Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: T0P13CEfwPyto3bgAS89AMPZEBWPM5j+e99t/7Pa3Vk=
Subject key identifier: D4:2F:E0:7A:86:4B:4E:44:56:12:42:32:7A:DA:B6:50:D1:06:41:F2
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 0198D7A93072C7325190A26154F1A1DC2252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 16:00:46 +0000
Manifest this update: Sat 23 Aug 2025 16:00:46 +0000
Manifest next update: Sun 24 Aug 2025 16:00:46 +0000
Files and hashes: 1: I4AtuDZrbSqrgt1jAfNEMLFaaig.roa (hash: 7wTj3H6so/8/7mTO73IV6vt8mViKC1vPmg3wdN+1rZ0=)
2: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: spvRoK9HbJLys/6+2N9cIjI8c350kwpl4Jq1DJC/AMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:30:72:c7:32:51:90:a2:61:54:f1:a1:dc:22:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Aug 23 16:00:46 2025 GMT
Not After : Aug 24 16:00:46 2025 GMT
Subject: CN=d42fe07a864b4e44561242327adab650d10641f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:db:8d:9d:f6:37:6e:84:f3:ef:bb:3a:c2:
4a:8c:59:0c:d3:74:b3:5a:80:4b:92:38:e4:ff:c7:
bc:d3:8a:89:08:48:87:94:e9:d8:89:50:a9:6c:16:
1b:19:1c:ff:99:5c:64:8f:d4:c3:0e:49:57:55:e1:
74:69:88:be:0e:7b:8f:19:84:cc:8f:d3:50:51:aa:
41:95:37:66:32:28:af:bc:a5:82:1c:9d:5f:06:55:
e4:dc:e6:19:6f:04:23:05:d8:98:87:fe:ec:e2:2f:
70:08:8a:1a:12:6e:b1:89:68:d6:f3:53:6a:ae:4c:
95:72:07:fb:38:61:01:8c:36:e1:41:5f:bd:8f:54:
25:5e:30:3e:59:59:b2:f9:4d:90:33:ad:6c:17:80:
c5:fc:17:4a:0f:48:f8:65:fe:2d:a3:dd:fa:a0:1b:
50:d5:b4:9f:31:e1:1f:b6:5f:8c:e4:25:58:ee:ef:
de:3d:30:89:37:9a:11:1a:20:5b:8f:ac:4c:26:81:
1a:8b:6d:4e:47:00:69:8e:e4:86:99:ca:b8:aa:a7:
af:4c:9e:c8:b5:44:9d:6e:90:ab:15:76:67:2e:fe:
27:7d:2c:38:e4:a6:3d:98:8e:f0:6f:47:b5:00:40:
b6:fd:22:b7:55:9d:2d:1c:25:8a:ad:e2:8a:2d:1c:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:E0:7A:86:4B:4E:44:56:12:42:32:7A:DA:B6:50:D1:06:41:F2
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0d:bc:62:68:3c:03:17:e4:1b:1a:94:1a:0f:a8:d5:b7:79:
ad:6e:b3:45:7c:4b:10:07:15:98:2c:bf:2c:4c:b3:38:92:52:
ec:88:6f:f4:4a:3c:34:c0:93:5d:87:e5:06:f6:5c:8a:d2:60:
b8:13:59:44:b6:56:75:43:30:4c:d4:6f:93:96:6f:e4:56:20:
89:df:4c:69:88:27:d3:48:e2:0a:78:9c:6b:01:7a:4b:e1:64:
4d:aa:54:be:96:ac:28:21:d1:e6:b3:56:34:ba:65:ac:9d:bb:
55:93:f5:8b:1f:54:91:f1:a2:01:e1:a2:73:db:e8:2d:16:73:
0f:e0:a2:40:e0:dd:ec:9a:23:bb:a2:07:20:5e:7f:3a:c3:67:
39:69:0d:1a:5e:58:3e:7f:82:81:7a:85:49:79:0b:78:46:e8:
11:41:ce:78:c7:74:e1:c9:38:53:22:78:a1:3e:0e:bc:c1:d9:
f7:1a:ba:bd:80:2d:f2:5a:eb:4c:d8:32:e5:95:e0:8a:86:ec:
00:97:b6:2d:9a:4c:ab:f4:9b:e8:e2:b5:66:95:e7:56:52:47:
e4:e6:57:be:87:bd:fb:61:ab:84:4e:7a:e4:73:e9:a2:88:24:
a5:7b:0d:1e:5d:18:c6:4f:7e:a8:eb:eb:d1:79:07:83:08:37:
9f:d4:c7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:58 2025 by rpki-client