Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: k4nYMuBH2OPBj/aQTFrRbsZ3TdcObpeGdmJ4yQPt954=
Subject key identifier: 6C:7E:D5:41:06:EC:93:00:E9:44:94:93:CF:8D:A2:E7:4D:76:2D:37
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 019921B06CEA86F1FEAB0DB01FD69DB3EDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 02FB
Signing time: Sun 07 Sep 2025 01:00:34 +0000
Manifest this update: Sun 07 Sep 2025 01:00:34 +0000
Manifest next update: Mon 08 Sep 2025 01:00:34 +0000
Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: SYct1Ac4lbtJQT7jRRR3rBfZFRuMc1OwJ2Ox8JUSgJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:6c:ea:86:f1:fe:ab:0d:b0:1f:d6:9d:b3:ed:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Sep 7 01:00:34 2025 GMT
Not After : Sep 8 01:00:34 2025 GMT
Subject: CN=6c7ed54106ec9300e9449493cf8da2e74d762d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:b2:f6:8f:89:09:3d:93:67:5d:38:eb:0e:
c2:5a:bb:de:9d:dd:05:c5:a0:83:eb:d5:85:1f:7c:
07:fb:b3:cb:8b:5a:0c:d3:98:91:e4:6f:85:f1:09:
e1:96:bd:87:8b:d0:a4:de:9f:e3:7c:f5:c4:dd:76:
e1:b8:ac:3a:ba:38:a2:37:2c:dd:83:64:10:e3:4f:
5f:f0:6e:27:5e:3b:34:98:23:b1:3b:4f:ba:6f:be:
bd:d9:be:07:0e:a4:11:ec:51:f9:2a:8c:1b:40:a0:
d9:5e:67:3e:e9:b4:c6:dd:9a:68:01:83:e0:7c:2f:
18:69:54:7c:1e:76:82:e6:26:af:2c:93:b5:b7:24:
0f:53:42:be:14:64:ac:bb:53:e5:80:90:c1:55:d1:
8b:6b:43:48:ab:ca:e5:a1:a3:61:9d:28:bc:1e:f8:
40:ce:14:86:53:52:a2:8b:69:58:a7:3b:6b:ae:f8:
02:88:8c:d1:40:52:23:3d:97:58:ac:49:0a:7d:b4:
02:8a:ea:6a:01:63:17:b9:7a:4e:35:18:54:a8:31:
6c:29:6f:69:29:41:72:5e:87:08:c2:53:57:63:d8:
77:dc:a7:eb:07:9b:3a:d1:13:c8:f2:7b:4a:18:84:
7a:b6:63:cd:f8:a1:53:08:fb:7f:97:44:b5:06:41:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7E:D5:41:06:EC:93:00:E9:44:94:93:CF:8D:A2:E7:4D:76:2D:37
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:dd:0f:9e:ca:67:3e:57:a9:7d:ee:17:43:65:11:bf:00:bb:
4e:1a:0a:8b:91:d8:55:51:54:49:f5:0c:7c:53:93:1b:e8:ec:
76:91:c9:92:39:f7:23:8e:98:14:61:47:00:08:0d:6e:55:5c:
6b:62:e8:7c:bd:c2:52:89:9f:87:6f:19:ad:aa:3a:7d:dc:45:
5e:e0:a5:45:fa:26:d1:df:da:1f:7e:ca:ed:e9:d2:cc:ed:21:
05:2a:2c:25:15:0e:40:a7:19:b7:fe:18:8d:1d:02:f5:56:5b:
7e:b7:a5:0e:bb:61:2d:e9:8b:ec:3d:68:b2:fd:9f:fa:e8:74:
27:41:8e:c1:be:72:17:73:1b:08:cc:77:a4:a6:25:cb:63:6d:
e4:b0:7d:63:a6:cf:a5:18:f8:ff:39:cf:29:fd:f7:9a:c8:25:
78:87:4d:42:c2:de:3d:5a:20:00:69:fb:4b:5a:0b:84:fb:24:
32:ab:5d:c2:ed:2f:40:70:5f:88:6b:0d:18:b4:42:b7:d4:4c:
3a:28:31:47:40:0f:c9:44:05:20:df:0a:7d:3b:ae:03:50:8a:
60:0e:da:5e:a7:21:ed:3b:a4:29:1f:7c:1f:a4:59:2d:8e:de:
dc:59:4c:b6:63:a0:77:ec:fd:35:fd:4e:cc:e9:e4:81:35:5c:
7f:00:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:51 2025 by rpki-client