Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier: lefLv3qMQefX9EKCKtHG50qeJxd0Ubpwer0fi3SAVpc=
Subject key identifier: C3:3B:69:1E:DF:10:1D:32:87:50:61:CE:4D:1B:C1:0F:79:EC:8B:E0
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial: 01984A77ACF668C97A204D2305E277033894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number: 0F05
Signing time: Sun 27 Jul 2025 06:00:13 +0000
Manifest this update: Sun 27 Jul 2025 06:00:13 +0000
Manifest next update: Mon 28 Jul 2025 06:00:13 +0000
Files and hashes: 1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=)
2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: 1dFDgg5qOGeNp4x4kcHvYy4w9McSIftlykz1FMeB3JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ac:f6:68:c9:7a:20:4d:23:05:e2:77:03:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Validity
Not Before: Jul 27 06:00:13 2025 GMT
Not After : Jul 28 06:00:13 2025 GMT
Subject: CN=c33b691edf101d32875061ce4d1bc10f79ec8be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:03:df:a3:9d:2b:b3:53:ca:76:88:c9:ef:
66:aa:64:b0:33:48:05:1f:23:8d:51:46:75:53:05:
aa:1f:79:49:cf:1e:98:9f:9c:ea:fd:e8:88:28:f2:
9c:97:74:4e:81:ff:4b:a6:86:8d:8d:fa:1d:e8:1b:
8e:c9:35:fc:fe:a0:2b:aa:b9:32:f5:40:f1:a3:07:
28:4c:bc:fb:f3:3e:37:d6:5b:5f:96:31:cd:36:70:
0f:1d:59:73:5d:e1:59:89:62:5c:53:3d:1e:73:5a:
92:f4:4f:a4:38:48:5d:0b:50:3e:a1:68:e8:11:27:
a0:b0:c1:30:07:0d:8a:e2:a8:a4:d5:65:87:54:69:
6e:05:5f:b1:9b:4a:2d:c6:52:a2:e3:ab:ce:ea:0d:
bf:62:2b:71:31:c5:03:92:69:b8:45:b0:5d:9a:6d:
2c:6e:ca:1a:db:9e:0c:3f:0f:2a:d6:14:8d:48:06:
0f:e0:14:60:85:4a:20:0d:56:1d:fe:05:23:c2:c5:
c8:7d:9b:07:3d:6a:0a:64:3e:ea:69:10:c3:63:1f:
b7:c1:5e:78:3d:cc:3b:7e:b5:f5:05:72:b4:0f:3f:
ad:21:4e:f0:02:1f:cd:7e:00:a6:e1:a1:c2:60:79:
f4:6f:5f:b6:a7:cc:6a:75:f6:db:66:6e:c3:b9:d7:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:69:1E:DF:10:1D:32:87:50:61:CE:4D:1B:C1:0F:79:EC:8B:E0
X509v3 Authority Key Identifier:
keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:97:85:10:d3:b4:12:23:f8:2d:87:1e:4d:3b:84:c4:53:98:
a2:d9:79:44:c2:64:f1:93:15:10:34:de:92:34:cb:7e:53:4e:
a4:53:8a:36:b7:83:d1:2c:b6:a8:47:47:00:f7:ce:a4:1f:3f:
cb:7b:58:bf:f8:97:ac:a6:69:b6:0b:24:7b:13:ae:f1:35:20:
01:8b:e1:5c:12:42:ef:e5:e3:81:8e:5a:81:5f:09:af:5a:92:
a4:46:5e:47:ce:f0:55:b3:8e:e9:75:7b:bf:33:4c:56:28:6e:
d3:75:0e:29:3d:77:8e:e2:e6:5f:24:aa:4c:f5:6a:fe:98:6f:
f5:d8:ee:0e:93:95:30:8d:46:59:4b:05:86:03:9c:1b:b7:33:
00:b4:8a:0b:64:ef:40:bb:27:c6:89:f1:2d:8b:e6:e9:cc:e1:
d2:2d:c5:93:d2:bc:46:4a:9a:dd:b2:6d:f7:07:c5:e6:27:28:
06:b6:8b:e2:80:f8:5b:11:11:1f:bd:f0:04:77:58:d3:d3:3a:
de:87:9b:96:ba:51:0c:55:d7:59:ff:23:7d:71:4c:55:b0:21:
51:b2:29:18:37:0c:85:9f:f7:73:27:8c:77:38:16:2f:24:e2:
5c:ef:8b:35:f1:3c:ef:35:77:d3:d4:f8:98:9c:aa:0c:f1:f8:
f2:c3:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:36 2025 by rpki-client