Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: 4quWLPiQoVZfMuf40v5+ugxt3gzITOoE+1cUVWkmAEM=
Subject key identifier: 23:01:06:EC:98:DC:53:CD:49:5F:49:E8:F0:09:91:0C:68:49:B6:A4
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 0199269FEDBA7AB01F9DC7A8B25152DA6F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 1408
Signing time: Mon 08 Sep 2025 00:00:39 +0000
Manifest this update: Mon 08 Sep 2025 00:00:39 +0000
Manifest next update: Tue 09 Sep 2025 00:00:39 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: tYb8IKytxHiEZ0gSs5ExrCPYgee4iRLUxiSBEVDIfXs=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:9f:ed:ba:7a:b0:1f:9d:c7:a8:b2:51:52:da:6f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Sep 8 00:00:39 2025 GMT
Not After : Sep 9 00:00:39 2025 GMT
Subject: CN=230106ec98dc53cd495f49e8f009910c6849b6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:bb:f2:d2:be:d6:ca:92:c2:27:4d:25:a4:
ac:ea:71:9b:b3:f1:24:52:4a:d7:65:03:a0:32:fb:
09:2c:4b:c6:c3:c7:a4:30:5a:79:e7:68:1a:5b:64:
8f:60:8f:63:99:2c:9d:d2:f4:8a:35:54:c1:4e:5b:
2b:dc:47:06:88:bd:2c:83:d3:60:69:db:cd:b5:ea:
e9:e3:67:68:a9:59:21:87:1d:dc:07:2f:cb:cc:67:
9a:b0:5f:79:15:19:e2:45:2d:d8:be:35:57:65:52:
eb:b5:ae:62:7c:fc:cc:39:3d:7b:66:07:6c:94:16:
e5:6e:48:22:0a:4f:1f:a4:1c:5e:16:4b:43:8b:5a:
4f:61:65:d0:25:a0:d8:a6:ed:1c:2c:d1:e4:b8:49:
10:f9:49:eb:0c:29:bc:ca:92:94:c6:98:70:4d:ba:
e3:cd:d6:45:30:44:59:12:38:f6:9d:43:28:28:4a:
3a:b8:a1:2b:3a:31:72:95:da:1f:5f:85:64:5c:28:
4f:85:87:59:d5:1e:62:9a:90:7e:53:78:97:75:2f:
76:c0:3c:17:0d:af:be:32:e5:3f:0a:8a:5b:13:a5:
a2:40:53:1e:0b:51:4d:61:6e:a9:d0:86:4b:d6:25:
4e:ae:9b:21:86:52:0a:89:f6:3d:6f:44:a9:d8:15:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:01:06:EC:98:DC:53:CD:49:5F:49:E8:F0:09:91:0C:68:49:B6:A4
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:34:df:12:ec:f7:b2:39:29:59:12:75:7a:bc:bc:49:83:48:
b5:c1:6f:0e:4b:a4:85:31:b0:e5:54:a4:64:7c:30:95:1e:3f:
a0:18:e8:94:b4:d9:a1:e9:ce:b3:2a:29:01:2a:36:97:6f:e0:
58:f9:09:02:cf:d8:7e:09:df:7d:b1:bd:1f:76:b9:e2:6e:67:
06:26:b5:77:9d:89:95:be:ae:c6:86:c7:ea:17:fb:9d:39:c6:
82:98:78:c1:20:4f:17:48:a2:a4:a1:7b:70:ca:fa:e6:3c:6d:
e1:40:b9:27:03:35:b6:61:13:7a:4b:bb:47:84:a3:e5:0a:a1:
62:67:77:fb:25:59:98:32:06:96:88:61:50:76:00:9a:26:fc:
08:73:09:93:be:51:db:9f:07:65:d9:1c:6c:ac:7f:95:c9:86:
7e:28:c9:38:01:ee:c2:f6:2b:f0:2c:54:2b:29:bc:ef:64:98:
ea:dd:af:26:87:a0:51:3f:62:70:cf:45:ef:0d:ff:2f:dd:c7:
7a:a3:b9:80:bd:1e:93:76:4b:05:bc:84:07:50:f8:bb:1b:bc:
82:1c:0d:04:86:10:f1:a6:53:09:4c:61:df:b2:c7:a1:2a:3f:
1d:80:7f:13:f1:29:79:7a:54:35:f6:7a:17:41:75:70:1c:cc:
82:46:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:29:23 2025 by rpki-client