Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: OvEQXdRLssD4Gg/r43ezZ9SymRAId4NDLXaLjk7jRvU=
Subject key identifier: C8:A7:51:7D:57:4D:9B:06:B7:55:A1:50:14:36:1B:BF:EF:A1:67:CF
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 0199221E4FB22EE76F23AF32138C47AB9B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: +CD6vrpD57p4S65sRnF4uzlH5H3hn+1Z2bDmmlGFRoM=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4f:b2:2e:e7:6f:23:af:32:13:8c:47:ab:9b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=c8a7517d574d9b06b755a15014361bbfefa167cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:bf:0b:04:9d:15:0f:58:03:1f:1c:6d:5b:
eb:a0:ca:68:26:d4:45:3c:d4:fe:31:04:0c:9e:34:
52:48:a0:c8:0c:8b:64:ee:75:53:b7:ec:8f:12:49:
4e:14:fc:e0:04:8e:ca:d1:b1:46:4f:c3:0e:c3:d9:
b8:6b:22:3f:1b:c2:f8:7f:f9:80:a9:4c:64:9f:c4:
ac:96:26:12:ef:36:31:c2:a1:61:88:00:dd:30:dd:
89:c3:de:22:ac:28:6a:5e:01:f3:90:f1:06:17:14:
f4:50:09:a2:e1:1d:12:18:c9:6d:7c:44:a2:35:ce:
e7:4a:4a:c0:10:49:bf:63:de:21:2a:a3:48:a8:40:
e6:a1:b1:33:02:54:d5:9e:74:a9:5f:d1:ab:2b:85:
23:08:a2:f0:02:94:d9:75:7e:fb:1e:9b:ec:4d:68:
f9:56:9f:3e:4d:c9:f4:1f:9c:16:c5:aa:3f:79:51:
59:45:de:ac:dc:15:37:25:36:ab:f9:0e:31:e9:40:
06:a7:e8:1e:44:db:51:1a:78:f0:1c:82:ec:bf:aa:
c6:42:41:ac:c4:1a:bd:9f:d6:46:54:6f:1c:b2:2f:
0e:1d:d2:61:ae:48:b9:e5:f2:96:49:9f:b8:0a:1a:
49:ef:83:96:eb:31:fa:39:d4:1f:3d:36:5b:ba:8c:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:51:7D:57:4D:9B:06:B7:55:A1:50:14:36:1B:BF:EF:A1:67:CF
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:16:c3:cd:1a:1d:19:d9:a0:88:3b:fc:b4:4e:08:76:dc:45:
f0:27:ca:f3:5e:00:a7:8f:f4:e7:64:9a:5e:1c:82:30:d1:c2:
d4:b9:25:96:69:d7:93:9d:39:16:06:ce:da:92:e2:b8:95:7c:
d7:98:5c:1c:42:b1:5d:54:cd:70:3a:63:32:a5:29:ff:52:63:
75:c3:0e:83:0a:42:38:37:b6:83:3a:3e:25:6e:42:6f:1c:ab:
ab:12:b1:2a:f9:18:cb:94:0b:c5:d7:59:70:fa:34:22:bf:af:
c5:05:ac:1c:97:41:e9:b4:fb:17:29:42:a0:b3:38:e3:5f:1f:
8c:48:85:af:ff:c1:af:26:7a:18:79:81:8c:94:c2:66:a8:18:
43:e6:72:7e:e2:d3:4e:3d:27:29:85:da:98:7c:b0:d7:66:7a:
16:fa:48:f6:d7:dd:ea:5a:bc:76:3a:b8:35:9d:d0:6d:d3:e4:
dc:05:7a:8c:9b:72:71:39:40:0e:58:a8:5b:82:04:c3:50:35:
12:f5:58:92:87:6e:0c:ba:ab:88:5d:0c:bc:6c:7b:38:24:c4:
06:ba:14:88:50:08:32:4e:14:14:be:e5:d7:93:7a:c1:f4:3d:
7f:d9:d2:37:29:46:a8:14:a0:67:f4:87:0a:db:32:58:2c:8e:
0b:88:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:26 2025 by rpki-client