Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json)
Hash identifier: bLFdl9M4VdbopIauf2/sO8uyuI4Yh55SuhECX9fm7tg=
Subject key identifier: E8:0B:56:35:AB:26:60:3A:F6:E0:D8:D8:E0:95:30:48:0D:41:DD:F9
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 019853B1DBE21CF54D9421DF45E383DF92D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
Manifest number: 114A
Signing time: Tue 29 Jul 2025 01:00:21 +0000
Manifest this update: Tue 29 Jul 2025 01:00:21 +0000
Manifest next update: Wed 30 Jul 2025 01:00:21 +0000
Files and hashes: 1: C3yypRlZtvO4qRUDoeqrvhpXXFU.roa (hash: U5x8oZ9ETTHkITHFM+Dz7ZwF5Z54RJdp83tFjx6Le08=)
2: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: 2YKv1PTGsco6BDhclVxGd5rvXZWfetAqWtmQfwv69kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:db:e2:1c:f5:4d:94:21:df:45:e3:83:df:92:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Jul 29 01:00:21 2025 GMT
Not After : Jul 30 01:00:21 2025 GMT
Subject: CN=e80b5635ab26603af6e0d8d8e09530480d41ddf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:b1:46:92:d9:65:4c:24:b2:0d:fd:5e:a2:
ab:50:bd:64:16:99:a8:f9:bd:c3:61:09:85:4f:c7:
c7:a8:ca:02:12:25:1c:88:5c:4e:9f:73:69:ae:06:
49:4f:63:2a:8f:3f:3f:ef:dd:41:11:5a:99:1a:51:
64:08:66:a0:7d:d0:dc:88:4d:e9:04:d1:ce:cc:43:
53:f6:98:f7:2f:e3:5e:90:de:0f:27:ac:dd:76:cf:
04:7c:9b:8f:2e:41:53:35:2a:fa:30:88:6f:33:0f:
1c:f4:96:64:2d:0d:5c:e1:74:c4:88:a1:e1:a3:4c:
6a:31:c2:73:84:39:98:c0:fd:ae:98:82:b9:31:98:
e8:c9:61:a1:73:b0:9b:b0:85:b1:bc:9c:76:4c:24:
a3:ce:0d:06:0b:fe:1b:de:7e:f2:54:6f:ce:94:87:
bd:e0:3a:dd:33:8c:8d:b8:55:92:14:7d:e8:93:d6:
8e:ee:a5:c8:00:3a:03:e0:ed:68:e2:dc:72:3b:e1:
17:2b:ce:f7:72:d1:2f:c5:c3:67:2d:dd:ee:47:25:
e0:3e:33:65:a7:5a:4b:60:64:fd:fb:96:99:3e:29:
33:a4:03:99:5e:2b:08:b4:95:83:26:1d:2f:2f:3b:
55:02:d3:2d:6a:a8:0a:78:ce:8c:0b:53:f8:e1:6d:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:56:35:AB:26:60:3A:F6:E0:D8:D8:E0:95:30:48:0D:41:DD:F9
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:37:89:d9:7b:7b:40:f9:90:ef:9b:80:5a:3a:e4:24:08:04:
c1:40:61:4b:48:a6:66:27:ac:23:ef:3b:79:88:b6:85:39:0c:
c7:a6:de:ab:71:85:da:5a:b1:6f:ff:90:b9:34:e0:96:62:0f:
f7:3d:eb:2d:1f:c4:fa:6f:c7:6f:64:1f:fd:60:28:35:c2:f0:
65:49:ee:6a:f6:42:2c:86:75:f0:56:79:59:16:9c:36:b6:c5:
a8:c2:0f:19:40:2f:a8:73:4d:8c:2c:53:f9:ab:ec:d8:76:21:
27:82:08:d5:8e:c1:6b:46:ef:07:c1:12:cd:58:5f:e1:0d:05:
15:23:a4:02:80:a1:80:46:a3:c3:d6:8b:9a:23:6c:6c:11:41:
89:99:15:af:94:3a:b8:8b:07:8f:46:f0:5b:be:cf:ac:61:42:
73:c7:61:d5:a5:6c:bb:b7:95:e5:f9:2f:28:df:6c:82:23:46:
6e:e0:0a:18:74:de:13:9c:f7:1f:84:53:5a:7d:04:b3:8b:bb:
65:af:34:7d:55:9b:d0:61:43:e6:3c:59:81:56:54:0b:b9:0c:
65:bd:d2:37:01:b7:5d:60:ae:e9:95:dd:c2:00:c9:5f:8f:be:
fb:db:21:35:09:ff:d8:ee:72:e2:39:1b:fc:3d:50:6c:5b:ea:
18:96:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:26:42 2025 by rpki-client