Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: hPHlBqMv/0+v0bovljzoxQtRPWfRWH3mdShKbGjnLSU=
Subject key identifier: 90:0A:45:72:9F:DA:30:12:D5:22:FB:2C:31:5F:82:4D:BD:83:F7:3A
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 0198499C72A1ED8BCC6BC2500745E964299A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0B6F
Signing time: Sun 27 Jul 2025 02:00:45 +0000
Manifest this update: Sun 27 Jul 2025 02:00:45 +0000
Manifest next update: Mon 28 Jul 2025 02:00:45 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: KM5w9f8TlRVtLIszKk7bKI96Hb7dsR0OmBa6rJc1c2I=)
2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:72:a1:ed:8b:cc:6b:c2:50:07:45:e9:64:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Jul 27 02:00:45 2025 GMT
Not After : Jul 28 02:00:45 2025 GMT
Subject: CN=900a45729fda3012d522fb2c315f824dbd83f73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:be:99:ce:de:a3:2a:7d:37:0e:60:83:8d:
8c:dd:2c:76:ed:db:14:19:d3:41:0e:be:29:9f:06:
03:5a:e2:63:df:d9:a5:72:4a:78:7c:6f:47:34:96:
1f:01:05:74:28:ec:ae:89:fa:4b:a4:b7:e2:e6:df:
85:fa:19:27:1c:a9:36:53:19:b0:6f:04:24:a7:99:
04:5a:5a:79:09:e5:12:5b:91:6c:05:ff:e9:79:8e:
09:00:c1:88:8b:14:61:24:6e:92:17:5b:c4:9b:9d:
c4:df:41:a5:1e:d7:1f:50:79:76:f2:93:e8:5a:4c:
f2:00:d3:c1:1f:5e:3a:2b:e0:99:5d:86:e4:4b:36:
6d:b2:5c:53:ba:b7:9b:c6:a5:81:6c:93:4a:cf:84:
ab:8e:f7:d9:f6:af:fd:b1:46:ed:50:d3:91:41:48:
49:9f:c1:e5:00:cf:5a:8c:83:a4:b2:f2:7f:4d:19:
cc:d3:80:05:4f:2a:52:0d:ea:9d:8e:ea:cf:85:d9:
de:19:f7:48:bf:21:84:f4:29:31:41:50:a3:d5:9e:
9f:36:21:53:87:ca:dd:01:e9:68:23:d1:0a:07:05:
7e:37:09:82:3d:37:b4:ba:32:64:32:30:a8:b4:8a:
d0:5b:0a:01:ad:ce:88:ba:4b:7d:74:53:54:77:65:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0A:45:72:9F:DA:30:12:D5:22:FB:2C:31:5F:82:4D:BD:83:F7:3A
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:90:b7:88:05:66:c7:d2:06:16:f5:14:19:e2:b1:53:33:0e:
dc:dd:dd:e3:ab:69:80:73:48:79:fe:18:39:f8:6f:98:8e:9f:
42:c4:95:2c:5a:64:c8:f9:da:ab:98:37:6c:8b:35:9b:28:a9:
3f:9b:01:8a:65:69:fd:3f:e3:37:b3:11:8c:75:e6:8c:f3:ca:
29:73:21:26:c0:74:02:24:98:7f:98:d1:24:bf:fa:91:eb:f9:
04:84:20:ba:8e:f4:a9:27:31:3c:6b:ec:34:27:94:65:f4:43:
22:1b:f6:8c:1f:34:ff:24:ef:51:bc:7a:00:f5:d9:97:a3:29:
16:92:0f:c5:18:67:62:dc:09:b3:e2:36:72:36:69:6a:b8:90:
3f:bc:a9:41:32:12:27:47:e6:a6:96:8f:18:13:8d:42:15:b0:
58:b7:de:95:5f:30:48:92:78:e6:2f:04:0a:01:58:33:48:f6:
6c:e6:c7:a6:ee:c8:50:8f:d0:3f:c7:ef:15:66:6c:13:15:51:
54:98:23:2d:45:54:03:78:05:38:a8:b8:28:9a:ef:e7:e4:db:
af:ab:1e:75:c4:ac:68:62:8b:9a:39:15:2c:32:d4:e8:7b:b0:
78:b0:07:06:e1:73:c9:91:d8:b2:85:d9:85:cb:c8:6a:d2:e0:
64:5c:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:37 2025 by rpki-client