Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: NP5GrDG0E38cP/O2RwzE6YZMQorVsUv19qrPj8xaJTo=
Subject key identifier: B2:11:15:C6:3B:F4:64:5B:85:7B:C9:D1:02:5C:DF:A1:3F:94:92:27
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 019928208A2BFA7595B59E9257155EBD4621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0BD1
Signing time: Mon 08 Sep 2025 07:00:44 +0000
Manifest this update: Mon 08 Sep 2025 07:00:44 +0000
Manifest next update: Tue 09 Sep 2025 07:00:44 +0000
Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: M78f+L6PIaxNpWrTT8rSIlZ59y9pFN4J+VQ0c53jNsw=)
2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=)
3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=)
4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:8a:2b:fa:75:95:b5:9e:92:57:15:5e:bd:46:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Sep 8 07:00:44 2025 GMT
Not After : Sep 9 07:00:44 2025 GMT
Subject: CN=b21115c63bf4645b857bc9d1025cdfa13f949227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:9b:4f:b5:ad:fc:47:36:d7:60:cc:e2:9d:
6f:ab:c5:be:81:dd:2d:b6:56:9a:eb:fe:dc:f8:b2:
c9:71:98:c6:d3:cc:9b:3c:88:48:40:e6:33:2b:6a:
b2:21:b6:08:5e:7a:96:69:7f:db:2e:95:b2:62:84:
03:5d:a0:61:92:80:0e:70:bc:c0:ab:7e:35:48:3a:
fc:9d:4d:60:46:71:1b:6a:05:81:8d:e8:df:cc:50:
c3:40:e1:b5:59:ba:a2:e6:88:ad:3b:7e:73:11:4d:
82:87:89:7e:5a:69:54:e4:c3:40:26:be:d0:28:4b:
c8:bb:a9:74:ab:5e:1c:e1:7b:6d:e9:93:f6:12:d1:
1c:43:2f:9d:e6:76:73:22:05:1b:f1:65:17:83:55:
ef:f7:92:d0:5c:ee:2c:35:6c:62:7c:43:97:b0:dc:
d5:f9:0d:4d:bd:b7:1f:e6:ab:f4:e8:f7:16:f8:ea:
e7:05:8e:1a:9d:c4:91:00:34:1f:86:51:98:83:76:
55:c4:d1:61:fc:78:17:c4:e9:f2:a2:22:6e:5f:de:
bd:6c:c2:ce:57:98:5e:af:49:bb:06:d4:7e:7b:23:
b5:d7:97:02:2f:3d:84:8a:d5:8b:46:32:bc:57:79:
06:f1:66:c8:1a:8d:30:16:3f:06:f8:bb:6c:8e:b6:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:15:C6:3B:F4:64:5B:85:7B:C9:D1:02:5C:DF:A1:3F:94:92:27
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:29:8f:07:65:ba:be:b5:1b:65:21:74:83:4f:63:f3:00:3b:
3c:2f:a7:65:0d:d2:9b:02:ff:be:cd:55:77:e1:16:00:d5:ec:
2e:cc:d2:b1:be:b8:89:b1:0d:3e:a8:d1:29:5a:78:59:0c:52:
a8:cd:e6:b3:36:6b:67:b2:32:44:96:c6:f5:2a:93:8c:92:fe:
05:e8:bc:4f:3d:1f:e4:9b:d6:99:1a:52:ff:fd:fe:57:e2:a0:
8f:7b:63:a1:83:a7:3b:9e:fa:45:43:64:7b:3d:af:d1:77:8c:
70:15:4e:25:66:87:bf:85:a0:e3:f6:84:10:3d:3f:2a:85:8b:
44:fd:62:bd:70:02:a1:bb:24:76:20:1d:4a:28:e4:7a:c5:9f:
7c:b4:40:7d:05:4d:94:a1:c7:6b:f3:fb:ba:e5:9e:b6:1e:92:
52:a6:28:88:eb:5b:70:b0:aa:d1:32:0d:ec:80:8b:b0:01:b2:
52:60:33:0e:d4:52:56:f5:42:74:6d:bf:a4:f1:20:fc:4d:b5:
4f:94:3d:fb:71:cd:0a:43:8a:54:aa:4e:59:10:70:cb:e1:9b:
6c:d2:97:6c:c7:69:e3:b2:7c:3c:fa:16:ff:45:f9:e2:d7:24:
97:7f:ec:1e:2c:ff:8b:4a:c9:65:9f:05:7d:65:d4:70:7f:97:
a9:79:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:15:47 2025 by rpki-client