Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: FGDBpk74bLNz5N09tmsznjJQXSzGCwEo6H/ItSBMH/w=
Subject key identifier: 2A:5D:91:BF:38:02:13:24:52:66:70:FB:5B:09:A7:A0:68:14:02:AB
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019921E752BB4F510712AC62D6FFE4C2D7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 134C
Signing time: Sun 07 Sep 2025 02:00:32 +0000
Manifest this update: Sun 07 Sep 2025 02:00:32 +0000
Manifest next update: Mon 08 Sep 2025 02:00:32 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: wiu9tLXVt8pXC94tccK/JFqtvV9/AT/SdeXeXQlJ10o=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:52:bb:4f:51:07:12:ac:62:d6:ff:e4:c2:d7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Sep 7 02:00:32 2025 GMT
Not After : Sep 8 02:00:32 2025 GMT
Subject: CN=2a5d91bf38021324526670fb5b09a7a0681402ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:f0:6b:49:32:1a:24:d8:a9:d0:d4:41:e8:
5f:d2:74:09:8e:3c:37:7f:cb:01:05:27:58:04:29:
3a:39:ab:49:fe:2b:b3:70:56:f6:49:9e:61:ee:ee:
21:5d:b8:9e:33:d6:25:3a:e7:42:d9:46:a5:f3:5c:
f4:b1:59:71:4b:cd:a1:bf:5d:26:9a:16:5f:be:b4:
3d:af:06:e2:70:12:0e:e9:81:91:14:a2:17:5d:eb:
ee:21:f5:2f:98:b2:9a:d1:66:be:8b:8d:63:b0:91:
98:36:08:f3:ce:cf:5d:a5:64:bf:6e:e7:b6:08:49:
80:2c:ce:30:b7:97:ea:e5:f4:67:0d:f0:5e:1b:58:
84:24:40:f6:dc:8b:59:d5:de:89:a6:8b:69:47:5f:
3a:9f:56:af:fb:a6:e0:5a:fa:96:90:13:de:b5:6f:
2e:cb:9a:47:69:46:af:69:98:0d:44:71:50:17:2c:
92:04:e0:a2:65:1c:e1:9a:c2:a4:2c:35:29:6d:e1:
82:cb:37:e8:3c:ac:b4:27:5c:5c:40:78:06:d9:d2:
cb:6b:ec:9d:da:4b:58:4d:68:16:66:df:85:d8:96:
c0:c2:5f:cc:cd:ed:f5:7d:65:b7:bf:e0:d7:7e:5d:
ee:48:29:79:47:4b:34:12:24:6f:a1:aa:89:ed:92:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5D:91:BF:38:02:13:24:52:66:70:FB:5B:09:A7:A0:68:14:02:AB
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:d2:a9:30:31:c8:65:70:98:32:f8:da:21:07:b4:e5:a3:
e9:65:a5:bb:9c:15:5a:01:fe:a1:c4:3f:07:9f:e8:a1:31:52:
f0:d5:16:e8:30:58:47:0f:19:8e:86:5a:49:b3:89:cc:60:26:
91:c1:b1:50:0d:29:a9:02:48:64:bd:90:fd:88:0f:9d:f7:3e:
88:81:a1:10:86:90:5e:e7:14:7e:f0:01:88:43:a5:e6:03:06:
64:3c:f6:08:33:9d:95:d4:f4:36:c7:38:2d:4e:6d:27:b5:72:
ce:a4:b2:6d:0f:4e:f4:e6:fc:7a:3a:fb:99:dd:0c:02:a1:49:
34:4b:ca:34:20:bb:89:fd:83:e3:1a:5b:f8:06:32:22:d8:b5:
9c:48:3c:93:cf:f8:3a:bc:9e:31:40:b7:27:85:74:ec:a1:4b:
be:c2:f5:99:b5:d6:4a:29:b5:4f:d7:2b:28:2d:e6:9b:5f:c9:
7e:b4:8d:83:1d:71:34:26:f7:65:48:76:f6:9f:22:46:be:00:
1b:50:dd:c1:59:c1:cf:1b:98:3e:ca:ef:c6:93:32:12:fb:54:
d4:28:d8:ab:bc:09:0c:1c:44:20:c4:d0:be:79:a2:46:55:3d:
74:7e:ba:33:2f:b0:3b:f1:99:db:d7:6c:b7:2c:41:a8:eb:d2:
99:83:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:28 2025 by rpki-client