Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: NDNTwjbj6iDO4hW7gBxYL+iwVpjc3Nr3nHjFp+pzuT0=
Subject key identifier: 4F:43:2C:E8:AD:A2:36:84:F3:F5:49:E1:04:69:17:ED:C3:A1:41:D5
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 019923A0195D1B155F4A13365A2C25889615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 10:01:58 +0000
Manifest this update: Sun 07 Sep 2025 10:01:58 +0000
Manifest next update: Mon 08 Sep 2025 10:01:58 +0000
Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: JgMesexIoFI8E5C8/uCaLanE5Kfe1PJRS9fDw/1RKpY=)
2: gbHDNVxhp631JF7kQGHN7jVCQUE.roa (hash: vJG2GjwA3KMSIr2ScTupuKanJzuxl2pcpBm74i5fk/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:19:5d:1b:15:5f:4a:13:36:5a:2c:25:88:96:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Sep 7 10:01:58 2025 GMT
Not After : Sep 8 10:01:58 2025 GMT
Subject: CN=4f432ce8ada23684f3f549e1046917edc3a141d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:22:4a:69:bb:95:2c:48:a7:ac:57:74:66:
43:d8:a1:aa:9b:83:d8:6d:ac:b3:bf:78:0e:a8:93:
0e:14:bf:ef:85:5d:fa:9e:ec:36:2a:f7:73:57:7c:
1e:df:50:5b:96:41:66:11:c5:d5:04:da:7c:3a:09:
64:ca:a9:b0:99:77:90:57:ad:1e:3e:ad:63:41:09:
e1:bf:22:68:ee:72:22:f0:54:cd:2d:8d:3c:2b:45:
4f:f3:fd:df:c8:a4:6b:8b:8f:0b:05:5b:79:6e:03:
68:b5:92:2c:71:a0:c4:46:cd:c5:36:94:46:42:05:
62:0b:dd:97:e9:9e:8c:09:06:f8:dd:18:9e:d3:be:
94:9f:80:e2:f2:91:de:eb:c6:4f:27:3b:b5:67:e2:
a9:8d:f2:18:db:e5:b5:5f:d1:48:d3:22:64:ad:0f:
20:a7:ed:9c:14:1d:f9:a4:23:fb:1a:bb:ce:5c:c4:
bd:a4:ee:a9:b1:08:94:be:c4:73:fd:ff:03:8b:b3:
91:d6:6f:90:1e:d7:c4:f6:bf:27:6c:96:0a:15:15:
9b:38:cf:f7:17:3c:53:76:63:23:91:1d:a5:e9:16:
1a:73:f6:ef:4f:04:d9:16:6a:52:c9:85:32:13:72:
da:14:3c:25:9c:ce:5b:7d:e4:74:d1:3f:35:46:43:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:43:2C:E8:AD:A2:36:84:F3:F5:49:E1:04:69:17:ED:C3:A1:41:D5
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:14:39:7b:c5:18:7c:39:84:65:35:7b:ff:4e:9c:45:d3:2e:
7e:cf:52:e3:e1:65:ef:b5:ab:c4:74:31:93:77:d0:fe:35:c8:
34:57:e2:75:f8:38:82:30:f6:2c:f0:26:5d:61:f7:ac:79:b5:
86:b6:d8:7f:2d:f3:d8:5b:08:69:24:b5:43:a0:53:f1:b9:e2:
08:8c:bb:7e:48:e9:ce:dc:bc:65:a4:0b:5c:72:6b:82:e9:fe:
cc:b2:7d:c5:2f:4b:6b:79:3d:e6:39:ed:c2:9a:0d:b3:ac:e9:
c1:7c:08:d0:98:15:77:5b:c4:c8:da:3c:12:ff:8b:6f:cb:98:
c4:7e:10:09:69:5c:d0:ed:ae:5e:f9:13:bb:1e:14:7c:a5:b4:
e9:d0:61:43:85:87:6c:f3:92:45:f8:5f:f7:20:3c:f7:81:4a:
52:58:10:12:b0:38:fd:f3:51:3f:31:4b:33:ee:94:cd:f5:71:
66:4c:a7:57:a3:76:29:aa:4c:c0:1d:c9:3f:7c:f3:e9:2f:0e:
66:13:09:fb:28:f3:15:8a:3b:d1:43:8f:32:48:d1:9e:f5:b7:
fc:9b:d8:f4:16:ad:3b:fe:fd:97:78:97:04:b7:5b:d0:f9:11:
3a:ea:33:67:98:fd:23:8f:7e:d5:38:5c:cb:60:33:67:d5:39:
89:d2:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:37 2025 by rpki-client