Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: xLa987NrNvtiyOFurnMrcfwKB1HuDUN55lxwq+7bsLA=
Subject key identifier: 25:AE:39:83:D6:64:D2:32:14:B5:88:E1:E1:0C:26:BB:9D:D8:C8:CC
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 0198D47440DA2ABAA5CB2A77617857D8A5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 0F21
Signing time: Sat 23 Aug 2025 01:04:05 +0000
Manifest this update: Sat 23 Aug 2025 01:04:05 +0000
Manifest next update: Sun 24 Aug 2025 01:04:05 +0000
Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: AnBUT3L+WO5VdA2mLzOuLRp6dQM5GLe2EIApbQoJiqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:40:da:2a:ba:a5:cb:2a:77:61:78:57:d8:a5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Aug 23 01:04:05 2025 GMT
Not After : Aug 24 01:04:05 2025 GMT
Subject: CN=25ae3983d664d23214b588e1e10c26bb9dd8c8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:81:86:10:0e:65:c9:6c:b3:8c:22:f4:5c:
1a:66:9d:12:e9:a1:79:e9:6d:f7:f4:8a:a4:e5:c7:
6a:6c:4f:71:72:ed:4c:5a:bf:09:f6:0e:80:e9:58:
9d:ac:25:66:4d:49:fb:35:f6:71:59:b6:72:8c:42:
8f:c1:27:af:6c:0a:9b:09:cc:a9:a7:9e:24:af:7c:
23:fd:ba:7a:74:8e:80:ed:2e:78:c8:89:03:98:2f:
f9:a5:ec:c8:4a:2c:d6:40:41:0b:91:79:83:b6:89:
2f:5d:19:c2:b3:b9:f3:b7:16:57:aa:22:22:3b:b7:
7b:f6:fc:8a:2e:17:c4:f5:22:f3:3e:23:73:5d:6e:
c4:95:fe:0f:93:7f:e6:fa:44:0d:23:08:b0:36:0c:
1b:f4:d4:53:4a:f4:d0:b5:83:a5:e7:85:32:20:e2:
9f:db:db:de:c5:34:16:0a:2c:0a:5a:48:9a:df:b8:
27:35:0f:ef:73:af:44:13:7a:69:3e:56:4c:17:a7:
8c:ca:1b:6d:71:33:0e:b9:be:ce:52:0a:1d:8d:3a:
f4:6f:d1:ed:9f:63:67:0e:3b:54:56:b1:2a:a9:03:
29:10:74:95:57:d1:81:49:5d:fb:5d:4a:4c:1d:59:
ea:5b:3b:fb:68:41:9b:6f:b9:30:f2:11:4d:b0:c5:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:39:83:D6:64:D2:32:14:B5:88:E1:E1:0C:26:BB:9D:D8:C8:CC
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7c:60:63:96:fb:a8:0b:ea:6c:8d:6e:a4:a8:22:18:47:47:
d7:b1:0d:d7:38:41:60:4b:d2:20:3d:42:81:84:c6:23:62:4d:
eb:07:15:53:65:82:b8:20:ae:96:fb:a4:5c:11:4b:3c:54:b3:
93:04:e4:e1:37:f0:47:46:f3:42:22:b3:5b:bd:a5:39:25:40:
ad:59:38:ff:e0:67:db:29:f7:ed:2b:58:eb:4d:c4:0b:a4:3d:
5c:0f:5c:23:4b:04:9a:cc:4c:03:f7:8f:45:0b:3a:b6:33:8d:
23:08:9e:4d:2f:68:9c:cf:2c:d6:95:a3:60:65:c3:59:7b:d9:
6e:8d:db:28:cc:e2:9c:8b:f4:f8:fd:74:ff:1b:73:ca:d3:4d:
97:43:9a:47:7c:97:c1:01:12:aa:51:35:b3:cd:39:fe:49:a1:
c7:e4:f9:bc:bf:7e:4b:b7:ef:09:92:eb:b3:1c:7e:91:7f:8c:
de:7a:77:02:62:e7:7c:cb:9d:72:22:42:15:bc:49:73:1a:de:
73:9a:cf:0b:0c:30:a2:78:a7:66:3e:2a:58:30:55:7c:a0:6a:
38:c2:e3:e1:aa:3b:71:b7:23:8b:8e:df:6b:1c:31:be:62:0a:
d1:27:3e:86:3c:78:17:c2:1f:53:84:57:55:f0:bb:3a:4a:f2:
e6:6c:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:00 2025 by rpki-client