Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: Zy5Ey6yVRDrlBimrcCLZBi+VwNppFiadaRNXxZBLrzY=
Subject key identifier: 7F:AE:B6:F9:AE:7F:DD:14:42:73:FB:0A:6D:A3:D8:7B:48:09:91:53
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 01983D6116C96C221CB9BEF8EAEAF161742B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0BD1
Signing time: Thu 24 Jul 2025 17:00:29 +0000
Manifest this update: Thu 24 Jul 2025 17:00:29 +0000
Manifest next update: Fri 25 Jul 2025 17:00:29 +0000
Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: PzHIZ++ud2rkOUBkJ/aQi6imz8tEuMoTWb1EvokHc1w=)
3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:61:16:c9:6c:22:1c:b9:be:f8:ea:ea:f1:61:74:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jul 24 17:00:29 2025 GMT
Not After : Jul 25 17:00:29 2025 GMT
Subject: CN=7faeb6f9ae7fdd144273fb0a6da3d87b48099153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:1d:ae:9f:fc:e9:f2:3d:6d:44:01:8e:fd:
76:1d:61:29:e4:4a:17:e3:21:ae:8e:02:77:22:86:
03:f3:de:1c:2d:6b:74:a3:63:84:af:7c:c9:f0:fc:
cf:f7:0c:f4:71:60:53:ba:cf:d6:27:ec:4b:d3:f1:
e1:0b:e3:81:fd:db:93:20:c8:81:11:40:74:ad:69:
d3:f6:80:ae:60:54:73:f6:4c:ac:10:32:a5:01:75:
76:85:88:30:37:50:5e:12:3a:ca:eb:ee:cc:cf:d7:
66:ba:63:96:79:26:90:81:38:b2:11:05:c8:32:5a:
ec:8d:1e:c1:4e:e7:60:22:d7:81:1e:6e:ca:b4:69:
3b:e5:8d:6d:96:1c:be:38:2e:5b:04:59:41:86:18:
3c:68:52:47:8f:06:56:5f:61:96:23:a1:34:a9:09:
f3:29:23:b5:db:af:57:10:9c:2e:63:1d:c9:ff:48:
da:5f:02:c4:33:40:69:de:08:fa:7c:de:37:c6:7a:
f9:af:c8:71:d5:01:6f:4b:ef:35:6a:11:e1:32:73:
92:c9:ec:84:be:f6:5c:b1:d5:b4:81:b6:e8:6b:d2:
3c:c7:99:2c:33:95:b0:e5:34:c5:18:70:ee:f7:07:
4b:98:6e:05:e5:2a:3b:9e:52:9d:26:8e:cd:69:67:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:B6:F9:AE:7F:DD:14:42:73:FB:0A:6D:A3:D8:7B:48:09:91:53
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ed:af:35:93:4f:73:14:f4:7f:b4:8a:53:d3:77:11:75:f0:
55:68:db:52:ab:16:7b:68:83:85:af:c9:9d:82:80:06:f9:65:
0d:49:bc:38:ba:1a:18:cc:5f:e0:fb:a9:59:7a:00:58:52:69:
c1:a0:eb:8a:d9:b5:84:98:c4:01:e2:48:bb:1a:f7:eb:0b:98:
9b:ce:84:ca:e7:f9:4e:aa:bd:e8:f7:9f:d8:2c:de:0a:7b:26:
32:72:f5:9b:00:c2:29:1a:56:37:7b:7e:f6:f6:28:0f:32:e2:
8a:c0:a0:1e:ab:03:5c:64:2e:c2:d5:35:da:45:c7:2f:a1:6a:
58:3c:36:46:a8:5f:e0:bb:39:b5:d0:fa:37:52:3c:4f:ed:d4:
eb:74:7e:d1:2c:55:1d:db:cd:17:91:ad:5f:1c:46:ab:6b:29:
e8:fa:65:8b:c2:3f:0a:d2:d9:6e:11:33:17:ec:00:5d:dd:2f:
f7:b1:b2:02:98:f3:b4:95:80:b8:68:6d:3b:cf:f3:dd:66:52:
e0:07:84:d2:f6:2e:6a:af:12:ec:da:6a:c3:25:61:f3:e1:70:
cb:98:6b:41:3f:2d:d5:45:13:7c:6b:42:88:60:30:8c:db:60:
ff:59:0b:64:0c:90:b5:20:87:85:e6:f1:46:65:ad:93:05:f0:
4f:0f:78:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:09:16 2025 by rpki-client