Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: KmiIYuaP3x6uGGyCORU2DzRraEH9VXPXPHnFQ+7LHfg=
Subject key identifier: 1B:A1:EB:DA:A7:88:8F:78:CD:EA:8D:0F:8A:FF:4A:9F:13:92:88:05
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 0199228CF875F4D39DCCAF7AF5497D7B1847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: cqpMH7f4AYvzUJwQBwcXIXLOFkIr5ob1/TWLu5jcfB4=)
2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=)
3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f8:75:f4:d3:9d:cc:af:7a:f5:49:7d:7b:18:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=1ba1ebdaa7888f78cdea8d0f8aff4a9f13928805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:9e:36:5b:08:5c:2b:c0:01:aa:df:04:7a:
a7:fe:bf:70:4b:8c:26:8d:e3:30:a6:2f:20:72:ba:
89:5e:2e:db:47:b0:a2:dd:37:b4:1a:7e:68:95:7b:
2b:ac:c7:46:1e:0c:c7:07:61:e0:08:6e:b4:d3:bf:
01:e3:6e:a0:49:f7:00:fd:6a:a9:f2:a6:bc:48:db:
52:95:a0:4f:32:41:9e:c1:8b:99:00:56:cc:ee:15:
4a:9f:31:d8:72:b2:62:e7:df:4d:98:23:3d:7b:ce:
ee:80:ab:4c:b8:6a:83:3e:9c:3c:92:66:78:37:e2:
dc:58:54:a7:3d:24:fc:f8:0a:83:26:f3:d4:96:62:
a3:a7:9b:fa:b7:36:91:40:ed:b4:f2:22:f6:fc:aa:
c8:3f:a8:51:8e:62:65:d5:a2:ee:86:77:57:9c:69:
7d:f8:fb:c5:fb:5a:a1:a3:ae:39:4e:63:f3:b5:88:
35:8c:e6:1d:f3:dc:4e:31:48:a3:be:7a:69:56:51:
bd:b2:f1:5a:84:ee:a4:28:6a:88:3e:4b:e7:ff:e7:
6b:6b:d2:47:e4:9e:07:59:ed:e4:32:01:b1:7c:e8:
9a:68:ae:40:dd:43:46:63:81:1e:a4:c8:58:4f:1b:
9c:ba:44:b6:a0:fe:84:13:6c:0c:8c:14:f9:a8:ac:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A1:EB:DA:A7:88:8F:78:CD:EA:8D:0F:8A:FF:4A:9F:13:92:88:05
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:46:a2:95:9e:6b:91:23:80:13:61:15:0f:1f:aa:da:11:a9:
d6:d3:32:2c:ab:25:43:31:9b:a1:9e:ef:61:24:6e:be:9b:a6:
69:4f:59:66:c4:86:7a:82:05:32:ef:6a:ce:06:25:03:e5:af:
3b:ed:1f:c4:56:85:ac:e7:8f:8d:a8:ae:e7:39:62:3e:db:9f:
13:21:70:67:e4:7c:51:1f:eb:db:cf:06:35:be:b0:25:d8:3b:
80:ff:84:0b:d1:c4:99:b9:37:39:2b:6a:c2:95:1c:ac:aa:8e:
86:7f:b1:45:6a:dd:4e:a4:57:ea:55:3f:ad:ce:9d:a3:10:81:
58:2b:01:ef:46:b4:75:32:ce:84:88:71:2b:b3:7b:d7:58:af:
8a:30:b3:bb:fc:88:d5:f1:ed:f3:af:33:09:5f:ad:4e:98:99:
1d:69:84:6a:5d:66:99:d1:07:2e:84:7e:49:95:32:87:e4:b9:
e1:a5:a3:4a:a9:48:37:a7:c4:89:6a:f5:67:19:72:58:ab:3e:
d9:4a:45:c2:d9:25:39:22:3f:15:a9:45:9e:3f:93:ea:fb:04:
6a:a1:4c:1d:8b:8f:2a:ec:68:74:e3:cd:15:d9:f4:e9:82:6b:
48:7c:4a:c0:7a:e0:e4:50:03:c3:fd:1f:e0:de:4c:e0:66:c4:
1b:f4:c3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:05 2025 by rpki-client