Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: J+xHByj0TuBvYeB/gNNvW11CfD2mTrADYtOfw+QdimU=
Subject key identifier: 44:7C:DC:F2:86:22:CB:A1:32:8B:9D:4F:A3:B7:61:7D:F0:3C:73:32
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 0199345B41E8E891FD02D72B0B19E2B13C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 15AB
Signing time: Wed 10 Sep 2025 16:00:19 +0000
Manifest this update: Wed 10 Sep 2025 16:00:19 +0000
Manifest next update: Thu 11 Sep 2025 16:00:19 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: lOdGna/bVeqoJ4THnkIHiDkPKRsyVJYkiLGqlAnTprE=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:41:e8:e8:91:fd:02:d7:2b:0b:19:e2:b1:3c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Sep 10 16:00:19 2025 GMT
Not After : Sep 11 16:00:19 2025 GMT
Subject: CN=447cdcf28622cba1328b9d4fa3b7617df03c7332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:e7:ec:fb:3f:c6:00:17:c5:ee:28:f1:c0:
31:e4:7c:f7:92:e4:18:b2:6b:76:51:31:6e:4c:de:
ad:59:a5:6a:4a:51:57:31:98:74:fc:e5:73:79:b1:
16:6f:03:7e:a6:f2:db:01:b7:cb:74:1a:b5:5f:69:
28:d0:ad:66:9f:0f:0c:fa:54:50:ab:8f:cc:0e:0e:
2d:a9:b1:a8:6e:f9:71:73:3c:06:80:0e:aa:0e:06:
f8:43:0f:d6:80:a8:85:74:09:d9:44:e7:72:75:6b:
4f:22:8f:19:42:09:b8:41:fe:31:9f:5b:c7:6e:0d:
55:24:b7:c4:e7:53:34:ba:27:68:c3:c7:e2:bb:e9:
49:19:05:5c:cb:6e:42:4b:05:8f:71:7e:27:21:30:
89:c3:a3:7e:64:27:1f:80:b7:2e:e1:67:e0:d6:f7:
bb:8c:1b:ee:eb:51:04:07:b0:3a:07:a5:81:9f:9d:
35:72:0e:2a:46:8f:4f:5b:dd:3a:18:21:bf:50:b9:
8b:eb:74:a4:10:90:2c:53:c9:c4:6f:d1:74:b7:35:
53:50:25:cb:ed:bc:a1:c2:b2:3c:c6:e2:d8:ac:37:
00:6b:39:e9:07:6e:51:07:75:7b:18:83:8d:c7:d6:
e7:7a:e9:4b:9a:9f:c0:58:91:9d:ce:13:f5:3a:77:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:DC:F2:86:22:CB:A1:32:8B:9D:4F:A3:B7:61:7D:F0:3C:73:32
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a8:57:a1:fb:fd:71:e9:11:9e:ea:ed:7b:e9:56:d2:1d:19:
a9:81:21:63:40:98:5a:08:a3:41:e2:de:8f:7c:42:cc:c5:bf:
98:39:b8:19:29:9a:b5:74:4a:c1:5f:dd:f3:52:f1:6a:72:fe:
e8:36:0a:0f:47:e2:d9:b1:24:2b:79:32:08:0a:c1:87:c8:d5:
bb:b8:37:f9:b5:d0:44:51:e0:68:bf:c9:cd:5e:96:77:00:04:
f5:db:f7:46:0e:af:04:83:4a:f3:ed:ba:2a:61:ff:7b:71:8a:
6f:70:6a:c4:61:de:ec:9b:a9:a3:68:fe:f6:c2:5b:d4:07:78:
02:ea:88:17:ab:93:c1:d2:12:eb:40:ee:44:3b:02:59:eb:9f:
53:7a:00:ed:fc:7f:7f:56:70:04:ef:d8:4c:61:5a:e8:5a:e7:
83:8c:c0:56:f4:b6:22:4c:f5:8d:7a:12:9f:95:af:86:81:f1:
e3:09:4c:28:e0:cf:0c:1e:a7:27:0b:6c:ff:49:d5:bd:81:29:
50:5c:a6:76:3f:a1:1d:bf:2e:59:08:0e:8a:da:ef:a4:43:2d:
5f:1d:f9:fd:42:b7:97:d6:c0:a8:d0:10:9f:10:84:0b:ea:1b:
f9:74:5a:41:ad:d6:77:0b:84:6b:f1:b1:c3:16:fd:e6:70:3a:
c1:44:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:01:24 2025 by rpki-client