Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: Z0SwytAvHJbJq2e+7qqKh5kZ1+VQwSEyuv286UTBRZg=
Subject key identifier: AC:A0:19:92:70:D4:56:71:E4:68:D8:4D:69:CD:80:2F:FF:BD:4D:29
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01984AE5D113426F608BF16C069ED04DDCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0B0E
Signing time: Sun 27 Jul 2025 08:00:31 +0000
Manifest this update: Sun 27 Jul 2025 08:00:31 +0000
Manifest next update: Mon 28 Jul 2025 08:00:31 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: U/PaNNn63vIXbPmOYe01NrtVGi2VzwIhqV0+FRimRkg=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:d1:13:42:6f:60:8b:f1:6c:06:9e:d0:4d:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Jul 27 08:00:31 2025 GMT
Not After : Jul 28 08:00:31 2025 GMT
Subject: CN=aca0199270d45671e468d84d69cd802fffbd4d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:6b:fc:29:00:59:e3:28:35:e0:26:08:67:
df:bc:6f:24:ed:af:0a:a4:1e:ce:4e:ea:3d:ca:83:
2c:3a:f6:98:bd:e4:10:e1:5e:bf:a6:d8:4c:fd:54:
99:6d:fb:c9:52:93:d4:f6:68:59:b8:87:1c:4c:81:
60:1f:d1:1b:ee:0b:52:84:1e:21:85:b1:01:46:6a:
ca:92:03:3d:bc:0e:97:19:5e:de:0e:81:e0:d2:59:
31:3e:ba:71:e3:ad:22:61:87:cf:3b:92:c9:fa:b0:
24:d0:11:72:04:ff:7a:f6:3f:cd:c4:1e:d9:fe:1e:
3a:97:40:7a:97:9f:57:da:42:36:e4:ba:39:f7:e0:
4b:08:a3:f5:ef:d1:77:33:1d:57:f8:9b:f7:4c:8c:
b5:7d:96:b6:cc:e9:4d:09:e1:09:88:e9:bb:d9:af:
68:10:75:02:ad:61:d5:24:2c:d1:33:19:6b:92:64:
c5:51:3c:40:3e:e9:00:89:e0:f2:8b:4d:57:b8:7a:
b5:08:65:b9:2e:1c:ed:21:07:a7:f6:dc:31:b6:fe:
aa:80:55:67:a2:6f:c6:b4:17:2e:54:22:f2:34:67:
83:f9:bb:20:aa:dd:50:a7:0e:76:ed:8d:91:4d:af:
ac:a1:30:2b:5a:2c:4a:ce:fe:82:3f:c2:05:a0:e5:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A0:19:92:70:D4:56:71:E4:68:D8:4D:69:CD:80:2F:FF:BD:4D:29
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a7:a6:20:78:bc:3f:c9:ca:45:a0:9d:2c:09:60:ed:bd:26:
d4:45:48:2d:1e:f8:40:6b:69:52:1e:44:87:c8:d7:90:7f:ad:
63:7c:dc:f6:58:10:b0:45:a9:64:41:df:b8:cc:a3:6a:3c:d5:
7b:6b:7e:9b:bf:88:ff:9c:a1:9f:06:2b:bc:3b:7d:d8:d3:a9:
40:7e:9b:fd:7d:cf:38:8a:b7:75:4e:82:3a:46:bd:63:e4:61:
13:6f:a5:f0:df:82:f8:18:d4:67:a5:67:4a:c6:06:99:96:7f:
8d:dd:49:30:7a:86:41:9a:6d:5d:60:cb:13:a5:6f:7d:cc:ad:
02:5b:a8:7c:3a:5d:0e:91:d0:10:0c:89:7e:65:3b:1b:31:79:
d7:a5:1a:54:4c:52:8c:6b:2c:94:bc:0b:c9:20:3b:09:4a:d2:
bd:45:1e:bf:1e:14:d6:fd:55:31:c4:49:7b:62:1a:af:1b:9b:
cc:ff:2f:b0:ad:2e:4f:6e:53:c2:fa:52:69:5b:f6:f1:b7:92:
94:96:a5:d1:e0:14:32:91:01:ac:22:f0:08:5a:34:8c:04:e5:
1b:ff:5f:59:bd:b3:4d:99:83:48:7b:aa:fc:22:30:14:3f:34:
4b:8f:2c:eb:5e:6d:91:bd:8a:cb:02:03:7b:ce:41:dd:9a:1b:
e8:52:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:46 2025 by rpki-client