
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: X1y2KzlqVC1+rMN2cF+zwEUSQlikr7rvs438A+hLI6k=
Subject key identifier: 34:0F:E4:99:3F:10:8C:B9:CD:F9:2F:D6:4C:00:15:3D:A1:D1:8A:9F
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 019836BA5A6FE0304C3A8DAAB16A2F22375D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0B54
Signing time: Wed 23 Jul 2025 10:00:39 +0000
Manifest this update: Wed 23 Jul 2025 10:00:39 +0000
Manifest next update: Thu 24 Jul 2025 10:00:39 +0000
Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: fqH8eAamAwPUsnlCxnxqu7LTnab0IyS5+I9shpoHnBU=)
2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=)
3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=)
4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:ba:5a:6f:e0:30:4c:3a:8d:aa:b1:6a:2f:22:37:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Jul 23 10:00:39 2025 GMT
Not After : Jul 24 10:00:39 2025 GMT
Subject: CN=340fe4993f108cb9cdf92fd64c00153da1d18a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:42:b4:53:61:80:3b:88:20:27:a7:b1:ef:
44:03:40:bb:8c:5b:51:14:0f:72:88:b2:cf:df:ea:
46:3f:7b:cd:01:b3:f4:59:8f:51:5e:db:6b:dd:f2:
57:a2:74:03:ad:1b:d7:1e:db:2e:94:c4:6b:ad:69:
41:38:85:19:05:c8:d3:8c:c8:b5:86:7f:17:84:53:
c0:41:48:c7:fd:2e:dd:e8:4f:13:03:7d:7a:c7:7f:
d7:2c:38:d9:8e:67:3f:0d:3f:17:c7:cc:52:76:dd:
29:c7:01:0e:e7:c8:70:bd:f3:80:3c:58:c6:ee:49:
3b:6f:0a:45:9c:d9:bb:c9:f5:d1:5b:49:90:8b:ab:
61:ff:0f:39:dd:e4:74:7c:aa:02:55:ce:07:85:65:
2d:d8:cc:c2:d5:de:91:94:84:f2:8f:64:cd:f3:d9:
a4:06:25:fb:f3:83:db:0c:aa:70:40:e5:e7:6f:db:
4e:fe:51:b1:8a:ac:6e:83:a3:c1:5a:5d:46:b9:a1:
b0:92:80:cd:f1:2e:a9:34:5f:be:e3:82:6a:d1:7d:
0f:40:14:7b:2d:f3:1f:0d:b9:e0:21:d1:03:ef:d1:
c4:42:cb:26:32:25:25:a9:52:b8:36:aa:2a:97:fe:
f8:3f:f7:ba:73:c1:dc:36:79:08:16:2e:16:ba:91:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0F:E4:99:3F:10:8C:B9:CD:F9:2F:D6:4C:00:15:3D:A1:D1:8A:9F
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:86:b3:ad:ae:0f:13:47:7e:34:c8:7f:16:f0:dd:ee:1d:4a:
f9:61:2e:49:62:f7:90:b9:b1:24:dc:0c:83:a6:9d:d9:2d:cb:
4b:46:28:01:6d:bb:b3:f6:00:12:35:9a:44:ee:3d:91:aa:74:
e8:a6:d4:4d:75:fd:90:44:1e:13:ba:b3:7c:81:b8:42:6c:32:
da:7e:7d:f5:ea:73:8f:2d:78:27:74:09:fb:5d:ef:36:e3:89:
f2:d8:2f:04:e9:a7:dc:58:91:0c:9e:b6:3d:3c:ee:11:55:18:
7f:fe:80:f3:40:17:7c:56:b6:d8:bd:a7:b7:99:84:1e:65:a9:
c0:9e:11:a0:4a:7d:fb:8e:e1:68:1d:33:b9:03:5f:30:0c:8a:
47:dd:94:c2:ee:4d:67:a3:18:aa:0e:e9:ec:78:c3:c3:d7:c6:
c4:3f:aa:7e:c2:20:84:18:65:99:4b:db:a0:eb:a2:af:cb:25:
9b:db:19:8f:a0:10:6b:23:13:f5:26:e2:b4:76:10:31:87:0b:
6b:c1:d7:aa:12:49:b8:74:26:c6:c5:80:b1:29:81:cb:c6:40:
48:ac:59:a2:13:a5:a4:92:a7:c9:4c:13:c8:c5:f4:b8:86:6b:
48:8d:4f:1b:3d:7b:e3:83:a2:33:79:1f:4e:dc:4b:5c:e5:8e:
7e:bf:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:35:50 2025 by rpki-client