Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: UOtHeMHgwOzWsIFoJk7p0I6nctK7LKzDQFuKYi3PpZY=
Subject key identifier: 47:3C:38:EA:FC:3C:4E:DE:27:F9:9A:2F:A8:39:53:3B:97:62:D8:EB
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 01984AAF3DC318B848DB80AA46F4D27087B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 07:00:55 +0000
Manifest this update: Sun 27 Jul 2025 07:00:55 +0000
Manifest next update: Mon 28 Jul 2025 07:00:55 +0000
Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: YFeO6vKbyzFSvfd2ljaolL8PUoe5TzBiNINuEJpyCso=)
2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:3d:c3:18:b8:48:db:80:aa:46:f4:d2:70:87:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Jul 27 07:00:55 2025 GMT
Not After : Jul 28 07:00:55 2025 GMT
Subject: CN=473c38eafc3c4ede27f99a2fa839533b9762d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:43:d9:8a:fc:1c:86:a3:50:00:f0:20:d2:
6a:7d:8e:77:e9:fa:4c:38:63:52:e6:53:77:4f:30:
c1:60:74:1c:79:ea:e7:47:75:73:b2:b0:e2:c3:04:
db:3c:2d:be:c7:c7:cb:e4:8c:11:c0:27:a9:6f:50:
a3:ba:ec:74:91:a9:e4:dd:f2:4a:79:0c:24:42:16:
9c:5d:2d:2d:89:f7:ee:d6:d3:7b:4c:10:96:59:61:
90:bc:a4:ba:8f:13:ab:3f:87:28:0f:18:a1:51:9b:
47:ed:80:7d:c3:2a:02:c7:d7:db:1a:12:80:d6:ff:
da:c5:16:87:bc:0a:b7:76:ad:3b:8a:8d:9d:3b:72:
c9:fe:e5:fd:09:c3:02:94:78:27:0d:8e:e7:b8:17:
b6:d7:cf:b8:99:5a:8e:4f:0c:f1:62:0b:a4:bd:a5:
ca:ed:92:13:17:f6:fd:3e:7c:d2:1d:de:1e:65:31:
04:b3:dd:36:58:fa:50:00:43:25:a6:2c:3c:93:c7:
f2:97:cf:fc:49:49:0a:f0:80:26:84:09:27:db:be:
94:03:01:4d:7b:65:70:c4:e6:98:af:7e:2d:38:bc:
db:8c:c1:cd:41:a4:97:d5:39:c1:db:cd:bc:c3:2b:
be:88:a3:eb:b9:13:34:84:e3:ce:45:a1:98:ff:ae:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:38:EA:FC:3C:4E:DE:27:F9:9A:2F:A8:39:53:3B:97:62:D8:EB
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:51:2f:d2:39:51:3a:67:66:45:68:9c:1d:4c:1b:cb:8c:
73:2b:d5:bd:63:aa:10:71:86:31:ed:f3:50:a7:4f:64:3c:f3:
8e:28:13:72:52:ed:10:26:fb:75:16:50:3e:62:63:bd:5f:2d:
c2:d5:e9:18:2b:f3:23:07:2b:c4:f3:e7:2f:6e:c4:f5:ec:b0:
a5:c1:5a:9c:4a:e2:69:ea:db:e1:67:47:4d:4a:bb:7b:fa:db:
68:f5:a4:a0:7c:11:bf:71:a1:8a:07:fa:eb:ad:ec:99:5a:d8:
05:07:f9:72:90:f0:09:81:c7:56:c0:40:d2:67:36:b2:5b:41:
46:ae:78:e0:28:e1:23:6b:34:b2:cd:e6:75:19:12:bb:e2:42:
69:80:bc:67:de:d6:86:5a:74:7d:a7:18:35:ea:66:6b:e7:0b:
0e:50:28:fa:1f:9e:47:f1:ef:c4:07:77:0f:18:15:54:b6:6d:
59:dd:18:59:cd:eb:d4:cf:b2:a3:e9:df:0c:f0:f5:d9:6e:1d:
8d:20:4a:64:cf:04:bb:9c:ce:df:d0:b7:a9:13:6f:83:21:65:
39:b1:a2:40:c9:37:4f:e3:16:d4:5b:9b:bc:9a:2e:d3:cc:f6:
52:59:36:f6:c0:b0:4e:53:e4:c6:94:47:b0:64:1d:82:e9:17:
63:45:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:14:03 2025 by rpki-client