Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: 1dbJ4nQ5AJFRNx70IoR0pspFP9uszBZTojT3MfF9nEY=
Subject key identifier: D1:86:17:12:C9:18:6E:11:38:6F:35:C4:44:0D:E0:E2:92:C3:E9:1F
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 0198394D96EC79D3DE667C5BFC3F6D2B68CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 04FE
Signing time: Wed 23 Jul 2025 22:00:42 +0000
Manifest this update: Wed 23 Jul 2025 22:00:42 +0000
Manifest next update: Thu 24 Jul 2025 22:00:42 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: 7lPsd5UoWtW+ObDHZAKZkJw/a7spkOgAjuUiJ7LXIa8=)
3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:96:ec:79:d3:de:66:7c:5b:fc:3f:6d:2b:68:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Jul 23 22:00:42 2025 GMT
Not After : Jul 24 22:00:42 2025 GMT
Subject: CN=d1861712c9186e11386f35c4440de0e292c3e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:ce:eb:21:3a:51:9a:34:8e:60:a6:49:18:
fa:c0:86:bf:6a:36:d2:de:f1:d3:58:11:65:eb:d4:
af:25:76:bd:c3:6f:4d:ae:a7:d2:0a:0c:98:cb:60:
d8:19:02:ed:65:34:c6:79:35:2f:f7:37:38:96:9f:
e6:6e:bf:95:c7:66:f1:d0:5c:25:2b:06:f9:ed:e5:
77:46:87:0e:7b:fd:30:eb:28:dc:2b:4a:06:d6:3d:
e6:93:65:01:c4:9b:5c:fb:c0:7e:c6:2b:7e:9a:9f:
88:43:c3:2f:47:23:68:85:2a:fe:89:8e:fb:27:f4:
60:6f:34:47:8c:83:bb:15:49:fc:d5:74:15:3a:e8:
4b:2d:4d:51:de:2d:46:2b:40:d4:0f:c8:e6:a8:75:
89:ae:e9:8d:13:c5:26:3a:ac:2a:30:c5:ea:87:4e:
f9:a8:71:ae:f8:6b:01:a0:72:58:a0:7b:42:34:0a:
4b:72:14:86:0f:8e:60:fe:dc:ec:29:ff:93:e4:c9:
22:9d:61:72:ac:66:2d:c7:12:c9:72:62:3e:4b:5e:
36:21:87:d3:21:62:0c:5f:7a:7d:51:4e:54:93:12:
ba:f8:6d:fd:a0:7a:15:cb:3b:63:87:7c:33:66:4a:
f4:c0:24:10:8f:32:06:c6:ff:c2:76:c0:f4:35:66:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:86:17:12:C9:18:6E:11:38:6F:35:C4:44:0D:E0:E2:92:C3:E9:1F
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ad:25:5e:ad:fc:15:94:25:ac:f5:ab:3c:f4:69:51:1b:5c:
52:c7:76:2e:50:9b:e1:11:5a:d0:28:cf:01:fe:93:a9:ad:fe:
35:1f:68:23:66:32:bf:43:ef:cd:99:1b:6b:da:06:42:0f:47:
f9:47:87:29:e2:16:7e:cf:f6:80:b6:8f:0f:14:41:7a:ab:65:
92:29:0c:13:19:19:3b:75:18:1e:ba:3c:35:9c:1a:f0:d2:81:
67:9a:a6:f7:4e:66:3b:16:b6:f6:f0:ee:d0:02:26:64:5e:ed:
91:51:ec:e1:87:a3:2d:15:e6:ea:1e:f6:7e:a3:38:40:87:7d:
2a:b3:41:de:0f:bf:02:0b:af:69:89:f0:89:f9:21:74:87:f3:
03:09:d9:93:50:1d:f0:98:78:87:55:73:77:b0:1e:cf:3a:37:
41:4e:72:14:cc:f5:c8:50:b5:b8:e9:b6:a2:5c:61:23:d5:fa:
8c:7f:92:1e:2c:50:fc:0d:61:d8:4a:91:7a:90:46:b6:80:8d:
24:42:93:a4:7d:5d:be:80:88:e0:62:e5:c3:92:f3:12:91:1a:
13:97:30:5b:c3:52:c8:0e:a4:2c:51:76:cf:89:ee:6d:f1:0f:
51:a5:a4:69:52:18:39:d8:02:b6:91:12:da:18:51:36:a3:26:
f2:ae:30:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:18 2025 by rpki-client