Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: MknOs5+fnTB6WWIxblSzH/l7TWGXnWZGuxlF4W4mxhw=
Subject key identifier: 15:BA:BD:13:90:E4:D8:F9:22:BD:BE:4A:9C:F3:C9:32:14:C9:DA:46
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 0198D4A7964B9A2FBCAF1FE02D66369E0681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0C1D
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: 9DaFft1ZRBebRPooZGGkOPjqAbQ.roa (hash: lYC82jjgh3RxcDkcuO3IXX6eKV+DE4TIh12Xui9zOW4=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: hx+O3sczKQMVU5eXPMQYTPuxivCXU96ihwWUd/l+CZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:96:4b:9a:2f:bc:af:1f:e0:2d:66:36:9e:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=15babd1390e4d8f922bdbe4a9cf3c93214c9da46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:5b:96:29:a5:bb:2d:44:9a:3a:1d:85:1b:
b0:cf:74:4b:c6:fd:ab:8f:d2:cf:53:e5:18:dc:24:
fe:b5:2a:73:ea:4e:2e:5d:74:2e:34:ac:c1:46:d1:
3b:1d:b1:0b:b3:ce:24:eb:ff:21:d2:e0:68:98:22:
e1:af:70:fe:16:1f:45:83:09:f1:69:94:ec:63:c6:
12:fc:70:ad:70:d0:27:7c:a0:39:5b:90:08:d7:db:
0c:11:49:5d:78:e4:e0:65:9d:6f:bc:6d:d2:50:dc:
aa:cf:df:34:5b:40:5c:f9:80:c0:aa:46:da:c3:11:
5a:93:6f:01:4e:b3:e7:58:57:2d:8c:55:fe:de:b4:
a6:36:0d:c1:f3:fe:dd:5e:a2:bc:80:1b:ac:e6:0d:
95:07:20:83:24:cb:d6:fd:c1:ed:50:82:e4:2a:48:
73:62:27:6e:a3:61:1f:01:2d:b0:33:56:7c:82:00:
26:4e:7a:a0:02:25:3c:16:7d:f1:bc:b3:8d:50:d8:
5c:07:64:14:45:6b:21:06:b6:81:29:8a:d2:e0:23:
83:f5:62:89:95:db:5b:29:72:4a:c7:13:c1:ff:60:
e8:70:10:9b:6c:a2:32:68:70:66:71:f5:e6:83:b6:
42:3a:ca:4d:aa:49:58:55:d2:47:97:ab:4b:5e:c5:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BA:BD:13:90:E4:D8:F9:22:BD:BE:4A:9C:F3:C9:32:14:C9:DA:46
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:80:96:6a:39:f5:d8:b2:db:92:d4:16:cd:0d:44:47:c9:aa:
32:5c:f6:36:6c:8c:35:bc:05:ee:1b:8a:1d:09:86:58:dd:49:
4a:97:b9:b0:ba:9f:a0:9b:d6:5d:92:55:4a:8b:79:d4:22:3a:
01:92:00:d4:9a:3a:07:c8:3b:03:49:ff:d2:37:bd:77:47:38:
8d:57:72:f9:c1:c0:53:3e:35:b8:f1:40:b9:b8:fc:aa:c5:9d:
41:71:4a:4a:53:02:1d:a7:de:a5:da:46:70:98:69:aa:ca:e2:
e6:52:c4:73:7b:d7:e5:9e:77:5f:12:b0:15:d2:14:48:4c:5a:
3f:7c:16:83:08:db:28:58:3d:2a:50:f9:5a:c2:53:b6:b9:8b:
b6:f4:5e:dc:15:43:ba:84:6b:44:29:17:a6:30:a5:30:96:7b:
b5:13:d8:79:81:87:42:40:6c:f1:15:39:c5:6a:eb:28:b2:7a:
cc:ce:75:46:49:63:0a:61:e3:19:f7:07:33:7a:68:1c:e1:be:
4d:27:85:c7:b5:70:eb:c3:38:f5:55:ad:44:03:01:1f:22:67:
19:02:ee:78:aa:52:48:90:11:14:4d:c5:52:d4:e5:e6:16:0c:
b1:e5:c0:2f:a5:68:0b:1b:df:8c:db:bc:19:da:94:7d:f9:b2:
43:dd:9a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:33 2025 by rpki-client