Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File: QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier: W4hTLuL1xHSESTiLeEHZC3nQfnzF76dE4uNWzagwXEA=
Subject key identifier: 70:77:E8:89:31:83:4F:BB:5F:B2:F7:5B:0B:D0:0D:55:3F:DF:D6:E7
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 019927E9FAF67E5AD3052AFD60662808FF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number: 08DD
Signing time: Mon 08 Sep 2025 06:01:09 +0000
Manifest this update: Mon 08 Sep 2025 06:01:09 +0000
Manifest next update: Tue 09 Sep 2025 06:01:09 +0000
Files and hashes: 1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: XY9fByePFKyQZpcvdq0GaEakwo2+tbq6aSNvNxIDWUQ=)
2: bysUciiIqYU9vJ8UfK9pbwZkqG0.roa (hash: JZVYwqtyAp0nMHO1FDIE6qYD96KGmAzDi7aqiaMlMrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:fa:f6:7e:5a:d3:05:2a:fd:60:66:28:08:ff:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: Sep 8 06:01:09 2025 GMT
Not After : Sep 9 06:01:09 2025 GMT
Subject: CN=7077e88931834fbb5fb2f75b0bd00d553fdfd6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:ad:06:5b:34:1a:0e:50:4a:26:3d:70:6a:
7a:75:c4:16:23:a9:1d:96:79:3f:b4:90:54:ad:a3:
e3:9c:c2:a3:6b:23:3f:0e:70:e3:58:76:ce:a5:5d:
b4:a4:ef:6a:8d:12:5c:f5:f6:a0:f6:f9:a5:9e:67:
e2:2f:4b:7e:45:1f:2a:d4:6b:49:2b:aa:5c:07:63:
42:7e:35:09:41:cd:5f:b8:99:83:ca:5e:79:d1:56:
2c:6d:30:a8:03:db:69:4c:18:75:42:e0:cb:5c:25:
76:9f:40:64:f9:97:2e:c9:dc:48:2b:20:f3:12:9b:
a2:62:18:f2:a1:56:69:2f:46:a9:3b:bc:17:13:cc:
99:be:53:fc:a1:ed:1e:96:60:c4:45:14:ff:8a:0d:
0d:45:27:75:2b:1a:5f:6c:90:c5:ef:d5:a6:7b:89:
1f:dd:4b:2a:97:2b:94:1e:f1:3d:4f:85:76:ac:b2:
3f:50:26:36:4e:17:ea:60:9d:51:2f:af:ab:6a:32:
8a:57:6f:70:aa:5f:ba:b9:dd:b2:b7:77:10:b5:0b:
1e:b2:dc:02:a2:8f:41:29:d5:4f:5c:c9:4d:33:c4:
6c:00:66:38:25:3d:d3:94:d2:f8:4d:dc:93:1d:fa:
c0:28:93:d4:8d:fd:5c:62:c2:62:00:7d:05:b5:3b:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:77:E8:89:31:83:4F:BB:5F:B2:F7:5B:0B:D0:0D:55:3F:DF:D6:E7
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:07:8a:ba:dc:00:cd:45:a8:02:45:e8:41:dc:cf:e3:a2:
f1:e1:70:b8:d1:ea:2c:26:94:84:60:02:4c:c5:d3:62:28:1f:
66:97:07:7b:6b:9d:9a:f1:86:3e:eb:16:24:48:08:12:23:d0:
a7:32:dc:7c:89:43:98:16:e6:71:9d:77:7a:1c:58:99:0d:ba:
88:f8:36:eb:cd:46:2f:5d:bb:e1:bd:d1:2f:17:da:71:21:a9:
21:5d:0b:bc:70:d1:33:e3:52:b3:cc:b0:10:bf:e3:bd:07:96:
12:ed:4d:aa:37:4b:ad:1c:3c:7a:3b:0b:d9:e9:a9:7c:22:9e:
3d:e4:11:64:eb:bf:79:b7:b8:ef:da:8e:10:e7:af:67:9f:a1:
88:79:b7:18:cc:9a:c1:1a:2f:71:c0:06:35:da:9e:2f:70:f7:
2d:a2:01:85:15:fb:d6:be:3c:94:d7:e3:50:94:f4:89:1b:1a:
96:19:7f:1a:91:ce:a9:5b:81:45:a3:30:17:c0:83:89:56:9b:
b6:18:fe:46:57:d1:0d:70:3d:2a:c7:a5:7f:28:fe:62:a2:14:
65:1d:b3:d3:83:ac:78:91:6e:83:9a:46:b0:39:2f:31:a8:5a:
75:23:df:5b:20:d1:0d:a3:ab:b2:1a:fc:8b:f2:98:67:b2:a3:
eb:d9:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:12:23 2025 by rpki-client