Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
File: QBY91EFO8-eS4AUB80786UQKnE4.mft (raw, json)
Hash identifier: HSqm7kIqll2frLXynosXvhdGQd5f/2G7vp8BrfoQ5Es=
Subject key identifier: D2:DA:26:FE:AD:32:32:BD:7A:47:95:5F:41:25:32:B3:0F:D8:94:CE
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 019847E514FD96A3C8E1B5AC3137F22FEAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 18:00:52 +0000
Manifest this update: Sat 26 Jul 2025 18:00:52 +0000
Manifest next update: Sun 27 Jul 2025 18:00:52 +0000
Files and hashes: 1: QBY91EFO8-eS4AUB80786UQKnE4.crl (hash: T0R1vcyvRCKEWHdHVZkv8ZK1TRszNUKqM0awrOHdsYk=)
2: gYnUiXQeHZXoU2ZAN-fbsd-Pbx0.roa (hash: V+jQPfwx3Xoa/wL9PzJ6rz+juFyDwb1B2F2Hpp1ngN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:14:fd:96:a3:c8:e1:b5:ac:31:37:f2:2f:ea:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Jul 26 18:00:52 2025 GMT
Not After : Jul 27 18:00:52 2025 GMT
Subject: CN=d2da26fead3232bd7a47955f412532b30fd894ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:59:e8:cc:f0:1c:41:1e:3d:78:b3:c9:d1:
5a:ff:22:f7:77:b7:28:75:3b:ba:90:7a:8a:09:2f:
1e:67:31:e6:74:c5:c6:80:89:29:28:6b:d4:3d:cc:
1f:de:4c:e3:a0:18:3d:17:ca:3e:29:c0:9e:48:d7:
6a:48:93:32:7a:d7:1e:d3:f0:a2:13:c0:09:dd:e0:
1e:7c:12:e4:19:70:37:f3:b3:5c:36:07:dd:f8:66:
3b:e9:07:a8:0e:94:34:ef:7b:24:ca:c5:7a:e3:6b:
e8:45:d0:e8:d6:cf:a1:c4:05:54:3d:58:7b:c4:d6:
92:fc:5f:10:42:19:dd:bc:4a:41:14:2b:40:e7:2d:
f2:9d:b0:f0:70:a6:3c:d0:58:f6:55:ed:f3:5d:b9:
74:44:ed:d1:e5:1b:d9:b2:81:43:cf:ab:51:cf:3e:
33:46:f3:f3:a0:cc:79:fe:2c:3e:0d:85:fb:4a:a1:
b6:d3:70:ad:de:ad:4f:8f:c7:57:b7:d1:b1:ff:39:
ef:b9:f8:17:7b:7c:5b:c4:a7:9d:1b:06:68:f5:2e:
ce:fb:4d:25:5a:26:f1:09:72:de:44:d5:6c:61:68:
77:ae:fd:5c:1c:51:f8:84:50:2e:ba:67:f8:e0:c5:
80:59:bc:b2:13:61:25:85:b8:e6:e0:09:6c:1f:04:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:26:FE:AD:32:32:BD:7A:47:95:5F:41:25:32:B3:0F:D8:94:CE
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:83:53:34:5f:e5:2c:c6:3b:30:63:88:65:20:04:53:28:05:
c3:16:9d:2b:43:fc:fd:9a:eb:03:49:9a:70:d7:3c:5e:52:15:
f9:5d:b8:f7:37:a1:be:1e:51:29:50:70:e3:ee:08:de:ab:f8:
96:13:bd:86:ee:f1:5a:07:33:75:ff:bf:18:5d:e8:19:60:51:
20:d2:94:0a:cb:72:f4:89:d1:ab:48:8a:89:a7:6a:0a:f4:ef:
73:f8:82:15:04:79:51:b2:0a:2b:06:67:d7:95:9f:d8:1e:92:
99:fd:87:49:be:6c:89:b9:82:d6:3a:79:58:23:6f:b6:78:ac:
9d:14:3b:86:aa:37:43:50:7e:1c:68:e4:fc:02:d7:c3:7b:e7:
7b:ed:14:61:11:81:24:f9:66:26:21:ae:5d:b2:86:34:25:07:
af:f2:9f:46:7c:05:d0:71:77:28:3e:0d:70:a5:6d:73:de:1e:
8e:14:17:54:b5:e0:aa:f8:72:63:5a:e7:3a:30:90:ef:a1:a2:
d3:a6:00:7d:97:e1:2d:e7:00:d9:c2:fb:76:d4:f7:c8:ef:dd:
80:86:a1:fd:b9:a7:53:aa:71:78:7b:9a:90:5e:70:ee:3c:85:
3e:41:87:d3:74:9f:37:75:a3:ed:b9:64:93:b4:6c:61:4a:48:
53:6c:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:56 2025 by rpki-client