Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: yoPiHEqqxBhQTdr5qE1nNMRWyjRVf0cubcudpO5spMQ=
Subject key identifier: 78:5A:CD:72:61:B1:73:A9:20:CA:5D:08:B2:08:2B:7B:C3:D6:AC:A5
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 01984776F75ACDADD9374FFD765486F09521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0D36
Signing time: Sat 26 Jul 2025 16:00:35 +0000
Manifest this update: Sat 26 Jul 2025 16:00:35 +0000
Manifest next update: Sun 27 Jul 2025 16:00:35 +0000
Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=)
2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: fiJrmrPfDDEJq9DgJgy27ES2igY1vukn/5ClufqHu9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:f7:5a:cd:ad:d9:37:4f:fd:76:54:86:f0:95:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Jul 26 16:00:35 2025 GMT
Not After : Jul 27 16:00:35 2025 GMT
Subject: CN=785acd7261b173a920ca5d08b2082b7bc3d6aca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:37:de:e6:da:77:3b:85:b4:a0:1e:dc:83:
63:e8:56:49:ee:9d:1b:6d:03:ad:74:70:30:66:f3:
b9:be:00:7e:44:95:e0:fd:19:23:06:9f:c7:ee:04:
42:0c:1a:5a:44:51:9f:c8:01:62:0b:9f:8c:1e:5b:
82:3b:30:45:5d:7b:0d:07:c6:cf:e2:6f:f6:3e:87:
a4:54:0c:40:91:c7:da:1a:ab:57:71:b6:a3:f2:ca:
78:08:c8:3c:db:bb:cd:c1:73:8f:83:bf:74:ed:88:
56:61:48:7e:6f:f6:33:fe:55:9d:38:28:80:b5:98:
f0:cf:27:60:1c:41:c4:c3:5b:97:29:5e:19:33:0e:
61:bc:24:cd:c2:f8:7a:e0:e4:85:ad:97:73:04:fb:
81:c9:90:3d:a5:96:66:09:d8:88:bc:2a:3a:1c:16:
01:91:df:e1:63:f5:a1:50:29:1e:fd:ba:18:b9:3e:
52:ad:b3:4e:6f:27:6f:80:d6:44:87:13:c2:8c:5d:
6d:74:ad:ac:d0:07:b5:62:dd:ca:39:90:58:86:5f:
13:24:4e:4c:7a:80:9f:ab:b7:7a:8d:b3:bc:b9:2c:
38:c5:9e:9a:fc:16:1f:30:eb:48:9f:d6:21:2e:52:
d3:91:27:df:b3:93:ea:ff:ea:48:76:88:b5:54:aa:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:CD:72:61:B1:73:A9:20:CA:5D:08:B2:08:2B:7B:C3:D6:AC:A5
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:80:0e:13:2e:6a:4b:ca:05:72:8f:34:34:09:37:02:68:ed:
32:e6:ff:45:0a:e7:12:0b:82:b4:af:0c:f8:f8:c8:bf:78:8b:
8c:dc:03:be:f8:7e:af:6c:08:70:b0:5e:00:52:dd:60:c2:56:
f6:4b:a9:3a:27:20:6f:30:ab:7f:71:ec:09:fd:c7:f0:97:17:
40:19:03:10:43:58:c3:79:db:27:eb:9e:42:51:9e:e1:19:4c:
75:0d:c3:94:7a:2c:e3:ff:50:69:9a:5e:cd:f1:ac:71:7e:00:
c9:4b:9d:3e:8b:79:4d:4e:a7:a2:4d:3d:ab:bf:94:8c:1d:05:
a3:7c:51:39:e6:a9:08:4c:0b:d2:b3:cc:28:a9:d4:9f:6b:7a:
84:47:c0:5d:b7:e7:26:ec:ea:2a:ee:69:7b:67:6b:f3:f3:24:
f3:ce:67:68:77:f3:6e:b8:36:76:e1:04:a6:d1:73:2b:c6:e8:
da:9f:7b:58:a5:ab:7e:c6:fe:9c:9b:3b:b7:f5:ad:83:54:ef:
61:1d:2b:0f:99:2d:f1:e5:67:93:30:87:88:16:38:3a:53:dd:
7a:d4:48:6d:98:34:f3:6b:59:69:95:23:75:02:41:89:7e:50:
eb:2b:3d:37:e1:37:12:1d:f0:f9:50:11:ba:a8:0f:ca:70:3e:
bd:3a:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:57:32 2025 by rpki-client