Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: iHvYbyg37NpWLgj3u8tuqtXTzTtc4885jiRAiEXqjb8=
Subject key identifier: 00:F8:3D:89:AE:AC:FD:2F:60:8C:03:BD:5A:49:B0:A2:0C:BB:61:41
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019844E3F5170BBF4E597A023E63A0612866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 09CF
Signing time: Sat 26 Jul 2025 04:00:46 +0000
Manifest this update: Sat 26 Jul 2025 04:00:46 +0000
Manifest next update: Sun 27 Jul 2025 04:00:46 +0000
Files and hashes: 1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=)
2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: V2Q2WwNuN6lSfnEvWL1epaK2sdaBX7O5lDPxc8pm6bU=)
7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=)
8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:f5:17:0b:bf:4e:59:7a:02:3e:63:a0:61:28:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jul 26 04:00:46 2025 GMT
Not After : Jul 27 04:00:46 2025 GMT
Subject: CN=00f83d89aeacfd2f608c03bd5a49b0a20cbb6141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:94:a1:81:39:b2:fb:cb:ae:39:92:d1:93:
e0:5e:e7:d7:2a:fd:d7:7f:be:23:89:b7:cb:4f:fe:
cd:e5:08:d8:36:7e:52:ca:c4:f0:7c:d3:55:c1:eb:
00:04:4c:29:95:80:aa:c6:50:80:5b:6b:a7:b7:ce:
ee:37:de:60:a9:2c:48:5d:63:b2:e2:26:fd:6e:8a:
db:27:a9:d5:61:60:c7:39:b0:d9:bc:96:4c:e3:81:
04:cf:44:e5:cb:1a:92:82:60:89:04:c6:2c:3d:a7:
f2:a1:74:0d:a3:27:c6:fd:95:6f:64:fa:22:6b:13:
aa:66:a1:d0:d2:4c:b9:4a:a0:f2:16:6c:3a:35:a4:
f2:b7:b6:df:af:c1:42:7e:d3:89:e7:7c:55:87:ca:
01:08:a6:a8:6e:0f:bb:f5:da:10:0f:09:0b:a7:da:
93:f4:59:3f:0d:5f:d3:d6:eb:5a:6a:b9:14:de:20:
6a:0e:20:69:41:17:ef:a5:89:40:a8:60:7c:ee:75:
81:2d:29:8a:92:17:52:11:f2:5e:57:a1:2b:08:44:
e4:f4:a2:12:c0:09:73:81:00:48:e2:d3:96:30:70:
31:42:e8:87:ae:1a:00:69:d2:1d:5b:59:fc:3e:3a:
02:e8:17:4d:3c:cc:21:8d:92:3e:a2:64:8e:c9:a7:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F8:3D:89:AE:AC:FD:2F:60:8C:03:BD:5A:49:B0:A2:0C:BB:61:41
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dc:9c:54:93:c0:14:e2:e7:5c:f9:17:df:6b:3c:43:3e:2a:
85:d8:a2:8f:08:08:8c:d3:05:fb:51:d2:fc:ca:ad:08:c4:d1:
8a:03:37:bd:81:21:54:6f:05:73:1d:07:f5:d6:46:da:ea:ee:
92:69:ec:6d:92:9b:10:fd:7e:21:04:fa:c7:a1:d7:e0:d6:20:
c0:16:09:c1:ce:ff:16:5d:0f:8c:7d:97:2c:e0:f1:f8:eb:57:
60:07:60:f3:d6:f4:ef:ad:9b:f0:5c:2b:fe:05:30:f8:98:7d:
7f:7a:fb:da:fd:61:d1:f3:2e:29:71:51:05:36:06:de:96:30:
94:19:a7:bf:20:d2:b8:f8:87:21:df:1e:cb:9e:ad:b0:ce:2f:
b3:b7:10:d0:dc:83:a4:35:5f:15:38:38:b4:49:3d:72:3a:70:
02:9f:b6:02:dc:f7:d6:a8:cb:3f:76:69:79:3f:34:16:5e:89:
43:72:6d:56:f9:37:a6:d8:92:e4:bf:56:0e:42:16:14:e5:2f:
90:35:bd:c2:45:2e:21:5b:4d:e8:14:10:ad:cb:63:1a:28:fd:
bd:54:16:c6:3b:d3:8a:d6:49:ca:61:62:bb:37:85:74:ec:40:
d6:cb:03:aa:40:61:e4:9f:fd:2e:48:d0:56:ba:17:1f:2a:9d:
e7:2e:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:17 2025 by rpki-client