Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: jWjUo5tvTuhakn+LRSuc9UhOhzGu8C6YFxBe1Z10LLM=
Subject key identifier: 6B:72:08:F9:14:88:33:55:C3:09:09:1C:58:23:E7:B5:2C:04:F5:2D
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 019921E7F0DBCAEF6BE278A3F768C1C0A3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0C45
Signing time: Sun 07 Sep 2025 02:01:12 +0000
Manifest this update: Sun 07 Sep 2025 02:01:12 +0000
Manifest next update: Mon 08 Sep 2025 02:01:12 +0000
Files and hashes: 1: 9DaFft1ZRBebRPooZGGkOPjqAbQ.roa (hash: lYC82jjgh3RxcDkcuO3IXX6eKV+DE4TIh12Xui9zOW4=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: yf+i9N2NKSPF+P4bEBG3AXbuZha2WpPBFlpLKgiA6W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:f0:db:ca:ef:6b:e2:78:a3:f7:68:c1:c0:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Sep 7 02:01:12 2025 GMT
Not After : Sep 8 02:01:12 2025 GMT
Subject: CN=6b7208f914883355c309091c5823e7b52c04f52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:4a:6b:64:4c:5a:71:91:e9:fc:a3:df:6f:
c4:fe:5d:3c:2b:cc:89:b5:c5:46:19:fd:b2:ae:34:
62:7b:dd:a6:c0:39:8b:a6:9b:21:82:09:43:37:96:
4b:95:41:0b:87:98:8a:c7:7a:16:16:2b:4d:c8:b6:
34:0d:ed:ae:b7:db:75:16:55:72:68:d4:dc:bc:d4:
16:5e:ac:1e:5d:74:ba:b1:a2:b7:9e:94:1b:a7:3d:
d3:b9:79:42:18:da:f2:e3:8c:02:5e:78:dc:f6:8a:
9f:54:90:03:54:38:5e:ac:18:c0:8c:62:5a:9a:2a:
27:52:ad:03:ca:cf:b2:12:72:65:bb:aa:c7:4d:83:
d6:75:69:9c:b9:0d:27:be:a2:df:e2:a3:f7:4c:d1:
2b:d4:c1:20:11:c2:2c:d1:67:1b:8f:2b:30:92:17:
80:14:1b:48:e4:57:4f:aa:6d:9f:ba:f0:c4:bb:6c:
d4:41:d0:9e:b3:df:5d:5e:c2:be:e5:6c:47:ac:69:
a4:ad:24:78:c0:3d:74:2d:e3:24:03:1b:14:10:44:
c1:07:6b:d5:71:25:43:cd:cc:7a:45:92:24:96:ad:
d9:34:c3:52:b0:96:89:27:95:73:56:b1:af:12:d4:
4e:d8:ce:e4:ed:eb:65:b2:5d:fa:dc:2f:72:f8:33:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:72:08:F9:14:88:33:55:C3:09:09:1C:58:23:E7:B5:2C:04:F5:2D
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a7:22:89:b6:64:9e:d3:b7:fc:8a:25:37:21:f7:72:30:92:
f8:63:be:0b:29:1d:d0:5a:5e:08:fa:32:d6:9a:f8:89:0b:d4:
1f:47:97:1f:ae:5d:1f:62:1f:80:42:6d:5f:f6:ed:93:cd:80:
3e:2d:3a:0b:2c:83:80:84:53:ed:a6:07:98:70:4e:17:cb:d0:
ae:09:53:80:65:cb:23:8a:62:0f:e5:1a:d8:48:87:bd:38:01:
7f:09:38:65:36:9d:9a:55:08:95:b3:b2:82:d4:46:1b:c7:df:
7a:08:fb:19:01:ac:d9:a2:85:21:92:53:82:13:0f:3e:f1:98:
1c:e9:5e:23:86:e8:89:ce:0d:eb:33:59:b1:9b:00:6c:e7:3c:
8f:3e:02:2d:b7:74:27:8f:40:58:10:69:9f:ee:d0:d8:83:ce:
ed:83:b8:5e:ce:c0:1c:00:2c:2b:b5:5d:8a:94:bb:bd:df:11:
ac:d0:ca:f9:87:8d:62:56:af:06:21:40:52:e3:73:60:a1:c3:
8d:ee:48:d3:7b:c7:64:d9:e4:f9:5e:c2:d2:14:18:dd:97:08:
4e:62:8a:8d:7f:85:a8:5f:91:bc:a2:cd:bb:62:6e:62:94:03:
01:51:6b:d3:a6:5c:4c:e5:c3:04:44:58:45:a2:14:6c:23:b7:
bb:cd:4d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:37 2025 by rpki-client