Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: J2FZCHIOc/SX5a+XCkZCAR4B1bmSoyh+jnS38xC3JQU=
Subject key identifier: E3:9E:32:8C:CE:A4:96:D2:7C:9E:BD:F6:FF:11:53:5D:5D:4C:6D:69
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 019845882E5476B3182B051D0DB784334C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0A6D
Signing time: Sat 26 Jul 2025 07:00:09 +0000
Manifest this update: Sat 26 Jul 2025 07:00:09 +0000
Manifest next update: Sun 27 Jul 2025 07:00:09 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: wddcURaM9NSxF5GneHaH0PW//CQMnnUN7xPvz1zMiXY=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:2e:54:76:b3:18:2b:05:1d:0d:b7:84:33:4c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Jul 26 07:00:09 2025 GMT
Not After : Jul 27 07:00:09 2025 GMT
Subject: CN=e39e328ccea496d27c9ebdf6ff11535d5d4c6d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:09:05:54:ad:b5:b3:82:a8:bf:b7:e7:de:
95:76:21:1b:06:50:10:af:1a:62:d8:61:47:d3:3a:
1e:67:38:bc:99:57:1b:7a:d3:20:2a:fd:78:c7:ab:
f8:5b:44:c4:06:95:66:ac:9c:8f:17:8e:42:9f:a5:
e8:a1:a7:ad:e2:92:af:b4:26:01:f8:9b:79:17:62:
90:10:50:c2:e8:ef:18:05:66:9e:98:03:28:3b:19:
7c:3d:73:ae:7f:d7:96:cc:26:0a:85:53:2c:d1:b3:
09:fa:63:1b:2f:b9:38:7c:fa:b0:7b:83:ee:31:b5:
62:7b:4c:83:f2:04:4e:ad:cf:59:dc:98:09:c7:f0:
94:b7:67:31:e4:69:61:54:7a:3f:50:8a:ed:ce:a4:
11:10:c6:b1:c5:e9:e6:d3:b4:43:35:88:92:9c:80:
a7:54:71:fd:7a:e8:29:3f:fc:1c:a3:ae:08:b2:b1:
03:b6:4b:53:27:9c:3e:32:0d:bf:74:78:41:34:16:
f7:82:15:91:d9:f2:c1:c6:2e:4e:58:00:0d:d5:ee:
21:6a:df:c2:44:8e:95:8b:02:d3:32:4a:9e:4f:1e:
bb:24:31:c3:29:04:01:cf:00:e5:c8:f9:36:fa:4d:
87:70:12:2d:16:d0:3f:39:6c:92:47:1f:a0:36:a2:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9E:32:8C:CE:A4:96:D2:7C:9E:BD:F6:FF:11:53:5D:5D:4C:6D:69
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:9d:0a:4a:52:20:73:8e:51:fa:60:74:70:ce:dd:d0:55:
4c:f1:7a:59:89:89:ba:81:c6:a7:74:a0:72:56:3e:57:9f:7a:
2f:25:fc:5d:84:d3:9c:16:d1:ac:2e:d0:e2:76:0a:e1:b2:3c:
4f:a0:da:ec:06:29:74:9a:74:e1:25:56:0e:81:24:a9:18:27:
eb:aa:e9:94:b1:18:82:e2:1f:b3:ae:4e:c1:a1:dc:37:5e:3b:
da:4d:74:fa:6e:f1:1b:fc:68:b2:a3:c1:0f:c1:5a:e2:5f:d1:
cb:50:b6:36:97:c9:5f:89:ff:df:30:91:f2:09:32:87:55:8c:
cb:84:9a:1d:4a:0a:3b:15:aa:6c:66:08:82:71:6c:66:09:bf:
bf:f3:e7:4c:0a:78:1c:b5:df:38:05:55:96:d4:ef:83:cb:e1:
fb:a3:28:53:be:b2:c5:47:63:7b:86:4c:a7:44:49:ce:b7:ef:
6f:6d:74:b4:39:f2:32:c8:31:e3:90:c5:10:23:38:82:c7:0b:
ab:48:20:f3:e4:9a:4c:73:2f:4d:4e:09:64:eb:91:03:2b:8d:
82:95:2a:2b:2a:a1:5c:7f:24:6e:5d:18:67:b0:db:87:22:7c:
ac:aa:2f:43:73:2d:b0:10:22:b5:58:b9:ba:40:42:19:a1:0f:
68:e5:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:59:15 2025 by rpki-client