Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: TutUyFZJcc7nQ5C08yf51Y3BdZGQ4fSVREVQNeimIOc=
Subject key identifier: DA:21:A9:24:1A:16:92:65:7E:77:A2:6A:72:FA:57:D5:46:14:DE:05
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 0198684C41DD81EF55629A5EDDD60FDC9C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 1612
Signing time: Sat 02 Aug 2025 01:01:24 +0000
Manifest this update: Sat 02 Aug 2025 01:01:24 +0000
Manifest next update: Sun 03 Aug 2025 01:01:24 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: 1DLhm8yWUjrKDn76ZrWks8UVM6pufchBnGgxiCcuWdc=)
2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:4c:41:dd:81:ef:55:62:9a:5e:dd:d6:0f:dc:9c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Aug 2 01:01:24 2025 GMT
Not After : Aug 3 01:01:24 2025 GMT
Subject: CN=da21a9241a1692657e77a26a72fa57d54614de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:19:27:e6:cf:6c:e0:10:73:f3:81:93:62:
1d:48:31:31:eb:3e:e8:6b:15:4a:c3:d6:38:b2:dc:
45:43:71:b3:ea:30:84:f3:b1:13:3f:6d:d6:88:be:
f3:94:e8:33:83:bc:4b:4f:18:37:eb:48:41:b2:dd:
85:54:e9:1a:f9:46:40:0d:97:54:d6:48:9d:25:11:
b4:f3:fa:c8:c7:4c:18:be:24:dd:5c:fd:ad:2e:05:
4b:0e:df:5e:53:8f:ad:9d:1e:35:01:b7:ba:55:87:
a4:71:98:31:40:d2:7c:b3:e6:73:17:ae:18:13:a1:
4d:df:95:0c:4a:c3:5a:0d:c5:00:f3:60:b8:33:15:
fb:fa:da:26:15:f2:9a:00:02:c2:ef:c8:87:77:b2:
af:d4:90:73:98:2c:87:e1:25:e4:14:f5:08:04:48:
71:2d:3f:cf:ea:d7:e7:91:e3:9a:e3:bf:31:11:a5:
0e:55:9c:c8:f1:9d:9c:61:cf:1a:58:d9:fb:1f:57:
c9:cf:8d:ed:63:1c:74:3e:08:98:ea:ec:e7:7f:b5:
cc:29:e8:28:3b:bd:2c:e0:b3:a7:11:d1:38:e1:7d:
14:22:62:9f:71:22:f6:52:63:86:0b:8d:79:12:f6:
85:5c:fd:eb:77:5b:9a:f5:b4:9a:ba:0d:7a:89:ff:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:A9:24:1A:16:92:65:7E:77:A2:6A:72:FA:57:D5:46:14:DE:05
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e3:12:fe:78:e3:d1:1e:0e:06:b7:b3:5a:b5:1f:18:bb:c4:
2d:1c:cb:c7:76:25:3a:ca:06:70:1f:32:b3:7c:ba:a1:79:c3:
68:d2:aa:6c:81:29:8a:26:ec:09:0e:d2:34:53:85:75:92:76:
09:2c:c5:e9:c0:83:38:0f:2b:25:09:ab:2f:a2:5f:2e:19:3a:
26:23:02:30:a0:64:dc:17:d1:b1:a0:7b:00:a7:e6:0b:8f:e0:
db:25:9e:7f:ce:88:b7:fc:c6:a0:5f:aa:d7:8b:f1:71:af:f2:
e1:bc:5c:d9:f0:2c:43:2c:ae:34:31:f8:ad:f3:bb:94:95:8b:
ea:ab:16:22:cf:27:60:af:a1:25:aa:9f:8e:03:3f:f6:56:d5:
ef:b7:8a:9e:0e:11:93:3e:a4:59:1d:a5:53:56:6b:2f:cb:b6:
b5:d3:59:bd:ed:e1:0a:84:38:61:0e:ec:fe:3c:ce:cf:3c:49:
2d:59:81:66:f1:9c:b3:a8:d3:e8:68:1d:c2:d4:fd:0b:fd:21:
aa:d1:78:ee:f6:df:af:5e:ac:c3:30:a1:2e:f8:4a:f0:41:7b:
5c:c5:67:ca:87:62:77:5f:32:7a:1e:b3:f8:50:1d:a7:33:35:
07:03:f0:84:60:d3:6b:a5:38:a5:d2:a3:24:e7:ab:a5:10:b5:
e1:ef:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:53:20 2025 by rpki-client