Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: Pb67/3d1HggfQ/oxIQUJzLcB8oSZByhJ2wrn3p02Zu0=
Subject key identifier: 39:14:EA:71:A9:3E:82:63:7E:0B:9C:55:8D:2F:B2:6D:6B:8C:26:40
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 019846D1E7BEED0EBFF848282054E6D2DCBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 07AD
Signing time: Sat 26 Jul 2025 13:00:18 +0000
Manifest this update: Sat 26 Jul 2025 13:00:18 +0000
Manifest next update: Sun 27 Jul 2025 13:00:18 +0000
Files and hashes: 1: KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa (hash: AFMADJ+EdA++truR6oHaQkzeXGaM562uJumCeUqnVzo=)
2: MHGZA5Y3PVpWBImn85tARMZRftQ.roa (hash: bnJhZwRrO7KGALVUCy1om+i/htb3dvM6lJ1uAmGl2G8=)
3: O1UMqFY4UYla6Wia0-cx5UTbNYo.roa (hash: yk9XmbWdQVbHd1Fk+ePRsax442yqoQX1eANsND8ceoU=)
4: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: F9xTwXi74/lCuKfRyQgHg8j5e9frFUn5P5wRtTAPIC0=)
5: TNSMUQvHGS8vGJs7QmyW0_jz86Y.roa (hash: qI6N5+Q6nkQDs5kBZ+Upq2gzqwGu3xE2kqSgmDsGATI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:e7:be:ed:0e:bf:f8:48:28:20:54:e6:d2:dc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Jul 26 13:00:18 2025 GMT
Not After : Jul 27 13:00:18 2025 GMT
Subject: CN=3914ea71a93e82637e0b9c558d2fb26d6b8c2640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:83:c0:15:f4:fd:6a:53:f2:46:55:99:dd:
0b:ca:ca:39:f0:99:b4:49:49:25:78:c7:b3:54:0f:
57:ed:ea:16:94:4e:aa:c9:45:62:ad:4e:2b:31:8f:
78:10:48:c7:9e:ba:c5:5e:7e:1f:58:b8:90:69:37:
28:bf:51:05:5d:d1:4d:14:9f:6e:0f:29:15:3e:7f:
18:8f:92:1c:0d:21:ef:81:14:7f:5d:9e:11:8f:5b:
9e:49:2e:a0:d9:10:0e:e0:ba:d5:60:71:aa:f8:61:
2c:d4:bd:15:ec:33:8b:e3:44:5c:f4:17:ca:08:be:
f4:da:97:34:a7:06:1e:79:6d:46:83:d4:fc:e8:23:
f0:7a:50:07:4e:ed:33:ac:71:d1:0d:6f:61:c1:91:
8a:b8:fd:c7:33:8c:87:75:75:e8:88:b5:3b:49:67:
72:a4:81:51:cb:36:47:81:bc:e0:57:40:3b:4d:da:
1b:3d:6a:ef:d5:b2:fb:24:ec:43:8f:45:af:aa:b0:
5a:ec:a7:5b:18:56:2e:d4:c1:df:96:95:2e:9a:ca:
fe:20:a9:fb:ad:a0:1d:71:92:79:b0:ca:1c:81:4f:
8a:0d:99:60:b3:bc:df:b5:04:1c:ef:4e:ab:52:cd:
3e:cd:2b:17:06:45:c3:41:5b:08:7c:14:fa:9d:28:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:EA:71:A9:3E:82:63:7E:0B:9C:55:8D:2F:B2:6D:6B:8C:26:40
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:62:b5:6e:f1:19:a7:8f:5d:30:c6:ec:13:4e:1b:94:0c:09:
be:07:e1:4d:eb:b6:0c:7b:46:b3:2e:a2:c5:9a:25:cd:98:4a:
b8:14:38:23:bb:d1:d9:ba:37:a3:61:3c:a8:eb:56:ad:87:3c:
2d:14:24:ee:3c:3a:48:c7:4f:16:a8:14:21:65:35:e0:fd:b1:
29:43:39:7a:2f:74:ce:f1:b5:10:02:09:ba:85:fa:19:13:e9:
41:19:5a:72:8a:b5:f8:4c:93:c8:94:34:c5:c6:7d:02:73:5d:
d4:6d:b7:d7:23:a9:95:01:1b:e4:6d:e9:1f:29:5a:66:23:ec:
d4:98:06:db:37:46:71:e4:a7:74:55:6b:01:c9:24:a6:0b:79:
89:a8:e5:82:1e:a0:90:70:f6:02:8a:85:0e:c9:b9:90:64:ff:
3f:4f:82:d0:11:fd:1c:d7:2f:b3:55:0b:47:a1:81:d5:d3:d1:
e6:b8:33:99:9a:05:6d:0d:3a:5a:a9:a3:6a:22:ae:96:b9:5a:
2e:d7:7b:43:63:7a:dc:b5:b2:9c:06:e0:31:bf:42:8f:1a:c3:
d6:53:30:be:31:e4:6b:e1:86:c6:04:ec:da:87:82:28:10:b1:
25:b6:3c:63:86:aa:7f:3f:2b:3c:ab:45:ff:28:13:60:a8:c9:
82:ea:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:22:59 2025 by rpki-client