Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: i/xyTPReJPge61/Vfleu1FWBU4N22ARcBXJjHFRaXUU=
Subject key identifier: 02:B7:E6:F0:32:D2:7B:F9:09:21:21:21:AD:C0:85:8B:2C:C5:8B:ED
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 0198D4742978429E609D4FA1093E15CA4630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:59 +0000
Manifest this update: Sat 23 Aug 2025 01:03:59 +0000
Manifest next update: Sun 24 Aug 2025 01:03:59 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: HunuR4LiECN2Rg9eif/dRcpXE/aDxDKXLyXPF9LThyE=)
2: nqDbjTD7-4bF8APAmv3q39AmNtk.roa (hash: zWbRV6cXuufmhpJUA1tayT8JP8s9Ez0NcmTuvgMXFF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:29:78:42:9e:60:9d:4f:a1:09:3e:15:ca:46:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Aug 23 01:03:59 2025 GMT
Not After : Aug 24 01:03:59 2025 GMT
Subject: CN=02b7e6f032d27bf909212121adc0858b2cc58bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:eb:3f:27:3f:25:a4:1e:cb:e1:82:8d:23:
be:fc:af:ec:29:9f:28:13:b3:fd:cd:1d:d6:7f:09:
0b:f6:5b:fd:bb:47:cc:27:af:26:34:89:f2:e1:5e:
0a:ea:0a:f6:d6:47:41:fd:be:70:fe:36:8e:35:e2:
5e:31:fc:99:94:ee:75:24:d8:69:03:9d:1a:34:5d:
7a:49:8c:bb:e3:9f:cd:e4:c3:db:24:55:51:26:2a:
45:59:e4:1b:92:71:7a:ac:1d:72:7c:7f:59:8c:e6:
fe:67:59:aa:4c:2e:93:f9:4f:11:1d:54:21:fb:66:
c0:6c:c0:d8:12:bd:d6:dd:ca:62:19:a0:52:d4:0b:
ff:98:9e:ae:0d:5a:94:0e:76:80:24:47:37:0b:d1:
15:e2:0d:38:00:a5:84:d9:87:4a:e3:5a:73:48:4a:
ee:e6:6b:1e:98:4c:04:06:9c:85:f6:05:f8:e9:98:
22:f6:64:90:3b:7b:10:1f:08:e0:0d:8b:79:a7:c7:
67:58:e4:fd:11:ba:58:fd:b8:a1:ad:f1:d6:0b:21:
34:6f:9b:ac:e3:e3:ff:05:3e:ed:c7:90:0a:e7:06:
61:a2:82:fd:66:ee:59:8e:cc:df:8b:c9:88:63:e0:
2b:ba:fe:73:d6:df:42:ee:80:f6:b0:a2:cf:99:bd:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:E6:F0:32:D2:7B:F9:09:21:21:21:AD:C0:85:8B:2C:C5:8B:ED
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ad:53:34:c5:8f:65:f3:ba:e2:a5:45:cc:a1:ea:da:c8:7c:
d2:9b:71:ad:76:8a:dc:8b:44:50:f9:d2:fd:70:f1:2b:eb:d2:
60:41:58:73:1e:b5:ed:08:9d:7a:ea:85:75:96:51:47:97:02:
5d:09:5f:e6:8e:22:08:fc:de:7f:57:fd:7c:0a:d8:69:40:aa:
19:37:55:f0:86:b1:3e:04:c1:c0:17:22:7c:f8:6c:fc:a6:e4:
eb:dd:a3:d9:d8:be:15:7f:82:f4:42:2d:a2:4c:d8:eb:0d:c8:
92:a2:a7:03:48:f2:4e:c0:93:57:d9:94:dc:2c:b4:d6:a4:ca:
15:08:5f:c7:21:1f:c2:4b:97:52:fb:6c:50:90:64:f7:a8:41:
75:a3:ea:5b:65:7f:e8:78:9a:78:df:00:e3:75:79:81:35:59:
a9:8f:52:f4:78:21:b8:77:e4:9f:cd:a5:f8:e4:ce:50:aa:05:
b2:98:83:2c:3e:71:aa:44:c0:88:b0:0c:aa:83:c6:20:36:5c:
59:42:65:4f:04:60:57:2a:36:18:57:80:77:c4:5a:ad:57:da:
d6:9d:0d:2a:df:94:fd:da:34:70:5d:3c:4a:5d:0b:13:14:24:
46:a1:e8:d4:95:fa:a7:9e:71:e4:5d:df:fc:30:18:e2:83:1b:
86:11:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:43 2025 by rpki-client