10:7b:47:ed:9b:c7:34:67:
14:6b:9a:40:39:ed:62:ab:60:06:36:e0:17:bb:e8:
84:67:e8:e6:4c:01:98:27:56:46:c1:4f:5a:53:43:
07:d1:8c:4d:14:77:ff:09:33:b6:55:44:14:55:e7:
cd:96:92:94:0e:b9:0c:49:d6:1f:3e:ce:e8:c1:1e:
8b:9d:6d:e2:c5:ea:6b:40:3c:a7:00:d9:42:59:9f:
60:0d:fe:60:e2:42:66:30:f9:d3:ff:41:be:67:e8:
4b:dd:93:53:26:1b:40:cb:d5:45:a5:28:98:3b:34:
0d:e2:3e:02:0f:de:8f:04:bf:0d:9f:f1:1a:2b:0a:
0f:c7:d0:a9:39:79:4e:21:d0:79:21:a3:f5:8d:1c:
b5:23:15:ae:b7:4f:31:f6:8c:9b:76:25:39:36:ca:
a9:8a:a8:c8:3b:b3:77:ff:22:cc:d7:f8:06:d6:71:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:43:CF:75:7E:5F:73:DA:65:98:D1:92:29:F4:ED:29:40:4C:29
X509v3 Authority Key Identifier:
keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9c:fb:29:85:24:be:2a:d2:50:ff:b5:3f:a9:47:d4:01:d1:
74:9c:5d:86:40:5c:0a:bc:3c:b6:6f:f7:83:1d:c9:43:94:52:
68:bb:cc:84:0c:e2:ae:9e:d7:f6:8c:bf:dd:fa:10:b9:17:f4:
d7:4f:86:39:28:52:4e:c8:28:24:ba:2d:f9:0d:10:48:b9:43:
6b:4d:42:51:59:27:cb:2b:fc:b8:60:6d:ba:fc:9f:a8:85:70:
4b:b1:85:56:6d:04:62:45:b4:69:b6:b0:49:3f:0b:b0:99:95:
5a:92:0e:2e:5a:d6:f0:e1:29:7e:8d:9a:14:0c:a8:6e:38:f7:
d5:7a:ec:11:ff:32:96:61:44:1a:80:ac:0f:4a:32:58:c2:93:
fb:da:2d:7b:28:7d:3d:18:1b:f9:9c:14:d3:23:e7:b0:38:ce:
ad:70:24:3e:eb:21:54:8f:1c:91:8f:c9:10:3d:a8:72:5c:9d:
bc:04:f0:67:00:da:7c:eb:3e:8b:1a:33:79:91:2b:c5:9b:b8:
40:a6:15:f3:2c:6c:03:99:4f:c7:93:ca:c2:07:b1:8f:8a:fd:
9f:4b:42:37:c1:2d:8a:68:bf:e6:1b:2c:45:84:ab:51:89:79:
24:2c:0f:93:05:49:35:02:26:6c:25:2f:50:d5:4f:09:df:70:
ef:6a:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:18 2025 by rpki-client