Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier: +Cvpo3NPaEinsyVTgDalsWFvW5RpODoe0nHZvrzoYVE=
Subject key identifier: 3D:37:DF:78:01:83:B2:47:D0:D4:88:21:35:C4:05:C2:42:AA:E4:62
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 0198D4730D2FE3EA7C02C1567E10AD6FCAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number: 14D1
Signing time: Sat 23 Aug 2025 01:02:46 +0000
Manifest this update: Sat 23 Aug 2025 01:02:46 +0000
Manifest next update: Sun 24 Aug 2025 01:02:46 +0000
Files and hashes: 1: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: piFVcnoplysyViBDk/iAYnLNVJEntH4v3D4ElNG5M8M=)
2: tCKYdWD2hSQqFlBHMS87DdwFA_c.roa (hash: P2KIjX/YYHmksRirKKz2Fd1xnQFo0kzJQbDUVFG/Ics=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:0d:2f:e3:ea:7c:02:c1:56:7e:10:ad:6f:ca:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Aug 23 01:02:46 2025 GMT
Not After : Aug 24 01:02:46 2025 GMT
Subject: CN=3d37df780183b247d0d4882135c405c242aae462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:21:f4:83:be:ee:0f:52:d8:b1:cf:56:9e:
be:09:99:54:4a:8c:ed:c8:f0:c1:36:a7:46:19:34:
fa:d6:9c:f7:9e:de:3a:18:87:af:92:a3:d6:6d:6c:
10:e1:03:5d:8b:ae:2e:15:24:83:5b:dd:08:dd:5e:
a7:f2:05:56:8b:86:71:37:f0:6c:c0:28:2b:c1:e0:
25:5a:73:13:63:40:be:98:87:f5:5f:66:e7:b1:2a:
48:35:1e:eb:61:16:fb:2a:cd:4f:4f:47:23:1c:2f:
bc:76:27:a2:fc:08:b6:1f:84:f5:e3:bc:5e:eb:fb:
63:74:06:c9:c4:a8:b0:62:7e:3b:b1:9b:e1:49:9f:
48:08:76:eb:ac:c1:bd:2a:03:dc:da:90:86:b9:66:
6c:c4:2a:e8:75:ff:1e:61:63:90:95:ae:fa:68:66:
b9:9c:90:f8:6f:7a:67:c0:e4:f1:98:82:6e:cc:2d:
25:69:ad:d1:f1:63:51:44:ae:c8:07:a4:1c:3a:6b:
27:fe:35:bc:8f:1e:7c:4f:c2:94:be:a7:53:c2:4c:
4c:da:9a:ee:7f:31:6e:a0:1a:fe:3f:15:a1:13:67:
6d:8d:a2:5c:4d:0a:0c:cd:ad:d4:62:83:e2:3c:06:
ba:e3:2c:37:97:5c:42:36:a0:8b:ab:ab:a8:12:7d:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:DF:78:01:83:B2:47:D0:D4:88:21:35:C4:05:C2:42:AA:E4:62
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:af:99:25:e6:dd:38:9e:b9:ee:8e:71:d0:c6:6c:80:e5:bd:
fa:a7:69:23:33:97:8c:4b:cc:11:c7:0e:64:39:e5:50:d2:66:
a6:b0:43:30:8d:a6:e8:30:0c:7f:c8:d1:1c:9e:7f:99:df:f7:
81:6b:1d:e4:ae:ab:4d:47:1e:8f:51:69:76:cf:99:8b:96:f4:
ee:f7:8b:f7:d9:93:5e:f5:74:9b:2e:54:0e:0d:11:de:9d:37:
2c:da:f5:77:08:6c:73:0a:c4:82:38:b0:da:60:e2:35:d3:fc:
62:ec:14:6e:07:7d:35:1c:b4:90:82:f9:05:a7:e0:e3:3d:a5:
df:1d:c8:92:cf:1c:58:0f:2d:55:b6:35:06:e7:ed:a9:47:59:
ac:f4:45:58:ca:02:a2:0e:25:f3:8e:8c:26:1d:6a:ec:40:d4:
22:b2:c2:97:d4:d7:dd:c9:74:f3:59:eb:c4:08:92:9a:5f:70:
aa:e4:3a:e8:a4:6b:b4:26:38:d0:b6:a5:1d:7a:43:1e:89:12:
82:e8:82:06:58:15:2a:99:04:01:ab:04:e2:37:9c:ce:f8:37:
1b:24:e4:76:dc:92:07:9f:18:69:ec:fb:1d:f1:d3:68:cf:06:
53:93:da:9b:07:f1:d5:40:1d:31:4c:1d:0a:64:3b:9b:58:ec:
57:6d:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:20 2025 by rpki-client