Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: q2YaD/b48LPCehzjq59O64LL+LEWlgPlADOvSfZJPVg=
Subject key identifier: 37:28:BB:23:BA:CC:3B:8A:6B:14:3B:28:E0:BD:EE:7F:2B:85:1C:69
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 0198D5BB8361FC4AA86684DA883551B4E2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 141C
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: xHi3yvacqmEaSuUkFSSJ6hkqFgVP3qohJtgJkGN1YYk=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:83:61:fc:4a:a8:66:84:da:88:35:51:b4:e2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=3728bb23bacc3b8a6b143b28e0bdee7f2b851c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:f8:5b:09:48:4e:90:d4:92:40:c3:e6:73:
d4:fb:91:7d:c3:25:26:b6:36:58:c5:1b:82:ed:72:
3e:8a:31:30:fd:d5:91:ce:b1:69:ef:08:67:9a:53:
94:8b:25:ec:2e:7d:19:1e:4f:5b:1e:c0:63:33:30:
74:35:6e:5a:d3:9a:fd:29:a3:6b:22:e7:81:b4:05:
20:d0:d9:87:fc:6d:c9:bd:79:72:83:30:03:39:8e:
d6:c2:40:85:14:f7:8a:45:85:e5:af:85:43:ac:92:
66:5e:21:61:7b:23:fb:e0:cc:5c:ab:ef:cf:d3:64:
b2:5c:42:1d:f2:8b:9c:46:32:60:bb:d7:85:dd:f9:
1c:dc:16:8a:94:62:32:7a:69:df:2b:98:49:b6:a7:
09:dd:9c:ff:be:aa:4d:d0:f3:8e:89:c5:55:d2:9e:
41:4a:97:a2:56:79:28:13:b1:94:5d:f4:65:87:37:
0c:c0:4a:76:fe:86:be:06:19:fc:4e:dc:07:aa:fd:
12:c2:ed:8d:03:ed:8c:fe:15:5b:71:68:fd:ae:c8:
05:31:96:3b:bb:a3:46:8f:98:c7:81:48:ba:95:01:
e3:80:f5:50:ea:dc:84:6c:13:d5:23:ae:98:43:d5:
f9:70:c6:ed:3d:43:15:de:d9:cc:95:53:35:ce:ef:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:28:BB:23:BA:CC:3B:8A:6B:14:3B:28:E0:BD:EE:7F:2B:85:1C:69
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0e:6e:1a:e2:47:57:4b:ec:06:ce:7b:fc:87:71:a4:c0:04:
2b:87:78:79:73:df:98:8c:ed:0f:ea:83:c4:02:f6:e7:c9:f9:
63:f7:0e:21:1e:e9:2b:38:04:79:f1:c0:dc:f5:9c:f8:9d:4c:
8d:a7:c2:87:58:4d:43:a5:0a:3b:6d:12:ea:d5:48:cb:75:05:
97:05:10:20:04:43:cf:b1:3f:5f:a4:4b:02:ee:24:b3:3a:1b:
a6:91:90:ff:d8:16:9c:85:74:c3:70:f3:36:46:8f:28:66:6b:
e0:e3:d6:03:1c:7b:21:77:16:18:f0:58:1a:64:88:68:a8:76:
4f:17:c7:ce:24:9b:d9:47:5e:5a:18:b6:fd:5d:8a:75:77:3f:
d7:c4:87:ef:32:5c:8a:f0:77:72:94:9b:bf:44:18:9d:e2:45:
1d:b3:f9:57:a5:2b:04:9d:34:77:bb:0b:74:d0:4b:29:3d:84:
66:e9:72:55:bf:f7:8d:52:e4:e0:ac:cd:d0:ef:b4:9b:d8:91:
b7:8f:f2:36:e5:16:e3:46:7d:a6:ca:09:98:72:ca:ea:77:dd:
33:3d:86:64:ad:b9:8e:bc:81:0d:cc:45:dd:26:6c:53:83:61:
fc:41:a9:2f:0c:5a:95:a5:2c:15:99:00:32:04:c1:44:a5:b7:
13:58:9e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:27 2025 by rpki-client