Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: tWux7Nspq7s9UrPItRbo0uAtyDPVzMCuhvUSoqep5Kw=
Subject key identifier: AA:36:6B:41:29:39:44:2F:F0:8F:5A:7C:70:02:E3:26:16:2A:F5:B1
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 019854FB6DBF5DD18871FC876A72CB9CE1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 09EF
Signing time: Tue 29 Jul 2025 07:00:20 +0000
Manifest this update: Tue 29 Jul 2025 07:00:20 +0000
Manifest next update: Wed 30 Jul 2025 07:00:20 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: 5cWSZ7b0iTfp9O7XEqAPL4azGBiYRj8VSM3ohIsA5Yc=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:6d:bf:5d:d1:88:71:fc:87:6a:72:cb:9c:e1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Jul 29 07:00:20 2025 GMT
Not After : Jul 30 07:00:20 2025 GMT
Subject: CN=aa366b412939442ff08f5a7c7002e326162af5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:a4:52:ef:fe:3c:94:89:2f:45:7e:37:85:
5b:de:f3:07:ef:76:93:ca:2b:04:a0:de:74:72:f4:
41:ab:30:87:14:65:29:f3:bf:b4:d4:73:a4:43:f1:
27:a0:d5:71:cc:07:f4:9a:ce:83:59:a7:2e:86:23:
b6:db:2f:5c:28:09:cb:93:11:3d:f4:eb:76:3b:f0:
ff:ed:47:0a:26:98:c9:f1:4a:41:c8:b2:02:54:6b:
5f:e4:4d:5f:a6:e0:11:67:7d:68:e2:8f:77:d8:95:
90:db:b2:fb:1b:b9:04:ae:97:94:6c:b7:9b:d5:ee:
29:56:62:5f:c6:bc:40:e5:55:63:e6:44:ef:22:f3:
4c:91:61:bc:de:ea:42:46:e6:0d:1b:e6:ed:20:91:
0b:5d:c5:7d:1a:87:d4:82:5f:40:58:a0:d4:8e:33:
bf:79:df:82:d6:5c:31:19:e6:4e:3c:7f:ea:21:31:
4d:e7:b5:3d:2c:c9:5f:a0:6a:ea:c0:bd:ac:94:5b:
00:70:33:ae:91:06:9f:bf:83:d6:7f:2e:f4:66:17:
c4:96:06:35:70:70:dd:2d:7d:d6:61:ca:d2:d5:bf:
18:1e:e4:95:2e:03:23:dd:d7:58:b7:fc:5d:70:4a:
20:05:0a:fc:47:01:d5:6f:39:5e:46:aa:8a:c5:d6:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:6B:41:29:39:44:2F:F0:8F:5A:7C:70:02:E3:26:16:2A:F5:B1
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dc:d0:9a:12:15:b2:ec:8a:55:1d:7b:71:7b:be:ee:2f:1c:
aa:07:6d:e5:f4:5a:d1:97:40:c6:9a:81:33:9d:5e:d3:a1:12:
94:d6:7b:95:09:64:c0:01:42:d9:c5:54:35:c1:3c:dd:4b:88:
b5:e0:f8:e5:c6:07:bd:80:b4:95:b3:0e:4c:97:49:e6:91:32:
25:93:7e:e1:06:b9:1d:37:06:07:3b:61:a9:79:27:af:0c:9d:
8d:66:d4:1e:e3:fb:f6:d4:fd:1e:70:71:d7:b3:3c:1e:10:9b:
82:f9:bc:25:f5:f2:73:dd:88:fc:de:1c:ca:ac:ce:f2:c1:e3:
f1:a8:72:8b:3f:5f:23:f1:aa:39:7e:12:cb:67:f4:67:d1:62:
a5:39:6f:08:f7:49:0a:05:f6:d6:2f:0f:11:f0:cc:a8:f3:2f:
70:aa:bb:48:3b:b3:b8:34:16:ca:93:d1:54:b4:19:75:cb:44:
d9:25:8a:f8:7c:15:18:b6:7b:eb:c0:e4:36:7f:90:4e:e9:f6:
8c:6d:4d:eb:bb:a1:83:5b:10:ea:d6:95:d5:ee:eb:b7:7b:11:
7c:bf:be:35:ac:ae:df:14:5e:65:9c:ca:8d:0d:1e:76:1d:b6:
7b:6f:89:0d:ab:4f:1e:cf:22:fe:2f:ad:93:37:d8:8d:ad:f1:
3c:6b:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:21:13 2025 by rpki-client