Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: F3nM3AJo/BVBTaGuMg1gupKTJX5lTQJNer6L6wasovo=
Subject key identifier: 7B:0B:00:0A:B1:28:D1:5A:36:B0:59:4A:02:1A:29:99:7C:7C:76:EF
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 0199239F4B53EDF526686BA91011AC47BC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0A7F
Signing time: Sun 07 Sep 2025 10:01:05 +0000
Manifest this update: Sun 07 Sep 2025 10:01:05 +0000
Manifest next update: Mon 08 Sep 2025 10:01:05 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: wkJ4Qa9Xf5iFT+Qosk0m+Zl65ZoqdhX45z52q14gp9Q=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:4b:53:ed:f5:26:68:6b:a9:10:11:ac:47:bc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Sep 7 10:01:05 2025 GMT
Not After : Sep 8 10:01:05 2025 GMT
Subject: CN=7b0b000ab128d15a36b0594a021a29997c7c76ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:42:9e:97:22:3f:ed:28:f4:28:2a:1a:e8:
df:0c:81:f4:da:17:fd:06:5c:7c:f6:49:92:d5:22:
fd:a4:ad:73:35:06:dd:40:5b:48:19:d3:86:bd:66:
03:41:8b:ac:14:59:70:16:50:22:bb:78:c7:cf:e8:
d5:50:5e:a1:73:09:74:7b:47:31:38:21:a1:b5:72:
ad:f9:96:df:f4:aa:aa:0b:c1:7b:d7:62:4f:8a:bb:
a4:e4:3c:d2:1d:e4:0e:85:19:ad:b2:5c:5e:55:da:
84:cb:0b:c6:6a:a4:dd:29:1a:b9:41:33:15:93:47:
00:23:59:c4:48:9c:55:67:c6:fc:e3:26:94:b6:6c:
28:e8:da:6c:cf:6a:a8:fe:05:07:fc:1a:8c:43:2b:
67:b9:30:70:8c:39:04:c2:a1:c0:c3:ee:e2:b8:00:
ce:e8:a5:c6:e2:9c:94:ee:69:3f:80:a3:25:77:b7:
26:27:9f:ac:d0:90:f7:dd:7a:0b:e6:c5:8b:96:02:
8c:98:b8:65:fa:fc:a2:9c:2a:73:1a:65:65:c9:38:
e9:b2:f4:10:d5:c9:52:52:fc:82:7f:4a:d5:ce:dd:
d7:27:96:0c:6a:9f:b3:5e:3b:37:ed:34:92:3e:6b:
d6:ac:f1:8f:f5:dd:d2:15:61:56:56:41:f2:c4:1d:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0B:00:0A:B1:28:D1:5A:36:B0:59:4A:02:1A:29:99:7C:7C:76:EF
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fb:b9:01:4b:91:6e:98:86:10:9d:1f:42:de:c7:31:df:69:
dd:0b:3a:48:62:5a:ad:1d:ff:02:d7:e1:a9:a2:42:40:90:fd:
eb:e5:a8:3a:29:a6:fe:ae:9c:df:b8:d4:38:f1:e0:1a:9e:99:
b2:6b:c6:d7:5b:1c:d3:0a:3d:ca:a6:12:4a:b1:3e:04:31:a3:
3e:66:60:8c:2b:cb:d6:4d:b2:3b:ac:ac:62:ec:fd:5a:d5:8d:
bd:0b:b9:75:a4:36:8e:15:84:5c:c6:2b:da:01:c9:92:1e:83:
45:d0:1c:1b:60:3c:18:72:54:9d:39:b8:c9:c5:36:be:83:06:
da:0a:6b:b0:b4:42:07:ac:a4:5d:7c:65:fb:d8:22:d1:48:af:
a3:b9:6e:d7:ae:84:0b:dc:29:f0:17:00:cb:fc:db:30:37:9d:
b9:d4:7b:31:df:1e:b6:bb:ad:a6:2e:1d:b0:14:2f:08:d5:85:
49:cf:b0:c7:ee:af:bf:ed:e1:e3:f3:d4:ea:c0:65:07:f4:6b:
9e:47:d1:d0:34:86:1b:63:a7:ac:be:a5:04:b0:d3:9c:55:b8:
1d:11:a6:86:0b:59:ed:9b:38:19:94:ea:cf:75:03:7e:d8:3f:
ec:09:6d:06:98:36:1e:ad:c3:98:6c:5f:f0:30:09:dd:eb:40:
fd:b5:42:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:27:04 2025 by rpki-client