Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: upl+8Dv0HpyXufnGQsHscIJKTIHUoRCG+/jjLVP6EWI=
Subject key identifier: 7D:28:32:CE:80:30:C0:F6:E6:09:65:B4:72:4A:E6:5E:EE:85:65:85
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 0199221E738377CE32F20B57E7352E000330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:00:44 +0000
Manifest this update: Sun 07 Sep 2025 03:00:44 +0000
Manifest next update: Mon 08 Sep 2025 03:00:44 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: u62bYMqstYcQkqr8j8ilNb3UmBHLBvyRzh99EIoVmDE=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:73:83:77:ce:32:f2:0b:57:e7:35:2e:00:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Sep 7 03:00:44 2025 GMT
Not After : Sep 8 03:00:44 2025 GMT
Subject: CN=7d2832ce8030c0f6e60965b4724ae65eee856585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:c0:98:67:b3:1f:17:db:9e:20:23:c0:6a:
b4:ba:1d:78:11:46:a1:08:2b:50:5e:fe:81:0e:a1:
05:15:cb:10:29:19:1a:80:e3:40:2a:60:09:83:86:
8d:79:db:9b:09:4b:78:e8:6e:36:43:c8:48:ec:db:
3d:be:ef:41:d4:bc:70:af:82:d8:85:88:a2:35:51:
3e:0b:0e:32:25:0b:c8:84:92:df:a7:c2:64:58:45:
0f:67:a0:90:a6:7b:ed:c5:7a:85:f9:67:7b:45:13:
22:3a:17:0d:3c:51:7f:86:67:81:69:e7:ed:e8:d5:
90:d0:23:f6:36:6c:04:5e:b9:c5:d5:67:5c:e4:dd:
3f:03:b8:f1:37:9a:b4:bc:79:a9:45:dd:be:de:72:
07:59:6a:55:36:f7:17:f8:3a:16:1b:12:a7:ce:d0:
a1:cb:3b:84:ba:e7:18:07:33:6d:df:42:58:51:d4:
28:eb:6c:a9:0e:40:93:3b:81:cc:af:40:85:e8:e7:
38:46:0a:b9:4a:d9:22:28:e4:f0:2b:de:e9:25:c8:
b3:01:b5:c4:45:dd:9a:43:95:bc:13:e3:df:76:89:
60:18:70:ee:de:31:1a:16:7d:ee:db:a4:6b:24:59:
61:b0:a3:8f:fd:02:18:eb:a8:4e:bd:f5:a5:62:62:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:32:CE:80:30:C0:F6:E6:09:65:B4:72:4A:E6:5E:EE:85:65:85
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a8:d6:8e:06:7d:fb:13:03:60:5a:63:be:1e:94:6b:0a:a4:
8c:15:f0:31:15:fd:7c:3a:16:19:94:a6:10:03:fc:11:d9:ad:
16:93:63:9d:13:ea:92:82:c2:61:4e:76:ec:7a:04:79:11:95:
4e:b9:ff:e0:01:03:fe:2c:64:d5:19:a9:c0:46:0d:18:d3:b4:
3e:5c:19:15:6a:c8:2a:3b:c3:d4:cf:aa:8e:00:4f:7a:13:dd:
2a:6b:0a:1e:89:7d:6a:d6:2c:3c:5c:61:ef:f4:59:f2:90:a7:
34:1b:a5:45:de:ff:48:ae:3c:32:e1:cb:70:6f:30:fb:60:1e:
b4:3f:6a:1c:f8:8b:da:bb:d8:8f:1d:69:a7:a5:87:83:71:73:
9a:ee:61:74:2a:6a:85:b7:27:fd:58:cb:68:5e:c3:86:da:a8:
ae:c3:a8:54:0d:c9:df:ca:23:d5:48:59:f6:fa:e1:96:32:88:
d9:42:7a:34:6b:33:c1:8c:d9:8a:ca:38:62:46:f5:52:5c:f1:
3b:f6:a1:d9:c5:6a:3c:6c:2b:37:46:bf:3c:39:20:76:68:3e:
d4:69:c1:bc:bd:a8:0c:12:ab:e2:a4:67:7d:aa:4f:65:c7:6f:
8e:88:e0:96:cd:9d:71:3d:e5:77:ad:df:0a:18:a4:9e:21:3d:
bb:fd:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:20 2025 by rpki-client