Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: b1+dnAX41A9tjTHgOLjz34f+XIPV0iLVYfC+owyk7Jo=
Subject key identifier: 4A:29:FC:BD:3D:79:AA:B9:4D:D7:83:83:BC:6A:0C:42:40:71:E3:46
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 01983E7407B72C007FACA1F545CF2C16B474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 0687
Signing time: Thu 24 Jul 2025 22:00:48 +0000
Manifest this update: Thu 24 Jul 2025 22:00:48 +0000
Manifest next update: Fri 25 Jul 2025 22:00:48 +0000
Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: Krvesde9vHByA9uAI0+ma68KW8QgFQ2Corq31xvYNwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:74:07:b7:2c:00:7f:ac:a1:f5:45:cf:2c:16:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Jul 24 22:00:48 2025 GMT
Not After : Jul 25 22:00:48 2025 GMT
Subject: CN=4a29fcbd3d79aab94dd78383bc6a0c424071e346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:94:c1:7d:e2:2e:9e:8b:d1:d5:b3:5d:e4:
d0:eb:84:c3:98:b4:ce:0b:9c:5b:9e:77:91:f2:56:
a9:45:42:2c:64:8a:fb:28:8b:57:b9:08:6d:4f:38:
16:8b:ba:3f:55:48:f3:4d:80:ac:61:df:87:03:bc:
07:be:84:80:17:aa:5d:76:93:68:54:3f:ca:18:fe:
69:b5:2d:5e:08:c2:ca:2c:23:33:b3:12:58:c0:66:
fd:4a:7a:79:5a:5e:ab:df:fe:6f:73:23:d3:f5:37:
da:c8:65:c3:20:1a:87:ef:a1:0f:7a:15:dd:ca:9f:
65:7f:71:01:95:23:1e:b3:a5:fd:6c:b9:42:64:07:
bc:c5:37:ab:27:7f:dd:c1:df:dc:b7:54:75:bf:ca:
a3:0f:22:81:cd:3a:bb:c6:9b:8a:15:43:68:9b:7c:
eb:46:c6:08:00:e8:48:ba:67:f4:f4:f8:94:ec:49:
1e:66:14:2d:28:1c:ec:38:31:4b:af:e6:19:67:98:
72:5c:fe:a9:b4:15:b5:35:fb:b5:6b:60:c9:e0:36:
0b:e6:58:03:ec:a0:79:a7:1f:54:18:2c:05:93:6a:
a1:35:26:96:0e:8f:4e:22:4d:bb:dc:77:10:e6:a3:
b8:8a:1b:4a:8b:9a:10:ee:a9:53:64:de:3b:3c:63:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:FC:BD:3D:79:AA:B9:4D:D7:83:83:BC:6A:0C:42:40:71:E3:46
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:1f:4c:10:db:d5:17:6c:94:af:ec:7b:7c:5b:26:d9:21:
dd:42:ad:9f:72:8f:40:fe:72:4e:8f:65:0c:ec:34:4b:c9:6a:
39:ea:7a:41:71:a2:3c:89:17:f1:2c:e7:ec:cc:42:a4:e8:41:
c1:6d:97:06:ce:54:5d:2c:c7:05:24:1f:49:7b:63:27:1c:fa:
e4:c2:d9:01:ca:d1:be:c9:ef:27:73:6e:3a:c9:ca:89:01:15:
4c:87:03:23:2b:8b:14:ee:95:ff:78:70:68:7a:09:54:00:16:
0c:7d:77:0a:04:d9:59:24:63:50:6c:61:12:00:3c:5d:67:18:
f1:bd:99:b6:35:76:a2:37:09:43:07:0e:70:35:e5:82:c9:f5:
0c:c7:21:89:4e:fa:0f:76:2e:6d:13:d9:63:c7:a0:29:99:4e:
63:63:8c:0f:e5:24:42:e1:3d:1b:cd:f3:97:8a:e5:36:69:e5:
2f:6e:e4:f7:33:23:d4:8a:5f:6e:d3:ee:d4:29:59:3b:07:0a:
5e:c8:9b:ae:e7:8b:3c:4a:34:4e:af:ca:35:1b:b5:67:e5:40:
fe:ee:30:cc:ff:42:d2:13:a3:55:d3:1d:ce:4a:2a:c5:98:ae:
9f:d6:e2:c3:32:d0:26:b8:5a:0e:6f:84:7e:fe:f4:7c:64:2d:
e5:23:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:22:28 2025 by rpki-client