Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: hIdnRTWnPIakHL8Cl3H9naP9NuqraIj4zU/LseoN2YY=
Subject key identifier: BF:BD:FF:36:E2:8A:93:DA:97:3A:25:69:2A:23:1C:2D:C1:07:44:AA
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019923313F6483F5005D33102ADE44C1441C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0AA2
Signing time: Sun 07 Sep 2025 08:00:53 +0000
Manifest this update: Sun 07 Sep 2025 08:00:53 +0000
Manifest next update: Mon 08 Sep 2025 08:00:53 +0000
Files and hashes: 1: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: sGDjCXLpS9HSBKElD9HNG3L62jRHJVU+jEHurLs3kMQ=)
2: VYdNzCUiezNHp2ipnAESpOT2GMI.roa (hash: eS/GCbx9AxDlVVMe7mfu+B9lQ77SLCep89Ufdacjmo0=)
3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:3f:64:83:f5:00:5d:33:10:2a:de:44:c1:44:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Sep 7 08:00:53 2025 GMT
Not After : Sep 8 08:00:53 2025 GMT
Subject: CN=bfbdff36e28a93da973a25692a231c2dc10744aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:ba:ac:a4:aa:b8:e8:3c:5e:96:f0:46:bb:
40:d0:ed:9e:00:d9:ca:08:5a:9b:99:1e:78:88:21:
df:14:96:42:0d:a2:20:fa:7e:9b:98:87:42:f6:87:
86:d2:d2:64:a2:4b:99:a4:15:6a:07:fd:c7:58:6b:
8d:05:a5:75:dd:79:03:df:60:b7:0a:67:41:c2:7e:
ea:8e:35:23:8e:e7:47:9f:2e:b1:92:ab:ec:98:ab:
c8:44:5f:2f:fc:42:39:e9:a8:96:8a:3f:b3:e1:92:
30:82:80:8e:f3:8a:47:f2:a4:12:a6:96:3d:c9:00:
42:41:8b:bf:8e:e1:12:e1:c4:25:22:b0:cc:ff:09:
6f:ca:e8:85:08:b0:d1:66:70:f1:2c:e5:d1:8e:ac:
db:bc:68:fc:c6:48:dc:9c:b0:cd:00:2f:45:f1:73:
b1:90:0d:5b:d6:e8:a9:10:43:49:59:4f:27:b1:da:
d7:13:e0:3a:f7:31:9a:aa:11:95:ed:5d:54:84:32:
b2:54:a0:ab:dd:5c:ce:ec:89:55:b5:a3:1c:2b:99:
6a:fc:6f:dc:d4:23:35:31:0c:cc:ab:69:2a:2e:11:
04:6b:1d:39:07:19:4c:c6:5d:7e:9d:78:09:4b:4f:
c4:de:03:9b:ec:0f:a8:be:3b:a5:df:70:21:46:ce:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BD:FF:36:E2:8A:93:DA:97:3A:25:69:2A:23:1C:2D:C1:07:44:AA
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ab:5c:5e:4f:b0:8a:91:d0:9e:97:08:b0:be:3d:67:26:8a:
32:a8:1d:9d:c1:aa:d0:88:e2:81:61:a3:5f:3c:6a:51:22:89:
19:b0:4f:57:4d:1f:4a:d1:87:ec:dd:67:5a:d3:74:6b:16:33:
91:27:71:03:dd:12:13:ed:9a:1d:ef:32:2c:23:3a:4d:b0:a3:
77:f2:ab:fd:51:15:0a:91:aa:e8:3d:90:26:a2:61:67:66:97:
01:22:4c:ad:3b:a1:81:66:51:17:e5:7f:10:bb:57:51:cf:1a:
cb:6c:74:c4:5d:07:b5:b0:bf:df:00:21:8b:54:5c:9d:09:ab:
30:3e:53:69:b7:c5:f1:c5:ac:eb:54:9f:53:9a:bc:7a:df:43:
8b:8a:5f:4c:f0:9e:15:b2:c4:66:30:98:0e:b8:d6:4a:06:01:
b7:b6:89:98:64:47:f3:5a:00:c4:52:c8:0d:2d:54:f5:97:a8:
6c:f7:0a:18:9e:ed:a1:f8:67:15:13:41:23:dd:fa:78:3c:6b:
95:1f:66:78:09:dd:ed:92:38:b0:d2:24:48:b2:08:65:df:f1:
aa:91:0f:1e:ec:f3:26:40:d2:36:06:c4:a0:ef:dd:0e:3e:e4:
bf:35:4f:ac:6a:62:a7:3b:8e:f0:88:55:88:1f:6f:7f:59:38:
a3:20:8b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:14 2025 by rpki-client