Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: YnFUeYo074wEG7sEYPQyOLtkwvtsUKshzSE6OM8MwoM=
Subject key identifier: 99:65:30:DB:29:C3:19:68:DC:74:F6:41:7C:DD:4A:35:A2:50:7F:FC
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019827EC6A83AB7D909FAB1D5BA190569BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 09EB
Signing time: Sun 20 Jul 2025 13:01:01 +0000
Manifest this update: Sun 20 Jul 2025 13:01:01 +0000
Manifest next update: Mon 21 Jul 2025 13:01:01 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: kUtNCe56Q++c00hORSIsNtYiov1dUApI334Ub+dxfvM=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:6a:83:ab:7d:90:9f:ab:1d:5b:a1:90:56:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jul 20 13:01:01 2025 GMT
Not After : Jul 21 13:01:01 2025 GMT
Subject: CN=996530db29c31968dc74f6417cdd4a35a2507ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:58:a7:ee:ab:3e:0b:09:36:94:ac:28:dc:79:
83:55:6d:46:36:ec:1b:44:30:b3:51:98:a8:7b:81:
b8:0a:03:80:3a:cc:64:32:6c:73:60:67:a5:e4:32:
84:ff:2f:9d:6a:b6:94:f6:be:f3:7c:ef:a4:3a:61:
69:03:2d:dd:07:c6:b4:05:7f:77:a2:7a:7a:b4:68:
3c:37:9a:25:d4:ae:61:38:66:a5:53:0b:a3:42:2d:
68:10:a4:cd:0a:4a:ba:5c:87:52:a1:4e:6d:26:63:
58:fb:11:e3:20:99:66:0f:2d:8f:ce:b7:e7:b0:3a:
45:97:01:7e:8b:de:31:d9:c1:7f:a3:a0:04:0e:42:
57:0e:38:c3:24:f8:b7:d8:46:25:ce:cc:4e:32:17:
c6:cb:b3:a0:99:40:3f:f0:eb:b0:db:6a:74:1b:79:
0b:e4:b4:f5:58:36:dd:63:0a:b4:76:cc:23:1b:66:
09:c6:e8:16:5d:22:80:4f:6e:f6:1b:33:1b:da:fc:
7b:eb:24:e3:19:8c:51:95:ab:83:d5:75:6b:25:04:
b2:e6:62:bb:98:ad:0d:c2:60:d5:c7:86:1b:01:32:
2e:cf:d8:9f:1a:5f:34:27:26:8f:4f:42:75:12:19:
91:c7:ec:d7:1d:e9:76:18:77:2f:fd:60:2b:fc:e8:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:65:30:DB:29:C3:19:68:DC:74:F6:41:7C:DD:4A:35:A2:50:7F:FC
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:19:89:d5:75:81:1e:41:ae:1f:6f:08:43:59:30:14:55:a7:
94:80:b6:c2:4d:66:fe:8a:fb:0c:2c:a0:7a:2d:b6:27:1c:57:
29:60:8b:67:76:0c:62:84:f1:62:a5:f9:ba:78:e4:ae:1f:3d:
13:b8:ca:a7:ac:92:fc:d3:90:8b:c6:b6:41:0b:ee:96:0b:08:
b6:ec:5a:54:50:80:40:fa:70:35:1a:a9:66:ba:dd:d7:fa:76:
1c:15:8a:d8:5c:3c:16:13:92:86:21:01:57:a8:35:59:0c:82:
57:7b:0c:ac:bb:1d:84:61:83:a1:29:b8:54:b4:62:48:03:6c:
d3:60:93:b1:b3:70:8a:f1:f1:01:f5:c8:a5:00:fb:14:fc:df:
21:f9:3a:8c:00:be:cf:54:c7:da:3d:5f:b9:8b:13:e5:ad:2f:
d9:3a:19:5f:bd:78:d3:3b:5d:f3:5c:ac:87:96:9e:94:e0:91:
88:da:4c:12:1f:1f:c8:13:a8:56:43:a2:67:5e:7e:23:97:f5:
84:10:92:9f:cb:87:d8:4a:2d:48:19:31:68:7e:b0:fa:88:29:
9b:e9:e4:18:31:bb:26:bd:bc:69:01:45:2d:9d:9a:06:db:7c:
50:07:df:7b:c5:92:b8:6e:b1:e5:c6:e3:41:61:88:7b:ae:6b:
28:8c:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:24:11 2025 by rpki-client