Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: +S5l0EBq23Fnquda1erCmVOJINmFAo4Xq6e4X5rRfBw=
Subject key identifier: EE:45:B6:32:F5:DB:1B:DE:D5:AB:A8:6B:7F:B2:26:B4:07:57:A9:DD
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 0199326DAB5C1C25CF49B478530C5A3E15C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 07:01:11 +0000
Manifest this update: Wed 10 Sep 2025 07:01:11 +0000
Manifest next update: Thu 11 Sep 2025 07:01:11 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: 0nri9SJyqL2uEKNjCTJ2nU4LPqCBY0+iA2B6DU3f0TA=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:ab:5c:1c:25:cf:49:b4:78:53:0c:5a:3e:15:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Sep 10 07:01:11 2025 GMT
Not After : Sep 11 07:01:11 2025 GMT
Subject: CN=ee45b632f5db1bded5aba86b7fb226b40757a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:a7:45:e6:ab:77:c5:b3:4f:52:72:7e:64:
2e:88:83:d5:5a:51:2f:32:f1:7b:df:ca:9e:0c:5b:
a4:fb:08:de:26:6f:af:7e:96:7f:8d:50:c0:c6:9b:
86:35:24:89:90:2c:97:bd:ed:90:be:e1:18:0e:00:
1f:e8:12:7c:fe:df:fc:e7:a8:6b:ac:e8:f0:c7:f1:
f5:9c:b5:02:b9:fd:ef:71:77:c9:00:11:1e:e0:50:
07:cc:3f:e0:4a:00:71:be:36:a6:dc:58:c1:2b:a5:
6f:f5:6b:c7:ad:64:81:c7:8f:ed:10:d0:0a:ec:10:
69:d9:a6:90:07:5d:12:42:37:16:41:26:26:9e:05:
ce:30:79:c4:10:27:0f:fa:11:12:3d:e2:0e:50:64:
8f:a1:1b:10:36:5e:0f:01:7d:0c:05:44:37:67:86:
0e:07:77:3b:17:42:f2:de:5b:a1:3d:2d:62:ef:48:
ea:4e:18:08:1c:9b:1a:84:ce:1e:cb:a6:51:31:1b:
29:b4:63:af:83:85:7e:75:cd:49:87:4b:6e:51:cd:
14:7f:e4:5f:9e:6f:0f:61:94:30:13:98:ac:a1:43:
af:2e:81:01:b7:a3:ef:0a:c5:6b:99:d6:2f:63:9d:
61:44:2d:8d:96:50:3d:04:a4:39:5c:08:e2:3e:21:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:45:B6:32:F5:DB:1B:DE:D5:AB:A8:6B:7F:B2:26:B4:07:57:A9:DD
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:96:e2:03:53:7e:38:7f:49:a2:b8:ef:a7:eb:cd:f3:42:
dc:d5:db:65:aa:af:5a:ea:c9:09:b3:b1:57:8a:9e:24:c6:9f:
0b:23:64:76:3a:10:d6:7d:31:ca:91:5b:a2:34:8c:f1:f6:63:
86:f5:84:6c:dd:c0:ad:ab:35:5e:ef:ac:cf:74:52:ec:37:82:
87:dd:fd:f1:67:76:a0:29:88:32:d6:fa:0e:08:cc:47:ed:63:
4b:41:94:ae:f3:53:b5:35:b4:94:1f:21:a9:78:e2:bc:e9:78:
7e:5c:9f:2d:ca:29:39:72:38:62:86:8b:af:29:ba:bf:77:c3:
4e:d2:a9:b0:35:f7:52:80:0b:1c:0d:66:1d:0a:94:0a:e4:81:
6b:ac:15:5e:49:cd:b2:d8:70:4c:98:0e:b0:13:1d:06:30:2b:
00:a1:88:85:5a:a9:82:5b:8d:fa:86:b0:78:c4:6b:a9:34:1a:
28:95:e2:83:6e:0a:8a:9c:06:1b:39:f8:2d:aa:df:7b:55:a0:
25:4b:e4:25:10:d6:54:72:52:db:0c:85:3a:6f:56:13:df:c6:
9c:ac:f2:a2:b3:a2:a4:bf:50:55:df:da:88:77:26:63:48:18:
1f:32:60:78:2f:52:fb:dc:87:9f:cc:7a:78:e9:3c:3d:9d:4f:
c3:16:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:23:59 2025 by rpki-client