Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: IHeIOa0zCJz9vspn5meRUmuxC0dUWUIPmL9qxCoWTPE=
Subject key identifier: 7D:6C:30:83:B2:5E:B3:25:27:A8:EA:F6:1D:81:89:8D:7B:B7:E4:41
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 01984AE596139608262CC9584EB7EED8A762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0BDE
Signing time: Sun 27 Jul 2025 08:00:16 +0000
Manifest this update: Sun 27 Jul 2025 08:00:16 +0000
Manifest next update: Mon 28 Jul 2025 08:00:16 +0000
Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: YnaKox/M7Z92Byxj9OL9RZMztAH06z7zEJpd8J6Gzbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:96:13:96:08:26:2c:c9:58:4e:b7:ee:d8:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Jul 27 08:00:16 2025 GMT
Not After : Jul 28 08:00:16 2025 GMT
Subject: CN=7d6c3083b25eb32527a8eaf61d81898d7bb7e441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:85:8a:c5:e0:69:92:1b:a1:2f:36:84:94:
56:23:ec:f9:c9:c8:e1:ed:07:cc:8a:f5:ba:ae:5d:
d1:6f:2d:fd:75:1b:6c:c8:45:02:85:57:9e:b0:8a:
38:47:17:10:4a:34:f2:aa:35:ce:8a:04:b5:9a:18:
9e:e3:e8:bf:48:d4:f2:b5:59:cc:d6:4b:8a:a1:62:
a6:92:b5:dc:89:ee:35:92:f8:67:33:9e:3a:1e:db:
4f:bb:a2:1b:a7:9a:e3:e9:2e:f7:66:50:f8:97:bd:
38:89:ab:7a:5d:5a:17:3d:29:63:26:2a:47:f1:f1:
ca:83:ba:df:d1:b9:28:bc:29:ca:5a:f2:93:48:65:
ad:75:28:65:bc:a5:c8:5b:7b:27:61:3a:53:07:4b:
40:5c:3a:78:ff:1d:84:67:b3:7f:2d:f6:a8:22:59:
fe:06:ed:28:18:63:8e:41:fd:97:02:f1:fe:ab:28:
38:71:6b:f2:29:74:6c:a1:0d:4d:17:09:c6:86:df:
a6:42:94:1b:c8:b0:c6:d7:ae:c2:0b:29:4b:0d:a4:
7d:54:ec:86:30:7c:7f:5a:61:26:d8:88:df:5b:b6:
49:54:e5:07:ce:a3:72:ca:9d:9e:d8:f2:10:a1:f1:
58:bc:ad:df:f8:38:84:c0:7e:6d:fb:27:ac:90:1f:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:30:83:B2:5E:B3:25:27:A8:EA:F6:1D:81:89:8D:7B:B7:E4:41
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:11:df:88:f5:50:d8:92:b9:db:87:f6:11:95:b2:31:a9:69:
c6:86:fb:8c:a6:49:05:6e:2f:89:20:61:cf:74:70:91:0b:a7:
87:59:96:0c:cb:a2:28:ad:4f:57:ee:49:10:6c:4d:b3:bf:c9:
6d:81:3e:ff:50:ff:ee:b6:76:f8:c2:df:4e:12:81:88:c7:f5:
17:9e:8a:b4:cb:de:fd:38:c3:87:93:82:f9:b3:15:45:8a:a3:
bc:e8:90:5c:db:6e:f0:35:15:8e:7b:27:3e:53:2f:76:ce:7f:
7d:77:cb:c4:ab:44:f0:c4:fb:14:1c:06:fc:71:e1:11:08:81:
13:f2:b6:da:62:f3:df:55:e2:24:73:78:1e:e5:1a:5b:20:93:
5a:da:fa:4a:61:71:ba:e2:80:74:88:f3:0c:29:c5:a4:3f:c7:
7b:bb:0d:bd:3a:a0:9b:de:e2:45:c1:ae:75:77:43:35:0f:b9:
9d:29:98:a5:8b:bb:3e:e1:cd:fa:8f:a3:89:dd:55:08:30:4b:
ee:d6:14:49:b6:24:91:0e:a7:41:db:19:7d:64:aa:70:6b:db:
62:1c:20:68:e6:d4:45:2b:53:16:ed:2c:93:a1:3a:50:e1:e8:
2a:74:b2:3d:85:a3:af:94:0c:ba:34:f3:f7:b3:75:23:86:4a:
7a:52:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:52 2025 by rpki-client