Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: c4zYfvoPb7abv2xR44OSm/8ovYHWjgloKd2bLE+apJo=
Subject key identifier: A4:6E:B0:4D:59:59:06:E5:5A:12:97:CA:74:55:4A:13:B6:87:71:49
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019845F6D49BA61A0FA87390175A2262EC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 1388
Signing time: Sat 26 Jul 2025 09:01:00 +0000
Manifest this update: Sat 26 Jul 2025 09:01:00 +0000
Manifest next update: Sun 27 Jul 2025 09:01:00 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: SKUr2nqABfx+ORyIrkADmdoJFfcgQK6fC9VtdwKSK5s=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:d4:9b:a6:1a:0f:a8:73:90:17:5a:22:62:ec:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jul 26 09:01:00 2025 GMT
Not After : Jul 27 09:01:00 2025 GMT
Subject: CN=a46eb04d595906e55a1297ca74554a13b6877149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:12:e4:86:40:b4:3c:0b:eb:c3:3d:10:ea:
80:39:bf:95:63:6f:e2:14:67:bf:e4:10:fa:94:47:
d0:7a:e2:4d:7a:15:af:c3:3c:37:d6:2e:73:4a:45:
8a:a0:07:9c:bc:fb:4b:6b:a5:68:77:22:90:98:5d:
e6:a7:cd:d3:ca:26:ac:4c:69:41:11:2c:b0:4b:89:
74:e3:7d:9a:3d:c2:a1:b9:48:1e:d7:56:82:b9:ce:
7f:84:d8:10:89:37:a9:b3:15:d1:ee:a3:99:86:13:
09:8c:d4:67:bd:f7:0a:1d:d2:35:2f:69:13:76:ff:
96:be:ca:63:c5:30:e0:71:97:9a:f7:6b:7a:d4:ff:
08:a8:3d:68:57:28:e7:91:f2:ea:7c:15:ed:0f:ee:
88:2a:24:1e:88:9d:e2:a4:d1:32:4c:e0:9d:38:4f:
27:80:cd:fa:5c:ab:94:5a:90:45:78:e3:7f:ce:99:
48:68:32:a8:c2:53:51:d6:88:ca:ab:56:a7:06:71:
8a:ce:66:f5:f6:e0:99:0f:46:6e:4f:70:e5:3d:60:
e1:66:ce:cc:4a:86:20:81:6d:cb:ae:62:bc:1d:f6:
9b:ec:7e:d2:df:fd:38:b2:37:d4:58:b3:72:28:89:
01:66:89:f8:9f:68:04:14:89:4e:25:ea:93:18:e9:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6E:B0:4D:59:59:06:E5:5A:12:97:CA:74:55:4A:13:B6:87:71:49
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7b:fa:0f:48:5c:f9:f0:e0:4b:dc:e8:e0:d0:a7:a5:f1:9c:
7f:79:fb:5c:3a:bb:88:e8:70:5a:ac:02:53:e4:53:0d:f2:77:
42:36:ea:a6:cd:2f:06:a7:ed:5c:e0:cc:ab:39:28:e7:28:ed:
23:0c:a3:36:12:9a:95:24:c1:f3:8b:70:de:eb:90:5c:f6:eb:
ca:b8:43:c0:eb:0a:d6:ec:af:0b:cf:57:bd:92:96:74:3c:71:
5d:b3:11:49:25:5b:5e:67:bf:3a:56:d3:0d:5e:86:57:81:7d:
53:a9:4b:cc:8c:38:73:6f:b6:b3:23:db:22:a0:2f:96:5f:74:
94:dc:91:5f:b4:16:3b:fc:8a:ed:bf:72:8b:4d:bd:75:ea:a7:
0c:12:a8:84:61:d7:c7:49:54:7b:0a:7a:5b:9a:ac:66:83:dc:
f5:9b:9e:97:03:0b:df:bc:83:85:13:89:03:98:04:ca:83:25:
c1:31:4f:63:34:24:e5:04:cb:82:7a:53:b9:25:11:4a:fd:ce:
bd:f2:a4:4c:ad:a8:98:d4:77:17:df:33:8e:e7:0b:b8:d1:b5:
7e:74:69:fe:6c:f2:e5:8d:68:79:68:fd:98:90:35:70:bb:c5:
11:d9:dd:8c:ad:72:1a:2b:99:8c:cc:32:88:1f:a4:f4:d4:8e:
bd:e3:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:05:23 2025 by rpki-client