Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: qVELWNX06HoPt9iZokjGM1MOPJfCdsP23ButEqy2bX0=
Subject key identifier: D9:CC:C3:22:47:6B:D9:23:B9:64:AD:A4:F5:5C:E8:1B:68:44:55:3B
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 01984A0A3561DEC0A1A83D7044C7932F904A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 14F2
Signing time: Sun 27 Jul 2025 04:00:39 +0000
Manifest this update: Sun 27 Jul 2025 04:00:39 +0000
Manifest next update: Mon 28 Jul 2025 04:00:39 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: 4XPJHhC9/gigG0WiPxtENoyMbiXaWOcGM1kZvx7kC0s=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:35:61:de:c0:a1:a8:3d:70:44:c7:93:2f:90:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Jul 27 04:00:39 2025 GMT
Not After : Jul 28 04:00:39 2025 GMT
Subject: CN=d9ccc322476bd923b964ada4f55ce81b6844553b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:09:59:9d:a6:fd:48:68:18:ad:a6:57:91:
e6:8f:4a:53:62:80:7f:9c:b9:8d:35:79:35:ae:06:
8d:90:99:0b:14:b2:53:f2:0c:42:1c:69:54:86:76:
92:d2:1b:9b:1a:29:ab:4a:11:06:90:f4:14:8c:ee:
d8:c8:51:16:c7:d9:94:a0:42:29:c3:ce:fb:e7:37:
79:c2:0a:bf:5c:93:46:ca:75:6b:dd:5a:0a:1a:a3:
85:af:f9:97:c4:f3:9e:e7:02:d3:a5:f7:d8:f4:de:
26:1c:2c:16:39:d9:20:5b:b7:13:c7:17:0b:c7:b3:
57:84:80:17:fa:1d:d4:63:43:ac:38:ba:34:26:7f:
d7:e5:2b:21:8c:47:e9:e2:a7:aa:43:fe:23:3a:f9:
df:72:92:b5:50:32:eb:74:96:f3:75:61:e7:ba:88:
17:89:31:59:3e:e7:be:c6:06:ca:40:98:45:fd:86:
ab:34:e5:a6:bb:86:7d:d6:49:9e:de:f1:4d:f9:96:
52:ec:e6:29:c7:d6:ff:5a:b6:53:93:86:5b:4c:ce:
73:e1:ae:5e:8e:c4:44:e4:7f:a4:5d:69:d1:43:5b:
a5:1f:4d:30:cc:09:03:37:63:cd:98:8e:0a:4e:6e:
05:fc:1f:bf:a8:24:6b:5e:7d:e0:d0:be:87:db:b3:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CC:C3:22:47:6B:D9:23:B9:64:AD:A4:F5:5C:E8:1B:68:44:55:3B
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:74:69:6e:9e:e5:aa:d6:fe:64:b1:56:ee:ca:ac:4e:b6:82:
b2:95:09:0b:04:98:cf:51:da:6f:09:49:eb:a9:11:33:b4:9a:
de:d1:5e:4d:cb:ce:5d:94:a8:0f:60:a7:71:44:c9:b8:f9:2d:
29:be:1c:ec:9b:81:57:27:19:48:f3:38:5e:aa:5e:c6:02:7d:
8c:1e:3a:64:0d:2f:76:0f:96:d1:72:f4:40:5d:76:fb:bd:3d:
ee:0e:3a:b8:cb:ce:64:bb:31:ca:65:c5:a3:e6:14:ba:4c:cb:
ba:77:81:1b:00:84:b3:3f:a9:7c:d3:6f:6b:71:89:e6:e4:7a:
0d:2b:f6:3a:0e:6d:2c:a0:79:4e:ed:b9:0c:98:85:14:57:4f:
40:be:98:16:f8:ef:1b:51:bb:26:bf:88:10:69:76:31:96:0e:
84:f5:d5:f1:e0:c9:a7:b1:45:46:22:bc:5f:69:01:85:37:7c:
84:c4:da:41:80:18:01:df:62:2c:2e:ee:df:12:6b:6f:0a:90:
7a:20:7a:dc:30:1a:51:89:dd:0d:a2:0a:cc:e2:c1:9f:0f:dc:
57:e1:fb:67:d1:2a:b2:ad:a6:6a:11:fc:3c:a0:3c:ce:92:e4:
2c:5a:c2:9e:0c:4d:46:1a:4d:cb:18:0c:b2:5a:56:86:c3:fd:
27:4d:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:43:39 2025 by rpki-client