Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: lqK/bmW784P7xbJsK8Tq4VzkC+uGVOTIRryDUTP1fRM=
Subject key identifier: 8B:BC:D3:48:05:D3:1B:F3:76:A5:E3:FB:67:8C:A9:C2:85:17:EC:73
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 0199375C61221F7DCCBF8F05BBD8041D3200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 068A
Signing time: Thu 11 Sep 2025 06:00:24 +0000
Manifest this update: Thu 11 Sep 2025 06:00:24 +0000
Manifest next update: Fri 12 Sep 2025 06:00:24 +0000
Files and hashes: 1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: 6ZVrYmRt8pAvjrqLpvfZCuwsUwxCJcXoG90C3H9xBPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:61:22:1f:7d:cc:bf:8f:05:bb:d8:04:1d:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Sep 11 06:00:24 2025 GMT
Not After : Sep 12 06:00:24 2025 GMT
Subject: CN=8bbcd34805d31bf376a5e3fb678ca9c28517ec73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:64:fa:9c:55:22:ef:62:21:25:9e:06:d8:
e4:a6:d8:71:81:bf:fa:d4:08:a4:31:60:15:44:a4:
d3:05:af:71:9b:09:b9:20:1b:ed:c6:1e:7d:2c:ff:
41:e1:3b:b2:77:f1:22:19:33:b6:dc:eb:be:6a:c6:
d8:cf:58:bf:d0:38:c5:8d:66:27:98:47:63:6f:58:
d0:2a:af:7e:70:e4:4a:8d:29:e1:02:5e:20:79:6b:
00:a1:a8:b0:44:09:7a:c5:33:87:d1:2b:da:df:47:
8b:ad:73:c7:48:1a:e3:78:e2:24:74:1d:8c:d6:b5:
3d:da:89:24:76:ae:91:90:3c:ce:07:96:17:43:ed:
cc:ec:d0:b6:36:2c:af:b4:67:43:78:bf:70:76:5e:
c0:73:f8:3b:d8:f6:21:4a:ae:aa:41:ec:bf:17:62:
dd:4a:0f:c5:02:ac:b3:89:44:63:db:6c:13:69:cc:
40:41:59:40:18:83:52:b8:01:70:00:7c:61:71:20:
d2:6c:1e:08:9a:fd:7f:b6:f1:b3:91:48:85:9a:4a:
e8:bd:b2:cf:dc:3f:56:cd:e2:38:1f:6e:c3:25:56:
77:a8:f8:3d:b7:f5:93:1e:76:6b:4b:8d:bd:1c:f1:
b4:63:90:b1:e3:ee:14:c1:ec:35:5f:d3:fd:0a:18:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:D3:48:05:D3:1B:F3:76:A5:E3:FB:67:8C:A9:C2:85:17:EC:73
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7d:f7:ba:fd:31:57:46:b9:79:8c:5c:b0:c4:51:40:1b:65:
7a:14:93:08:5a:61:5a:f2:09:7e:0c:d9:93:2c:38:4a:ef:56:
71:e6:bb:13:11:b7:bf:ca:d6:2f:8a:89:c8:58:f0:39:33:1a:
79:9a:e5:92:fe:4b:d6:9f:df:79:55:16:19:15:0b:38:fa:ac:
34:5a:4a:b2:cb:25:2a:0e:27:37:56:9b:72:3e:36:76:7b:2c:
f9:02:d4:ec:a0:65:a1:9b:27:4e:43:d5:53:af:91:2a:1b:ee:
10:30:26:d2:78:ab:3b:40:b8:4f:ff:f1:b5:8e:39:90:a8:fb:
1b:82:b9:50:c5:17:4e:2b:19:b3:9c:da:39:c6:74:d4:2d:01:
07:77:d8:f8:e9:a1:4e:10:0e:dd:b8:7b:99:24:b8:a1:66:20:
3e:84:6e:d8:80:b0:6d:9f:7b:a0:3b:1a:3b:3e:0e:3d:cc:fc:
1a:81:32:6e:10:5c:b4:29:30:8f:4d:e1:70:5e:ae:c2:2f:dd:
4f:f7:89:dd:3c:11:da:99:1c:dd:de:5a:d7:ea:9e:76:d8:d0:
4a:4d:3b:17:ea:eb:51:e5:12:9a:0f:bc:e8:de:b7:1d:a7:21:
f5:14:97:48:c7:8b:ab:69:3a:27:38:16:8d:83:eb:f0:d2:b2:
35:11:83:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:26:39 2025 by rpki-client