Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: m3A9c14rbfcjSKrg0Hu5KSnJis/oK1DCI6X1YST0hFc=
Subject key identifier: E9:78:EF:C5:F2:7A:06:C8:46:8D:1F:01:CD:15:D9:8C:FD:B5:EE:B2
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 0198D6601B22E7BD7AB00FFDBAA475BC77C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:19 +0000
Manifest this update: Sat 23 Aug 2025 10:01:19 +0000
Manifest next update: Sun 24 Aug 2025 10:01:19 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: mbvjvbzcACQwoiJ4/h7UNvPMMddDLg6iHZpU3sPDUDk=)
2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1b:22:e7:bd:7a:b0:0f:fd:ba:a4:75:bc:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Aug 23 10:01:19 2025 GMT
Not After : Aug 24 10:01:19 2025 GMT
Subject: CN=e978efc5f27a06c8468d1f01cd15d98cfdb5eeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:da:6e:02:23:1e:c9:0b:35:fc:f0:d0:91:
4f:08:15:e7:f7:5f:21:73:0b:89:bf:e2:51:c3:42:
24:71:85:b3:65:5a:ed:99:16:34:59:98:1d:81:65:
99:ed:e1:bb:ff:cd:0a:35:96:31:f5:85:c1:93:76:
36:6c:2d:71:0c:73:19:60:8b:1d:07:60:e4:01:58:
63:75:d3:b0:44:35:a5:3e:bc:92:04:e9:d1:aa:9f:
d8:5c:6f:73:94:67:d4:a9:a2:5f:5a:a6:72:d3:ee:
6c:96:3a:77:18:6d:c0:88:fd:30:93:45:6b:e8:f6:
46:d2:ec:e7:7b:71:7c:cf:b8:53:3c:69:ee:5b:04:
1c:d0:c6:0a:f8:7d:21:e0:a7:69:b0:e2:36:f9:68:
74:3f:f1:6a:be:8c:cf:ed:4b:6c:ae:76:24:f3:24:
aa:56:c4:41:06:5c:0d:56:dd:95:58:a5:37:58:7d:
7e:81:7a:a4:6c:06:85:53:ae:54:3b:d3:83:ac:59:
76:a3:fa:d3:90:57:5d:ec:48:d6:62:03:87:31:23:
da:f8:37:b2:fa:94:08:f2:6f:04:e4:a4:b8:52:d6:
b2:68:61:0e:8a:67:c3:94:dc:fd:8a:89:04:42:ac:
b6:89:35:80:2b:a3:2d:9d:c9:66:92:7f:6e:88:29:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:78:EF:C5:F2:7A:06:C8:46:8D:1F:01:CD:15:D9:8C:FD:B5:EE:B2
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:08:f8:2f:0b:7c:00:8f:26:27:ec:8f:68:92:28:a3:bc:1f:
4d:77:b4:5f:e9:82:ff:34:19:69:c7:57:03:17:2e:94:a0:b5:
37:51:2d:fd:49:22:f8:66:7d:1d:43:a0:49:8e:af:91:bf:8a:
7e:f1:3a:51:2f:0f:86:17:73:25:1f:7d:36:01:54:39:2f:93:
d3:b5:8e:37:01:a4:94:13:c2:00:be:b8:5b:ae:67:9d:f2:cb:
f9:d9:9e:54:f7:f7:f5:e8:3e:09:c5:a3:fb:2e:99:b3:6c:8c:
2d:a0:d1:06:c9:c4:0c:f2:89:54:54:87:af:3c:b4:7c:b3:33:
3f:c1:7a:71:13:b2:3d:81:1a:d5:8a:2e:bb:b8:49:8c:2d:ce:
fc:2d:e5:33:8e:13:5e:b1:22:3e:cc:e1:1e:ee:fd:cd:25:61:
0a:f8:56:0d:33:3e:1a:83:21:28:a3:b4:cf:6b:09:42:bf:14:
94:c6:bd:bb:3f:9c:1c:81:c4:f6:70:48:51:b1:e7:1f:88:49:
8e:cd:d8:36:9f:10:f4:a4:69:d1:6d:d0:42:b4:0a:f5:d7:17:
d2:27:22:0a:45:fe:ca:19:a3:20:61:09:3b:d6:c0:79:26:30:
44:c0:8d:5c:48:67:69:e4:b6:f3:68:50:69:22:75:4a:20:6b:
8b:4f:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:35 2025 by rpki-client