Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
File: QD8Iu6_6QWGEMgOop1erbpVGsM4.mft (raw, json)
Hash identifier: wTokJnsLMCG2oCCCjAFPEq0ZTcTPzT0mww9F4xSl1Wc=
Subject key identifier: C8:1A:F9:98:DF:B4:FA:D9:39:57:3A:55:29:25:3E:E7:F9:FE:A9:17
Authority key identifier: 40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
Certificate issuer: /CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Certificate serial: 01984AAEE2D086079B304FC47E3DA652B965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
Manifest number: 0515
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: 4PjPPpWKgAtzAAOasr7gIk0JbPI.roa (hash: yiKX1aQ5yWrVl7HwLmjfK1M9G+FpWFiXbyU5qVlLbDY=)
2: QD8Iu6_6QWGEMgOop1erbpVGsM4.crl (hash: 5OqROOCoXhYfB+v1xwZ93uv9osp9ae656Nwk4jUIOAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e2:d0:86:07:9b:30:4f:c4:7e:3d:a6:52:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=c81af998dfb4fad939573a5529253ee7f9fea917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:56:7d:57:fa:ec:1d:4c:2c:4b:45:71:03:
fc:e0:68:07:2e:3c:8c:df:ed:a6:c8:46:a2:c2:e0:
26:8a:2d:5e:a0:37:53:b9:2d:3d:5e:e9:e3:79:f1:
30:71:5d:8f:98:6e:9f:bc:19:7a:16:36:6e:93:84:
2e:08:0b:33:86:f6:0e:e3:57:ba:4b:27:6e:ac:cf:
3e:38:28:dd:b8:0b:1a:20:0c:15:2b:66:20:33:8c:
26:21:95:a4:53:1c:40:58:f9:33:42:d7:33:54:0a:
e3:11:6c:db:f7:85:94:f8:b2:d2:c7:3d:60:b6:ea:
96:68:00:18:38:14:84:6a:5b:a0:3f:f8:25:ab:9b:
66:1a:9f:dd:78:7f:f9:57:d5:d4:e9:1f:2d:23:33:
2d:d2:d6:43:c9:a1:12:eb:d4:f1:53:1a:e2:cf:e8:
ab:0b:e8:55:c1:ba:a1:90:cd:39:ae:58:1c:64:45:
d7:d0:19:fd:f0:8a:fd:9b:4b:39:07:5e:61:64:6f:
4d:e6:4d:58:e1:a8:97:71:f9:1a:17:d5:66:f8:94:
e9:26:08:b5:80:f9:78:f0:09:4b:c6:4c:1a:20:f3:
5c:26:7c:66:b2:e4:fb:d2:2f:d6:aa:91:6e:fe:6f:
78:25:ab:d2:e9:ad:52:cb:c0:32:e4:2e:1e:39:74:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:F9:98:DF:B4:FA:D9:39:57:3A:55:29:25:3E:E7:F9:FE:A9:17
X509v3 Authority Key Identifier:
keyid:40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:16:03:84:3e:c7:78:ea:1a:f1:e0:ea:1a:e4:e0:ba:87:09:
14:86:a8:e4:21:59:a6:e6:b6:98:51:96:3a:c5:2e:a8:ef:2f:
c9:c1:75:46:e0:5c:cb:ec:4b:23:5a:e5:19:4a:86:a8:b6:e5:
d9:03:9a:fa:3a:5d:d4:0e:aa:87:ec:b0:8d:d9:35:44:51:c9:
e7:63:2a:e2:02:7a:4c:6b:82:f8:97:ab:b9:70:23:cc:47:23:
b8:12:a5:e5:a7:59:8b:0b:be:2c:e0:02:10:19:26:24:27:d8:
82:ad:ca:ec:a6:75:0d:8d:ac:bb:f5:8e:e0:ca:ae:95:f8:74:
17:96:e1:3e:20:40:b1:d6:f9:b6:f8:38:02:10:95:a3:68:40:
66:92:bb:13:d7:e1:dc:9a:8e:35:86:1b:d8:73:87:c8:ce:a7:
13:b4:6d:19:2a:a6:c4:bf:a1:86:ba:e1:db:55:fd:0f:fd:14:
66:d9:ed:49:be:17:c8:ac:f0:62:71:43:82:b7:cb:96:47:af:
4f:35:92:9a:14:59:66:c5:db:cb:99:88:85:86:96:7c:18:8e:
49:68:7c:17:3e:fa:ba:9c:69:4b:42:6c:4f:2e:55:0a:b5:3a:
da:68:6b:f0:ff:30:5b:0d:a5:16:aa:dd:43:81:76:22:db:aa:
93:00:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:30 2025 by rpki-client