Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: AIhIqTjywwNyJWxVOQS6WLxm9oHa2fPF88zZBQua0rM=
Subject key identifier: F8:32:07:0D:98:B2:B5:48:44:57:1B:E7:BC:39:49:F8:85:B3:38:35
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 0198D583A68F4C2A9B464B6F999201FC5C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 11F3
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: NM7owz75HgJzzcFBENXtvFuol3frkNnOoIcIuBjWhLc=)
2: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (hash: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a6:8f:4c:2a:9b:46:4b:6f:99:92:01:fc:5c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=f832070d98b2b54844571be7bc3949f885b33835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:8c:fe:69:5d:c5:11:54:67:c4:88:ff:ff:
ca:7f:7e:bb:a1:7f:f2:60:65:23:10:cf:da:17:d5:
02:3e:2f:34:7b:9e:e8:bf:86:41:7c:93:5d:43:22:
cc:a9:71:38:00:9b:4a:cf:cf:9b:11:47:72:25:f5:
3a:c4:0d:4d:c8:41:ac:9b:4f:af:bb:a9:ed:41:7d:
2a:08:ce:18:8e:d4:81:0e:a8:4a:0a:eb:f0:78:51:
53:42:71:09:54:be:e4:02:dd:2e:70:51:45:b2:11:
1e:94:09:61:c9:49:a3:b3:87:68:be:89:08:24:ba:
57:d9:0e:df:ac:37:63:89:99:48:af:a8:bd:f4:4e:
16:68:77:e6:8c:e8:58:7f:a2:5a:55:b7:a4:df:89:
fc:e2:c2:fd:8e:06:31:39:68:c4:9c:1b:87:cb:74:
b1:89:ca:7f:86:e3:69:84:7c:75:be:52:a9:8e:21:
fc:e5:90:bf:33:dc:b4:d5:e7:75:67:01:c8:8b:18:
4f:89:f5:80:50:79:04:78:37:eb:4c:48:56:17:f8:
8d:74:80:00:94:ce:89:ef:2b:ce:bf:50:1c:59:b1:
54:f5:00:8b:85:7d:81:9f:db:21:7a:3b:78:13:b4:
a0:41:93:54:b7:f9:1c:3d:07:7f:d0:f2:4c:49:e2:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:07:0D:98:B2:B5:48:44:57:1B:E7:BC:39:49:F8:85:B3:38:35
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b7:b5:e8:a3:42:96:f1:9c:87:1f:5d:44:d9:d9:5d:6d:ee:
e1:da:79:90:12:fe:d1:b7:18:8a:95:3a:52:87:82:da:98:71:
a2:d5:16:f2:7b:84:12:45:7a:b5:68:c5:63:eb:07:fa:98:36:
99:46:f5:b9:92:21:5c:d1:7e:1b:81:78:96:65:a0:7e:cd:2d:
51:5b:c7:1f:fd:a6:87:2a:7f:91:38:88:74:04:cd:f2:32:3f:
61:95:eb:c6:e2:0b:74:cd:74:ff:79:c2:9d:c6:a6:4c:49:6c:
a0:06:be:1d:bc:65:6c:87:cd:1a:17:05:67:2d:4a:7f:9e:7e:
71:b6:e9:bf:da:dc:dc:a9:9e:77:a3:9d:87:b2:59:37:67:3c:
8c:90:62:2c:be:06:2d:e1:5c:8f:fc:f4:28:28:94:04:14:25:
1b:19:02:54:e5:2f:43:c3:89:d1:92:7c:65:d5:c4:ad:80:31:
7a:35:e9:b2:03:d6:8d:ed:e4:1a:14:f7:85:32:1c:f1:0e:bc:
96:72:21:1e:4e:6d:1f:72:a6:e0:eb:ee:ee:dc:19:91:3e:8f:
a1:24:de:64:9e:a2:3c:81:2a:69:aa:90:47:39:c4:68:3d:c0:
d3:ff:08:d8:51:34:62:e5:46:9c:9a:46:68:c0:14:76:04:fc:
8d:3d:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:21 2025 by rpki-client