Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: BMXG8GGoZpcrVBKGW2aoNbP2RRnxUCN6jeaRvTPKYDM=
Subject key identifier: 1B:4D:5E:63:13:67:A3:74:36:40:8A:DC:9A:44:CA:24:2B:E4:92:8A
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 019922FA7BBEBDBFF880B5E4F2F7E9055F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 0FA5
Signing time: Sun 07 Sep 2025 07:01:04 +0000
Manifest this update: Sun 07 Sep 2025 07:01:04 +0000
Manifest next update: Mon 08 Sep 2025 07:01:04 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: +EWzDqXNcfaDaAuscMcEqVaDZh7HY0OaNrAgo+uWDqA=)
2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:7b:be:bd:bf:f8:80:b5:e4:f2:f7:e9:05:5f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Sep 7 07:01:04 2025 GMT
Not After : Sep 8 07:01:04 2025 GMT
Subject: CN=1b4d5e631367a37436408adc9a44ca242be4928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:9d:4e:c5:75:2c:54:b0:32:fc:0e:3e:3a:
8f:2b:d6:bc:cb:bf:93:5d:74:5b:30:f6:ab:53:22:
3c:64:90:46:43:d6:6b:e9:6d:82:4a:f5:ab:3e:7d:
c0:66:6a:f9:79:0f:31:c3:34:93:50:38:c9:50:24:
b0:d7:5f:01:93:40:0d:01:75:72:e0:b8:3f:fc:29:
2f:39:bd:5c:b4:15:ca:0b:f0:f1:27:f2:56:cb:f1:
54:45:71:a7:37:46:b4:8b:73:2c:d7:7c:c3:8f:48:
7c:f9:62:68:28:9e:20:57:09:4d:db:e6:d0:81:3c:
f7:e2:cd:bf:a8:1d:29:a6:97:71:ca:23:c5:0c:d8:
49:3a:cd:e4:e3:37:d7:6a:08:f5:6c:12:15:ed:18:
13:3b:fe:f6:16:17:88:3d:11:c4:82:89:b5:e9:66:
d7:c5:76:6e:5a:e2:ac:e1:ba:e4:47:2d:0a:ec:ad:
f9:e9:fb:05:9c:fa:32:9a:a9:f3:f9:06:3c:fc:c6:
8b:09:33:61:54:47:90:b6:e6:3b:80:a7:d0:58:5a:
c7:f2:71:2b:a6:17:e3:0a:27:48:7a:1c:bc:f2:63:
ad:34:fc:b8:42:49:1c:1a:09:9c:54:78:42:53:24:
8f:e5:fa:a2:9f:2e:88:67:2a:6a:4a:9b:40:c2:94:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:5E:63:13:67:A3:74:36:40:8A:DC:9A:44:CA:24:2B:E4:92:8A
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7d:b6:f4:89:eb:83:37:cd:b6:10:12:42:c0:a6:4b:10:14:
1b:d9:c2:7f:85:73:40:af:93:74:74:8f:52:d0:08:3f:dc:f4:
13:3b:a2:d3:17:ac:0b:9e:2a:95:09:52:3b:0e:93:fe:9c:9e:
a4:c1:d4:35:72:40:9b:06:2f:26:99:77:5e:a7:43:ff:9b:12:
c5:cc:05:f8:a8:97:cb:45:8e:fa:41:aa:38:d9:e4:55:0a:5f:
1b:05:cb:79:b8:0d:41:52:58:cc:b5:f2:08:06:60:91:d4:42:
fc:a9:66:89:e9:05:53:47:47:c9:91:65:6c:ac:1a:59:19:e3:
6c:c3:52:2a:24:35:9c:55:c6:42:d9:01:15:3a:5b:b4:b2:31:
d4:72:67:3a:ba:d3:11:7c:ae:d0:d7:29:e1:a1:a1:b4:c4:1b:
14:61:aa:3d:11:b3:75:29:c0:f8:7e:22:40:b7:4f:cf:65:2f:
7a:fb:2a:26:98:01:f0:20:87:da:ec:ca:8e:f7:7e:01:d1:cf:
ed:aa:5c:51:09:43:fe:29:e4:9f:92:ff:55:31:6c:f6:65:12:
a3:a4:e8:5e:67:73:16:48:70:85:6c:c7:b4:a8:0b:0d:ba:b1:
88:22:9f:2d:da:47:f9:22:f3:e9:2c:3c:7b:e0:41:14:2e:c8:
56:1f:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:58 2025 by rpki-client