Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier: HNqfsbbMtRL5idKPY6OKiSVeZvXsQk89MOKyGKIoCUo=
Subject key identifier: 3D:81:98:F2:24:AC:BC:D5:34:D1:A0:62:23:69:5D:F1:5A:8D:53:A4
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 01984852663B9B5AB46E3869F2DB3D37530D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number: 02C3
Signing time: Sat 26 Jul 2025 20:00:16 +0000
Manifest this update: Sat 26 Jul 2025 20:00:16 +0000
Manifest next update: Sun 27 Jul 2025 20:00:16 +0000
Files and hashes: 1: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: MAOO0TJp8iq71srfjobzYxwgBuICa2fipECWsYoZ/yw=)
2: tTBKVFQWZufXMYyq5fxW8fRNH90.roa (hash: YC4oYFYBwZQuGV+b+L7LVxd1pwxsZMobv4J4wury7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:66:3b:9b:5a:b4:6e:38:69:f2:db:3d:37:53:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Jul 26 20:00:16 2025 GMT
Not After : Jul 27 20:00:16 2025 GMT
Subject: CN=3d8198f224acbcd534d1a06223695df15a8d53a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:e0:64:dd:0c:da:5e:47:ca:b8:7f:7b:45:
98:c7:07:db:8f:0e:e1:9b:bd:21:55:fa:7c:eb:02:
ef:96:f4:ed:75:92:62:a6:6f:9a:c0:c8:c3:83:9b:
ba:05:87:17:1c:1b:ad:2d:32:bc:d7:e8:95:80:1b:
0d:0e:b9:97:4b:23:2f:1c:7a:73:04:f3:20:5c:bb:
ec:d6:b5:d1:48:fe:15:a9:9b:94:0b:93:21:34:45:
fc:0a:af:3f:4b:a3:3f:48:98:3e:82:2c:b6:2c:d3:
82:c0:41:cf:0f:12:fa:23:b1:ef:de:b6:67:39:76:
e8:3b:48:83:41:d2:5b:e2:52:b9:2e:a0:4a:8d:49:
82:a7:f0:e8:3b:a8:5a:21:58:9c:d9:01:97:2f:fa:
03:4c:06:47:5b:b5:2e:14:6f:b3:6c:59:ed:d7:76:
d1:49:40:4a:ae:0d:3c:90:9d:b5:65:cc:38:df:90:
67:79:a5:33:f0:43:b1:b0:6d:e2:0b:46:20:27:3f:
16:69:96:7f:b1:84:92:37:ae:46:f9:a3:42:18:f6:
f6:7d:b8:3c:ee:ff:f7:8a:55:d7:8d:0a:43:3c:35:
6c:ce:8b:ef:c3:97:d5:7f:ed:96:8a:93:5a:bf:68:
d2:cd:89:4f:9c:8e:83:cd:c6:bc:25:f3:28:2f:66:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:81:98:F2:24:AC:BC:D5:34:D1:A0:62:23:69:5D:F1:5A:8D:53:A4
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:22:5b:51:4f:a7:83:c2:04:74:b2:82:60:51:bf:0e:ce:
f2:ab:70:9b:d5:13:89:0b:e1:9e:e2:67:8d:83:67:44:72:15:
48:0d:d7:74:44:1e:6e:62:a7:47:55:9e:dc:f6:c4:8e:b2:be:
f9:24:a9:28:9d:3f:dc:5f:41:cd:68:d3:47:fd:10:0d:79:63:
80:a2:d0:97:60:cb:2b:ab:94:2d:81:54:27:07:49:2f:9d:4d:
e4:f1:3b:1c:0e:d0:66:0a:aa:dd:aa:af:1e:5b:4e:03:52:8b:
3f:b5:82:de:d2:ff:e5:39:e7:c8:d4:14:a8:5e:29:d5:5e:5f:
c3:60:5f:c8:8e:bc:ca:b4:ab:c1:8d:e9:a9:cb:05:9e:c6:8f:
d9:ea:33:2f:5e:de:cd:c4:6e:69:7d:e9:eb:0c:2f:a8:e2:97:
1e:97:39:0e:19:73:1d:32:1c:1e:48:4b:21:98:4c:70:dd:04:
e8:0c:be:14:4a:62:26:e6:1c:a1:3a:c6:ff:1b:90:b0:be:5a:
e0:bc:c5:fe:39:b3:66:db:2f:6e:c3:89:47:f8:f4:a9:9e:28:
af:04:c6:d4:e7:ea:96:b4:d5:0b:89:aa:c2:43:7e:4c:ef:93:
b9:50:62:e5:ed:8e:25:2b:7f:ed:f7:d7:9d:f4:10:28:2e:d5:
e7:3f:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:39 2025 by rpki-client