Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: WguKYdqUKqoEFILM4V8MC4B7cIrlJ2fWDPe32zcDg3M=
Subject key identifier: 36:C6:57:C9:F9:81:99:BD:9F:1B:34:5F:A1:96:C1:40:B5:D8:6B:2C
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 01984AAF04F39A2FBDDEB3FE89CC10B12091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 02EB
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: uHgHqw8og8Se70BkPjEb5GzRGagH7nASLE6MX9AoHyY=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:04:f3:9a:2f:bd:de:b3:fe:89:cc:10:b1:20:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=36c657c9f98199bd9f1b345fa196c140b5d86b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:61:07:8d:60:ca:69:fd:51:14:35:d9:39:c2:
c7:35:dd:6f:66:22:26:9a:70:51:f2:b9:94:a2:e3:
f8:dc:6f:09:70:d7:4f:b9:8d:2e:7d:95:a5:02:40:
20:39:b5:59:fc:a7:24:b4:f1:b4:65:d0:dc:75:ee:
70:2b:fb:23:aa:96:12:54:9a:e2:65:89:4e:70:23:
ce:22:3a:46:14:c0:64:b1:f2:2f:1b:f2:33:4e:f4:
4c:a2:ad:1d:56:fb:11:10:e2:4d:aa:d7:f9:3f:f1:
b5:26:ef:54:cc:0b:38:7b:2a:57:12:a5:ef:ff:63:
45:6b:e3:ac:cf:c6:cb:40:8c:2b:69:ea:44:6b:c6:
87:ed:fc:73:61:da:38:5b:2c:58:d8:fa:4f:c6:07:
83:5d:18:de:4f:ce:83:37:b1:5b:f5:66:8f:dc:a0:
90:a4:1b:8b:a5:0b:3e:9d:e3:74:cc:d3:04:fd:67:
c6:68:9f:c4:da:07:2a:8d:c4:6e:aa:de:de:6e:39:
33:6c:68:6f:5e:6c:e9:12:81:3c:24:e1:c0:1e:9f:
f6:5e:12:89:55:31:86:22:26:40:98:b9:30:44:25:
09:61:3b:2c:1a:b6:ce:f3:b0:bc:50:16:01:d3:7f:
0f:dd:ce:12:d9:fb:e4:62:63:8c:2b:e3:db:83:36:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:57:C9:F9:81:99:BD:9F:1B:34:5F:A1:96:C1:40:B5:D8:6B:2C
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:46:bb:a4:1f:f0:ee:00:c3:15:10:72:92:3c:07:dd:f3:36:
29:78:be:3c:5e:f7:50:cb:98:fc:0b:e5:75:d4:b3:db:ba:3a:
0d:46:2a:6e:94:78:f7:ce:bf:09:99:a8:46:2d:07:82:89:02:
1a:8d:25:04:f5:84:87:e0:18:2f:ec:60:0d:60:9a:4d:6e:6f:
56:4c:fe:bb:4c:f9:29:91:c9:16:0f:57:2d:b8:1b:4f:eb:ba:
f4:13:30:d2:8d:66:f2:32:6b:42:68:8c:23:b0:2f:a9:6a:90:
52:50:08:d2:6a:f1:07:ab:6b:f7:f7:99:cc:64:29:49:d6:56:
40:13:4b:b0:2c:b1:50:ee:db:90:8e:d9:4b:e4:c2:73:46:5d:
c5:6b:5e:44:be:74:51:01:64:76:11:71:72:3b:61:eb:80:5a:
bd:dc:0d:db:03:89:92:22:63:00:64:c1:94:fb:5c:6e:a6:ac:
0a:f8:d0:6a:95:cb:33:e3:bd:0a:ec:3a:d7:98:a7:ac:21:bb:
a8:8b:5a:ed:c7:e8:32:3a:89:10:89:c8:7c:0d:8b:7a:0a:b5:
8d:06:5b:2b:a4:39:cd:42:fb:8e:1e:7c:d1:a1:87:1e:59:d4:
70:ee:61:3f:d6:5e:6c:e5:9a:be:f9:d7:c8:b7:f3:4c:a7:17:
58:29:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:15 2025 by rpki-client