Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: P8OmDBBhAE2mectwPfnpMwYyNuKc2aclRXWP6mjIw2s=
Subject key identifier: 56:11:49:BE:10:8E:2A:BB:9F:6E:A3:ED:A2:F2:50:44:08:4E:14:5D
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 01984664B9EFCB22453B4F56389E167C27AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 0E02
Signing time: Sat 26 Jul 2025 11:01:02 +0000
Manifest this update: Sat 26 Jul 2025 11:01:02 +0000
Manifest next update: Sun 27 Jul 2025 11:01:02 +0000
Files and hashes: 1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: idABnGL0ihilnZ0i0mwYGWn6azyljVKDaWewMKAz/ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:b9:ef:cb:22:45:3b:4f:56:38:9e:16:7c:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Jul 26 11:01:02 2025 GMT
Not After : Jul 27 11:01:02 2025 GMT
Subject: CN=561149be108e2abb9f6ea3eda2f25044084e145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:b6:67:04:7d:80:44:b2:fd:0a:dd:31:6e:
df:b4:00:b4:fc:7f:9a:88:0d:b6:cd:2b:c2:78:e9:
c0:5e:74:18:c2:f6:bd:dc:d2:8d:07:3a:0e:25:07:
3f:a7:d7:be:85:85:d9:2c:73:53:a1:b1:12:97:6c:
c2:6f:fc:b6:69:e6:33:6f:dc:96:f2:4b:30:49:8e:
cc:f7:6d:c9:d6:bb:0f:9a:37:1c:70:ea:44:33:29:
ad:ea:f5:97:15:80:1c:06:07:6c:8e:c8:bf:1d:f7:
b6:10:12:8d:39:9e:7b:77:3d:30:ed:fc:88:06:19:
6a:20:ee:54:55:5f:d7:40:8b:9f:94:f8:6b:1c:a4:
c9:b9:dc:a8:95:57:46:33:51:09:a2:02:44:c6:41:
4f:97:5c:cb:c1:61:2e:d5:b1:35:e5:61:a0:af:c5:
15:f4:9e:b3:ea:5a:04:81:78:de:60:d2:ef:5c:7f:
dc:01:89:d1:50:07:3c:c9:a8:09:bd:bd:68:57:e0:
51:29:8e:08:4c:71:3f:0a:51:69:a8:23:7f:59:85:
ba:c1:58:e6:23:59:8c:08:40:9d:95:dc:18:85:41:
1e:62:7c:c6:b0:61:35:d1:9d:b4:c8:dc:2d:0a:56:
ae:d1:3f:b6:2d:67:67:a5:bb:62:41:bc:8c:2d:51:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:49:BE:10:8E:2A:BB:9F:6E:A3:ED:A2:F2:50:44:08:4E:14:5D
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:ff:c8:08:c2:aa:e6:d0:19:0c:fb:7d:52:1c:fd:31:88:
1c:e1:76:54:f1:02:cb:c0:da:9a:40:d0:fc:e2:7d:23:9d:1f:
35:6a:8d:2c:fd:8d:1c:22:bb:fd:74:b7:73:01:02:35:04:ef:
47:ac:32:c1:21:75:99:34:57:8e:b8:ad:71:55:22:39:4f:08:
ed:d0:1a:b5:36:41:fd:ac:b2:02:f1:ce:02:b1:b7:c7:f3:21:
71:1f:6c:40:e7:06:24:f1:cd:96:26:bc:8e:17:7b:d0:1c:db:
a4:74:98:8e:e7:02:d3:bf:b6:67:54:f7:ae:ed:c9:d9:6b:83:
37:f8:ce:fd:f3:b1:a6:a7:14:e9:50:b2:b4:09:5f:96:3d:9a:
80:6a:b6:d1:4c:f6:98:97:68:2d:a8:0e:63:9a:92:fd:9b:16:
43:89:99:5b:66:44:a4:0c:0d:98:10:ba:e2:b8:3e:cd:97:33:
0b:bb:f0:14:05:b9:13:6a:9f:8b:1e:8a:68:ce:5a:3a:9f:79:
92:d6:02:65:b3:b4:9e:ee:cb:68:04:92:a6:b5:29:d6:fc:5f:
5d:67:c8:a9:dc:e4:b9:04:77:50:db:db:35:b8:5c:73:f0:94:
a4:95:d5:63:d0:78:95:56:15:e1:10:0a:ed:c6:c4:48:b6:8c:
8b:20:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:07:37 2025 by rpki-client