Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File: QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier: r8jefpA8izAmXXGN7Y+3HgeW7ApcIt+btLLPHbGKFgA=
Subject key identifier: D4:06:FA:E5:61:A3:0B:24:F5:C1:A7:12:21:B4:48:43:5D:D6:C9:84
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 01983495BF75533D89E44FCB3B211D0F2C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number: 085F
Signing time: Wed 23 Jul 2025 00:01:25 +0000
Manifest this update: Wed 23 Jul 2025 00:01:25 +0000
Manifest next update: Thu 24 Jul 2025 00:01:25 +0000
Files and hashes: 1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: yZ00G1YRj5yRNvfHwtmB80j5k1iF0dNxBDx5PV1If7U=)
2: bysUciiIqYU9vJ8UfK9pbwZkqG0.roa (hash: JZVYwqtyAp0nMHO1FDIE6qYD96KGmAzDi7aqiaMlMrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:bf:75:53:3d:89:e4:4f:cb:3b:21:1d:0f:2c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: Jul 23 00:01:25 2025 GMT
Not After : Jul 24 00:01:25 2025 GMT
Subject: CN=d406fae561a30b24f5c1a71221b448435dd6c984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:f9:bb:6e:f6:dd:77:9b:10:af:75:bf:6f:
e4:dc:cc:0b:3b:1f:fa:d0:fc:39:b8:5c:58:aa:b3:
6f:54:1d:ca:d7:a9:c0:4f:c9:19:9a:6d:09:99:9a:
a1:56:9e:1a:6f:96:1c:80:4b:d5:54:73:b8:e7:10:
9b:a8:44:3f:81:e3:0b:b6:27:f7:9a:a0:a4:55:2d:
ec:e9:ec:9d:77:6b:ca:8f:ee:9d:c5:39:45:a5:d1:
7b:ae:ff:a9:4a:bc:39:32:27:30:28:68:7a:40:58:
13:b8:2a:c3:9e:25:5d:f7:24:7f:ee:d8:e1:15:14:
3b:1e:87:65:72:38:e0:da:2e:02:c9:43:e7:a1:c5:
72:85:5b:4a:ef:7f:48:95:ed:dc:ba:b3:fe:ef:12:
4f:de:b9:fb:11:80:40:b3:65:bd:80:4a:62:b7:41:
8d:de:2c:48:57:d9:2e:41:2f:9c:ac:85:bc:44:5e:
9e:a0:d9:18:1b:82:97:81:31:e0:d6:d6:d2:a8:f4:
cf:18:76:f6:35:2e:40:80:07:11:cd:9a:08:ac:0a:
0e:68:63:3c:fe:62:4d:31:40:3c:a3:a4:b1:05:0a:
24:95:10:b4:dc:b7:98:ec:60:71:38:4a:e7:87:7b:
a5:52:ad:4b:cf:7c:8e:11:71:0a:0a:60:14:7f:ea:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:06:FA:E5:61:A3:0B:24:F5:C1:A7:12:21:B4:48:43:5D:D6:C9:84
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:2f:2d:c2:bb:d0:eb:62:25:47:ec:52:05:d6:85:da:12:
97:9b:7b:fb:99:68:5c:12:9e:b3:41:1e:5a:4a:d9:5a:af:98:
8e:f8:18:9c:92:e8:72:e0:a5:f8:f9:c8:6a:63:ad:3f:31:b0:
16:59:d5:30:f4:a7:80:f8:c0:0d:a2:d6:fd:16:8f:da:35:a9:
c9:a6:2b:25:d3:b0:28:0a:c1:98:78:78:7f:29:ab:09:36:e6:
3e:ad:d5:a1:34:33:36:f2:17:6b:96:95:4f:e7:46:a6:37:dc:
02:bb:da:ba:a1:eb:5d:6e:e4:8e:85:6b:13:21:71:7d:c9:c9:
dd:53:e4:9f:7a:49:cd:49:80:d8:a6:c1:37:01:42:36:ba:e2:
10:d7:a4:43:33:ac:01:75:68:06:0e:9b:35:5f:28:12:8c:94:
0d:c4:9b:e8:19:53:7d:5d:e2:b8:bc:c6:3b:fb:dc:c9:df:b8:
dc:d7:35:06:42:05:be:ce:58:e6:84:72:3d:5d:f8:99:18:75:
99:d8:60:68:1a:13:81:af:57:23:a3:ac:91:d5:1a:8e:b2:5c:
1b:16:a0:6c:66:dc:10:9a:b4:80:34:c8:90:a1:6e:42:20:12:
bb:2b:d5:e0:ce:ae:64:79:ed:fa:aa:6a:49:5d:d6:f2:e6:38:
dc:d7:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 07:57:35 2025 by rpki-client