Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: ZLvoc5/8ihQz5PsmW+na1BrVYlly2LkZ8fH70lB/k1w=
Subject key identifier: C2:9E:67:B2:FD:CE:1C:FF:9C:77:ED:F0:8E:71:2F:A4:3D:11:67:79
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 0198D5F1A30086696F82F72E3F6AB83ABC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0B56
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: 1+SJosr3zTFQlmkgHTAnC1FqQp1sYWKjfiyLCL9dEFY=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a3:00:86:69:6f:82:f7:2e:3f:6a:b8:3a:bc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=c29e67b2fdce1cff9c77edf08e712fa43d116779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:c2:67:52:58:23:f5:d5:dd:c4:f7:f2:41:
cb:8c:ef:5c:07:e3:df:e9:6c:4c:e1:b6:e4:66:9d:
4a:0b:59:59:27:e4:2b:26:8c:21:ee:b4:c0:0c:a3:
27:55:c6:02:0f:35:f3:d5:27:04:8c:24:e0:2d:0d:
8c:5a:bd:25:bf:df:0c:e5:44:39:aa:37:f5:03:98:
ce:b4:91:c7:cf:ea:14:79:4c:c4:84:7e:67:11:c4:
63:83:05:1f:81:2d:40:97:03:69:7e:eb:88:d2:29:
fe:85:8a:f0:ad:b9:fc:99:b1:9f:19:15:30:24:08:
75:1a:c9:de:51:bf:1b:d0:e5:cb:07:49:3d:67:e8:
1c:b8:ae:e5:80:bc:85:97:a8:6b:8b:7b:b2:4b:f2:
a3:df:8c:95:21:58:9b:57:5c:4e:a4:2f:3e:22:e7:
07:bd:1c:38:f8:30:72:db:df:60:fc:c7:0c:2d:bc:
a8:dd:3e:5f:23:54:30:17:64:2d:37:6e:c9:0a:49:
26:3c:59:35:8c:1d:09:ce:ca:e0:75:2d:21:17:91:
d9:ba:55:fb:95:e1:54:56:9b:74:a5:f6:d2:55:b5:
6d:2b:bd:0e:c4:af:49:1c:58:29:e8:bf:e4:94:91:
b7:13:49:99:ef:b0:1e:d3:40:9e:32:52:e1:65:2f:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:67:B2:FD:CE:1C:FF:9C:77:ED:F0:8E:71:2F:A4:3D:11:67:79
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:04:99:03:ce:e4:49:10:b9:42:2b:2d:01:47:7e:ec:ec:43:
c3:c1:d5:c7:2e:dd:ea:53:74:b5:bf:7b:ac:e1:8a:27:78:49:
ad:ef:4d:07:3d:08:82:fb:c2:8d:23:5f:7d:24:e9:d6:dd:0d:
a0:b1:e3:0f:e4:30:30:42:a9:1e:7d:b1:a1:d1:5c:75:49:c4:
36:4d:12:2b:b0:60:64:dc:94:6d:4c:02:6b:dc:a6:6c:95:af:
15:eb:61:9a:d6:5d:98:f6:9c:86:ac:90:77:f7:54:17:81:1e:
ed:00:51:6b:70:cb:27:2d:36:8f:a3:62:80:bc:4e:a6:88:fe:
af:b7:70:77:bf:b3:cc:c7:0d:a9:0d:b5:c5:e8:8a:77:c0:0d:
d4:f2:e8:d6:71:c5:05:4f:61:b7:f0:8f:56:7f:4e:ad:3e:86:
b8:23:f5:39:7d:b5:ba:e9:7f:ca:9a:fc:e5:86:9c:09:ee:6b:
ba:12:73:6f:53:58:19:61:9a:a1:2b:94:e1:30:db:4d:9e:83:
f8:2e:f4:10:a6:ab:0d:57:f0:f6:73:a8:fa:78:6f:77:f5:aa:
d6:23:cc:c9:d5:8f:e8:c6:aa:96:38:e4:22:a7:97:d3:a5:cc:
0a:34:68:5a:a1:62:52:9c:0d:41:f0:01:31:9c:51:40:4e:f2:
2a:10:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:17 2025 by rpki-client