Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: kZpFbsxHTWNE0KDky3jLJWO0ZGTZ5xKZPpqnyA9M2uY=
Subject key identifier: F0:0C:BD:D1:E8:FE:64:6F:0E:AE:B9:75:50:8E:1C:EE:7F:4C:A8:23
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 019848895E07075AD8BBECCD2B2B65A2C282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 0319
Signing time: Sat 26 Jul 2025 21:00:18 +0000
Manifest this update: Sat 26 Jul 2025 21:00:18 +0000
Manifest next update: Sun 27 Jul 2025 21:00:18 +0000
Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: 8b2UDn4enuoCJMjjVwBTMq58cNVwtlLC7/2qMHcHl/A=)
3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:5e:07:07:5a:d8:bb:ec:cd:2b:2b:65:a2:c2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Jul 26 21:00:18 2025 GMT
Not After : Jul 27 21:00:18 2025 GMT
Subject: CN=f00cbdd1e8fe646f0eaeb975508e1cee7f4ca823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:2e:33:be:0d:54:40:3e:35:31:f1:35:07:
39:4e:bd:d3:22:92:ea:2e:e0:b9:7d:b3:02:eb:f4:
58:27:77:58:23:fd:7a:5d:94:83:e2:14:d7:af:b6:
44:99:d1:b0:ff:c8:b2:ea:23:7c:23:78:ec:c8:b0:
55:dd:8c:e2:4b:8a:25:fc:af:e5:13:b9:d5:58:a6:
8c:ec:ee:74:34:33:ef:b7:b6:10:00:27:81:40:65:
27:c8:81:79:a5:13:d5:7e:b9:31:a1:dd:5e:62:cb:
3b:7b:a8:79:1d:c4:f4:00:30:4d:41:46:71:00:13:
f5:64:59:2e:28:18:37:00:3f:e6:37:63:8e:be:67:
d8:17:72:5a:1d:98:86:49:8d:a9:60:79:91:b3:9c:
40:50:e4:8d:25:86:40:e3:39:b5:e2:40:a2:e4:12:
e3:dc:cf:71:6e:e0:ce:a0:26:96:03:c4:99:45:a3:
a3:be:c4:6d:69:d1:49:c5:8a:bd:02:c0:ae:5c:f4:
e3:a3:db:6d:91:c8:45:e6:4d:b6:48:57:a6:eb:98:
fc:c2:aa:fb:ba:24:3c:db:bc:81:d4:7f:db:ea:cb:
5d:1b:76:f0:89:bf:63:ee:3d:ba:d0:ba:25:ce:93:
17:33:21:27:b8:f0:4e:c8:38:d1:78:9f:62:35:70:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:BD:D1:E8:FE:64:6F:0E:AE:B9:75:50:8E:1C:EE:7F:4C:A8:23
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:13:31:59:c5:d2:28:0e:3c:6d:2f:16:aa:cf:ed:3b:a0:
cb:c3:aa:b2:21:08:47:5c:dc:bf:85:e7:b4:da:12:57:97:89:
0d:b0:c1:84:c8:2d:02:1b:93:48:28:6f:45:31:62:46:3b:a8:
e9:c1:3c:75:ec:51:c7:3c:4c:7f:63:18:59:de:f3:68:c1:1b:
97:a3:68:eb:41:a4:a2:07:ac:4e:24:53:cc:8b:29:4d:fc:5d:
59:65:0a:fd:42:d9:ad:ab:3f:49:f3:e7:17:38:09:89:83:39:
82:3b:87:67:3f:88:ef:52:ad:44:9f:18:cd:d1:85:0b:46:1c:
a2:33:24:c2:46:e9:1b:c1:be:88:87:8a:3d:71:1e:aa:0c:b0:
f9:8d:17:23:23:86:25:20:32:60:18:ff:30:24:15:ec:f7:09:
c3:f9:7b:16:77:d7:a5:a9:da:4b:54:4c:26:ad:b8:51:55:97:
e2:72:d1:e9:68:e3:4c:7a:8b:12:f7:f3:80:21:a4:0f:85:ee:
76:d1:e0:66:f7:30:13:86:b6:d5:4d:d3:ce:28:8f:b0:7a:8e:
97:0a:d7:2b:13:0d:d1:a5:5f:1d:f9:92:fe:06:63:8c:66:f0:
0f:52:5d:5d:1e:63:2f:5e:17:40:1f:d8:08:ea:3d:62:d8:9c:
a2:ce:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:50 2025 by rpki-client