Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: S/1ov+KTn52/GNtGrOzuQwEM4Gs2LTXteJRL4DX82jk=
Subject key identifier: 86:D1:E7:8E:0E:47:4A:60:46:5D:49:32:32:7D:9A:BA:31:D2:85:6A
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 01982AED9EC5D2C19B84BFA8FE0706393BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 15F3
Signing time: Mon 21 Jul 2025 03:01:12 +0000
Manifest this update: Mon 21 Jul 2025 03:01:12 +0000
Manifest next update: Tue 22 Jul 2025 03:01:12 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: zbUzwIrW0nWgQDffmhv6d/ZI8F3YYJGMFozlmRMdYOQ=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:ed:9e:c5:d2:c1:9b:84:bf:a8:fe:07:06:39:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jul 21 03:01:12 2025 GMT
Not After : Jul 22 03:01:12 2025 GMT
Subject: CN=86d1e78e0e474a60465d4932327d9aba31d2856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:09:6b:24:38:c0:2c:29:27:4c:35:93:1b:
97:45:3b:81:3b:83:a6:44:e4:1f:86:bc:d3:6c:24:
4a:55:36:9c:45:ae:f8:4e:3e:f5:2e:cf:9e:4d:1b:
14:72:d4:cc:09:c6:6e:fc:02:de:8b:6a:63:dc:9a:
fa:48:a5:96:1d:ee:e2:60:4a:95:8b:42:eb:c4:28:
3e:f8:f6:83:e5:08:21:f6:07:ad:d8:de:1c:cd:5f:
d2:e7:8a:c2:bc:2b:ac:c1:4b:49:71:50:e8:79:8a:
98:52:36:06:a8:1d:94:e8:32:5d:d1:19:53:13:82:
19:41:20:73:4d:8a:b9:c0:0f:a5:84:73:5e:ed:56:
90:5a:0a:a9:8e:f9:5d:69:9a:b4:b4:a9:69:7b:a5:
89:e4:04:a6:e1:c5:af:53:e2:8f:06:5b:cc:30:26:
a0:86:98:36:38:1f:7a:0c:76:2d:39:cd:29:fc:09:
90:58:62:bb:00:89:48:d0:1c:20:18:e3:65:c8:09:
28:70:a3:21:e5:e5:38:95:19:12:c9:08:71:77:27:
b2:52:ee:88:39:1d:02:d4:30:67:b6:03:92:3c:28:
ec:2d:80:96:76:0b:16:92:d9:35:dd:b0:68:b6:64:
de:eb:bd:8f:da:40:a2:72:6e:4a:d2:13:af:14:7c:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D1:E7:8E:0E:47:4A:60:46:5D:49:32:32:7D:9A:BA:31:D2:85:6A
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e9:fc:24:78:de:2a:64:bd:b0:40:0b:48:d4:8f:4e:e1:0f:
6e:fd:68:63:c6:27:9b:89:73:a7:36:66:9a:3f:63:76:df:bc:
f9:03:e5:76:ca:4f:44:5a:7a:41:a7:3b:bb:9f:b1:79:ff:c9:
17:66:d7:dd:f4:45:c3:6e:18:62:96:6b:14:ba:95:ed:3d:8a:
c6:d2:bd:57:b4:75:35:6c:2d:84:89:59:ef:9f:75:15:3f:ba:
ce:a2:4a:86:a2:7c:df:ee:6f:ee:45:59:c1:4a:fe:d1:5d:5d:
8c:35:d4:41:a3:f6:88:bd:f1:42:f9:dd:82:3c:ab:76:a5:f0:
8c:11:e2:b2:b8:81:74:82:0c:36:e3:13:c6:f0:ad:1a:45:9e:
2e:ff:bd:8c:f0:17:3b:9e:9a:e5:3c:d1:b1:39:60:7b:f0:83:
29:23:3a:43:6b:88:1d:bb:f5:df:a3:a6:bb:99:da:58:1d:d3:
6b:02:51:a3:4f:e9:14:20:25:85:6a:cc:5f:e8:54:4c:e2:49:
64:e0:90:af:6d:04:07:77:0d:8b:b0:cd:5b:1a:fc:e0:46:ff:
1c:40:9b:83:84:1b:70:bb:f7:9e:2c:79:a9:e5:1d:d1:d4:52:
a5:c2:7a:65:93:cc:ea:61:a4:a6:ee:44:95:7c:8e:1e:f4:0d:
5a:2d:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:11 2025 by rpki-client