Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: nE5O0XCzWTPC8j1YxHtZD8KBWvDvqYz+gzp27QXYqbA=
Subject key identifier: B8:2E:FA:6A:4B:B5:20:8F:88:35:14:80:72:3F:0A:39:3D:60:67:47
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01995BA0EC04DFC9E65FD949690C0A64FF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0AFD
Signing time: Thu 18 Sep 2025 07:01:36 +0000
Manifest this update: Thu 18 Sep 2025 07:01:36 +0000
Manifest next update: Fri 19 Sep 2025 07:01:36 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: lCiO7Np9+tRiarR0aGGjY5D6xY1sn13o4y5bMlE+wHQ=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:a0:ec:04:df:c9:e6:5f:d9:49:69:0c:0a:64:ff:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Sep 18 07:01:36 2025 GMT
Not After : Sep 19 07:01:36 2025 GMT
Subject: CN=b82efa6a4bb5208f88351480723f0a393d606747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:60:d8:26:c6:bb:56:90:48:c2:25:1f:c7:
c5:4c:77:fd:8e:fb:c8:ca:92:7e:5c:a2:de:05:8e:
f4:4a:38:fc:b2:e4:85:6d:f9:9d:1b:79:fa:f7:89:
2c:12:de:8f:7a:74:d2:ac:91:e2:51:be:96:ab:d3:
71:89:a3:ae:d0:26:88:2f:57:6d:5e:1e:e9:cd:9e:
4d:5c:4e:7a:18:90:de:ec:32:03:e1:d9:0b:41:20:
b9:f7:c7:a5:bb:eb:3c:da:ac:e2:41:4e:56:1f:e4:
35:ab:d9:27:ac:00:c0:9e:92:0a:72:93:99:45:b0:
12:eb:f0:d8:db:91:8f:68:d2:78:82:63:72:14:7e:
ab:d6:17:e9:4f:d6:36:22:51:57:e2:de:cd:f2:10:
c6:e1:3a:9f:f2:c8:9e:15:20:8a:9f:09:7a:f3:ae:
e5:a4:b7:25:18:34:c1:ea:e9:e0:4f:0e:80:b0:6c:
4f:18:eb:89:d9:bd:00:04:f3:cb:cf:f1:90:92:94:
69:38:bc:9a:1a:c0:bc:5d:c8:4f:52:72:ff:e8:8d:
59:0d:98:f0:db:6d:6b:a2:72:5c:82:8b:fe:a5:d8:
cf:8d:3f:ee:14:2a:15:e1:82:96:ef:2f:f9:32:3d:
90:d7:64:f8:67:ad:db:ab:10:e9:93:02:59:3b:35:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:FA:6A:4B:B5:20:8F:88:35:14:80:72:3F:0A:39:3D:60:67:47
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:e0:fd:9a:9b:d1:f2:de:11:1b:cc:f1:52:5a:0d:75:57:
9c:b6:d0:f2:30:38:ec:77:54:0c:46:e2:a8:5e:52:ff:ce:cc:
4a:8d:a1:03:40:a1:bb:93:66:15:65:82:a7:8e:1e:96:6a:e8:
82:24:6f:8f:06:24:18:a1:09:f4:45:4b:ea:b4:ab:60:58:60:
9a:b1:42:ab:5f:46:db:74:46:c0:9d:10:64:a7:f6:50:89:59:
7e:e8:5e:23:5c:6a:a1:b3:74:25:09:9a:c2:5f:77:c2:1d:2d:
4a:52:e8:9d:9a:07:f6:a9:05:b1:a7:17:a3:9d:1c:da:45:f0:
7a:91:7c:95:5f:57:74:cb:a9:2d:28:4b:6c:02:db:d0:6c:4b:
19:37:6c:a7:1d:5f:fe:5a:f4:b2:b2:2e:0a:f5:fe:7b:a0:3b:
29:b7:fa:f3:38:d0:8e:f9:e4:0b:5c:46:a3:fa:55:aa:b8:63:
19:fe:0d:32:04:95:6a:ad:ba:c8:d3:4b:ac:95:a5:ab:65:3c:
a2:02:3d:bc:7c:5a:1a:3d:03:42:ab:5b:f9:02:d1:f6:e7:05:
a7:b9:6f:2a:54:ff:e0:e8:23:b9:f6:5f:bc:a9:16:03:15:7f:
68:79:da:24:14:39:13:dc:13:b2:97:40:14:8f:1a:f0:d2:4d:
1e:43:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:17:36 2025 by rpki-client