Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: C0oAhA895w1zKD1QXvYLDaCdDnxJ9hOAQW5dKbP7tkE=
Subject key identifier: D0:01:4B:71:D0:5D:5F:2C:D6:B2:35:DA:FB:1E:0A:D4:97:E7:7A:E8
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 0198D5BBAD7498653F6281497B396E1BA08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 1200
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: KlCrypoUT/1Em7/nrbOGFF922dUuJ5Eszh+quNsq9WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ad:74:98:65:3f:62:81:49:7b:39:6e:1b:a0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=d0014b71d05d5f2cd6b235dafb1e0ad497e77ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:e5:a1:8b:d0:74:b9:cb:d3:63:d1:c1:43:
33:5c:ac:fd:cd:f1:55:34:65:c8:52:ac:7a:87:12:
9e:1f:0b:71:4f:c3:73:45:23:15:2e:34:1f:74:a9:
a8:3f:60:10:d3:b9:14:0e:38:90:f6:12:d6:eb:3a:
5b:05:f5:40:a2:93:5b:4d:df:71:6f:5f:f4:9e:9f:
71:e9:e8:7f:4d:d1:e1:ed:01:95:2b:be:b2:32:cd:
9e:32:0f:42:c9:ba:1d:79:2a:95:57:4e:84:da:51:
f6:9c:c8:29:2b:57:a9:10:f5:cd:8a:27:a4:db:2e:
5d:60:86:40:91:39:d7:e2:ce:f7:20:bc:20:c9:4f:
4f:c6:0d:1f:6a:c1:0f:d4:a3:d5:91:e3:d1:ab:0d:
25:f5:78:c6:0f:e9:28:b9:82:a1:a2:97:5f:31:47:
7d:f1:31:de:ed:72:84:b1:6b:70:b2:48:31:60:ab:
f5:e1:7e:a7:c1:a2:19:35:76:35:e8:a3:96:e0:60:
c8:5a:be:72:3d:22:9b:53:d8:a6:a6:18:76:45:16:
7f:24:88:7c:23:93:40:5d:8b:b1:04:f6:32:19:6a:
a1:2e:5f:2f:13:12:6c:af:51:4d:37:b9:15:23:43:
f3:56:6d:53:93:18:c2:40:65:e7:3f:4f:5d:59:6a:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:4B:71:D0:5D:5F:2C:D6:B2:35:DA:FB:1E:0A:D4:97:E7:7A:E8
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:07:91:ff:71:fb:a0:3b:35:cb:7d:da:f1:c7:23:dd:fa:72:
fb:cc:70:fb:9a:97:30:57:6a:40:7c:86:0d:8a:0f:27:0c:22:
61:c1:30:d6:ef:4e:bc:1f:cd:31:78:22:13:9a:74:31:14:65:
9c:0e:56:bc:63:f9:bb:74:63:57:55:9b:3e:0c:8d:56:35:7b:
df:a8:31:77:5b:ae:4d:c6:84:89:1d:1e:72:48:1f:a8:97:b9:
ee:a2:c1:06:64:4a:c7:bc:e1:d2:88:a9:63:8c:c3:f8:8f:3d:
15:da:83:27:cb:7b:fe:b2:d2:f7:be:98:f3:49:45:ed:e7:bb:
e4:f5:c0:35:0d:bf:19:b6:ec:a3:83:85:bf:8a:e4:fa:84:48:
6a:51:e7:68:43:d7:04:87:bd:d5:6f:1a:e0:f4:81:50:02:d7:
7b:c2:7d:27:dc:e1:39:e5:05:54:79:87:d5:7e:e3:6a:3c:c7:
80:af:b5:94:bc:77:b8:80:07:b7:78:b0:62:1c:97:34:75:c4:
0d:67:3d:ab:b3:34:f1:14:63:94:0a:6a:f7:06:0c:f4:34:b8:
98:28:09:3d:14:70:08:49:ff:3e:3a:7d:44:bc:14:43:f9:f5:
0f:71:7e:49:9b:05:61:c2:26:ae:21:59:ad:ab:5f:51:6a:c8:
67:5c:94:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:39 2025 by rpki-client