Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: w0D11/qeGmgpg9MKbOAawoKJOxkker6txNUU1gFuILA=
Subject key identifier: 98:A1:F4:37:B4:D0:5A:DE:77:35:10:C0:AE:77:90:79:43:6B:8F:54
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 01992CD8EFA78A37ABF45183D0832C8418E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 0644
Signing time: Tue 09 Sep 2025 05:00:38 +0000
Manifest this update: Tue 09 Sep 2025 05:00:38 +0000
Manifest next update: Wed 10 Sep 2025 05:00:38 +0000
Files and hashes: 1: 8ydd8JZX5EAnrnnw2HV2rHK_3p4.roa (hash: j4GR32txclZSQHedOrcHnmy9IerE3851xb5yxFpNcdg=)
2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: x7lOJmU0ss+4ZQoufNBphTzLNftQ0O/BK2bbU8rIHwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:ef:a7:8a:37:ab:f4:51:83:d0:83:2c:84:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Sep 9 05:00:38 2025 GMT
Not After : Sep 10 05:00:38 2025 GMT
Subject: CN=98a1f437b4d05ade773510c0ae779079436b8f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:b0:0f:9a:ca:8c:8b:65:6d:f3:2a:ac:9b:
56:ba:ed:48:49:bf:6c:b5:6b:72:ac:13:52:94:7d:
8b:f0:22:76:c4:52:79:fa:8b:bf:59:9c:a0:63:07:
3d:55:35:fc:2f:f3:ad:02:bc:6f:96:38:c0:85:7f:
97:ac:92:c9:31:e2:b0:f1:a6:fb:ad:18:05:ab:36:
25:cc:5f:d2:0c:3f:90:3a:7f:55:e2:05:30:46:71:
84:3c:33:19:9e:69:93:e1:87:7b:ef:ed:34:04:03:
cf:4b:55:06:ae:03:33:09:99:c9:a5:21:9d:60:5c:
1b:98:80:66:5e:47:f8:09:57:3d:19:cb:84:fe:86:
bf:29:df:ab:30:05:96:62:f9:39:30:96:76:51:4d:
f9:d7:b2:f1:11:70:cf:d3:63:49:e9:cd:63:f5:a6:
a2:de:51:34:66:ae:0f:55:9b:cd:b3:97:36:01:53:
93:2a:29:22:5c:61:0c:3b:6d:1f:9d:d5:bc:36:e8:
4a:85:50:ef:e5:a1:eb:06:3b:2e:25:4d:1d:a0:17:
f4:6e:c9:88:16:66:e2:23:0f:bc:b5:fa:72:57:32:
9d:9c:6e:e4:83:56:e5:28:5f:1e:fb:49:a8:08:a8:
29:11:27:ba:37:6b:57:8f:ed:65:e2:43:16:7b:b5:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A1:F4:37:B4:D0:5A:DE:77:35:10:C0:AE:77:90:79:43:6B:8F:54
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7c:02:7f:19:cc:fe:f2:f9:f3:aa:0b:1b:5a:06:97:f9:4d:
04:26:33:a4:1d:e1:eb:b7:15:77:ee:8f:ec:f3:fb:50:1d:5d:
62:dd:8c:b2:b6:c0:97:bc:45:14:9e:49:8b:ea:cc:62:bf:4a:
63:48:13:ed:01:49:5e:9a:3a:f2:93:fc:ac:df:c1:8c:8e:d3:
a7:0a:61:6d:f3:ea:e6:ef:3e:73:fe:12:1e:2f:f7:df:ac:26:
f9:8c:21:27:81:d0:de:7b:54:d4:de:5e:16:66:08:d3:86:8d:
e2:4a:26:bc:24:01:33:a8:9a:f2:d4:41:2c:17:b9:3b:a2:ce:
a3:dc:5c:44:dc:66:c4:c0:74:57:81:4d:a4:6f:a6:0c:a8:a1:
d5:30:0d:9e:f4:64:41:ba:80:d8:8e:b0:15:63:25:8d:dd:42:
b9:dd:9b:2d:3f:5d:11:3f:76:65:e1:4b:1b:55:db:3b:00:84:
c7:09:28:56:69:a0:59:87:6e:70:f7:0b:0f:8e:bb:3d:4a:a3:
45:c9:8f:d6:9b:03:05:5d:5d:ce:9a:ed:40:58:0f:26:42:1f:
7a:1f:d7:6b:08:5d:f9:82:f3:a8:fd:d9:69:ab:f8:01:15:29:
80:54:1b:c6:0a:54:99:27:23:d3:04:da:80:55:1b:12:bf:c5:
52:59:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:38:33 2025 by rpki-client