Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: BIrlszP0rW+oFJbxqOiBDB4fiaMIBvbISsjcpn5tQnc=
Subject key identifier: ED:15:CB:65:9D:87:EE:4A:FA:15:60:BE:3C:64:44:72:74:9B:7D:AE
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 019927EA66B1E382A33D95330B5C24BD8E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 073A
Signing time: Mon 08 Sep 2025 06:01:36 +0000
Manifest this update: Mon 08 Sep 2025 06:01:36 +0000
Manifest next update: Tue 09 Sep 2025 06:01:36 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: 8bBNFSYrxF/1yOyHj8H5rMq+V7M/3piS7nk/kARh7f0=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:ea:66:b1:e3:82:a3:3d:95:33:0b:5c:24:bd:8e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Sep 8 06:01:36 2025 GMT
Not After : Sep 9 06:01:36 2025 GMT
Subject: CN=ed15cb659d87ee4afa1560be3c644472749b7dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:92:7c:1f:8d:4c:46:77:3b:40:06:2d:5a:
13:07:26:1b:bb:0f:7f:6d:fd:5e:44:3a:98:52:f2:
71:dd:3a:72:a1:41:5f:a7:85:85:7c:52:40:95:6d:
f2:43:01:cd:cb:63:f1:21:18:27:a7:08:52:a3:7d:
61:d7:34:f1:45:57:5c:f1:c0:49:45:47:64:8b:84:
ce:1f:28:26:90:99:55:80:cd:76:20:97:7f:57:c4:
64:21:c9:e7:88:a5:3d:af:dc:63:9d:bb:e1:a6:f6:
d2:4b:ad:c3:c8:9f:fd:30:5c:b2:df:d3:ef:15:57:
0a:2b:79:0f:9d:10:f9:d1:8b:bf:b1:a4:59:a4:89:
11:41:49:28:68:28:70:dd:d6:8c:56:a2:df:fb:a5:
c0:49:57:ee:c4:ba:aa:77:d1:f5:51:1c:17:a6:d0:
aa:68:30:78:3b:34:8a:7a:ab:67:cf:a0:f5:91:5b:
61:2f:92:c6:64:4c:b3:36:26:7f:4f:ef:9e:6d:b8:
c5:56:58:98:2b:e8:9f:8a:79:6a:84:d5:df:e5:98:
9a:77:89:84:0d:d3:89:96:97:21:82:a7:21:48:c1:
6e:b6:01:bd:53:7e:84:ad:4b:e2:6b:bd:22:21:bc:
3b:71:bb:3e:5c:df:71:64:a2:e1:f3:a3:02:ed:b9:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:15:CB:65:9D:87:EE:4A:FA:15:60:BE:3C:64:44:72:74:9B:7D:AE
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:75:2e:d2:66:f9:37:64:04:e3:a7:e8:00:b3:aa:a6:79:
6d:b3:42:da:aa:b2:6b:7d:80:1d:15:1c:3e:31:fa:58:39:68:
11:0d:39:86:c8:c5:5a:19:4c:ff:ec:77:19:6b:38:13:ba:4a:
52:3a:df:84:f5:75:26:d8:2f:61:ce:7c:cf:40:56:b0:6b:42:
04:ed:38:42:61:12:49:45:c9:df:8e:6b:9e:01:eb:5d:0a:a3:
14:0e:73:19:9c:f0:cb:46:6a:50:9e:ba:07:73:c2:1f:94:d0:
8f:80:ef:85:03:9d:c5:8a:4f:9c:03:9d:7c:40:d5:f9:ce:18:
27:0b:67:4f:a3:14:05:70:09:45:83:6a:fd:c5:53:4a:67:40:
ed:5a:de:04:72:7c:cb:04:3e:c4:c0:dc:54:fd:b4:9f:eb:90:
72:59:df:56:e6:85:ec:6c:4d:70:92:47:80:68:9f:1d:a4:4a:
11:f6:c2:35:c4:39:50:b0:61:8a:69:c9:29:d3:16:57:24:0c:
83:9d:e4:01:99:08:26:21:34:b2:d4:e5:62:ff:9a:4f:cc:de:
76:a8:db:99:67:0b:5b:71:f8:33:97:ba:a4:fd:15:54:3e:d2:
f6:56:5a:b0:5a:73:19:22:00:a8:58:36:99:ad:0e:a2:c5:bd:
f0:f0:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:06:21 2025 by rpki-client