Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier: DiVFmls9tKKgGcuQAoeQz1aLYP9yCh2vWG+Z/eaXFU4=
Subject key identifier: 76:27:9E:0A:47:21:F0:63:47:A3:E6:75:1B:73:54:45:A9:B1:24:07
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 019857C60F98E41E723D55AAC6E8758155B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number: 0BF8
Signing time: Tue 29 Jul 2025 20:00:54 +0000
Manifest this update: Tue 29 Jul 2025 20:00:54 +0000
Manifest next update: Wed 30 Jul 2025 20:00:54 +0000
Files and hashes: 1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: MO8RtT3rl8TY+sDdcSi6uab1OX3xDj+evN6ZDeKTkGc=)
3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:c6:0f:98:e4:1e:72:3d:55:aa:c6:e8:75:81:55:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Jul 29 20:00:54 2025 GMT
Not After : Jul 30 20:00:54 2025 GMT
Subject: CN=76279e0a4721f06347a3e6751b735445a9b12407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:d1:8c:d1:89:22:09:07:50:6a:cb:0a:eb:
25:b5:4e:e7:d6:b8:44:d2:4b:4d:4d:bc:9a:45:b6:
41:14:ba:99:22:01:2a:89:09:ba:34:97:ff:93:96:
1c:e2:a7:55:35:a6:55:e7:36:a6:28:71:5b:97:cd:
36:53:db:b3:4d:97:e6:a3:5d:8d:6f:e6:55:47:69:
b7:18:22:fb:06:d1:33:0a:dc:90:bc:2e:65:97:6d:
0f:c0:64:bd:6c:92:17:a5:85:9c:b0:2d:dc:8f:8d:
28:86:cb:f7:75:67:fc:82:2c:f3:d3:5e:89:3f:69:
de:e5:74:fb:62:5a:1c:fd:d2:4f:c5:44:35:bc:b1:
2d:9e:17:17:95:04:d9:d8:3b:58:35:c8:04:a6:43:
4a:a2:48:cc:67:cd:15:d9:de:18:30:ca:da:f5:cb:
b2:1f:0f:fd:10:2b:4a:44:42:e0:5a:a7:e7:81:13:
0e:99:04:2e:ad:45:3a:f3:28:13:5e:ef:ff:f7:3c:
35:90:a7:a2:b0:0f:e3:d6:86:ed:3d:f9:b7:84:a9:
f4:d8:7d:3c:25:62:98:7d:e9:aa:14:24:b4:75:50:
25:b3:88:95:cf:ff:eb:22:5a:60:30:9d:13:17:10:
cb:9a:41:38:d2:e7:b5:ed:88:0e:82:7f:c8:d7:bd:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:27:9E:0A:47:21:F0:63:47:A3:E6:75:1B:73:54:45:A9:B1:24:07
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c4:62:ba:ee:92:2b:0f:ef:25:2c:25:be:f4:4f:e5:99:b7:
93:69:89:48:8b:2e:ea:e3:9b:34:45:1f:78:7e:ae:db:c8:de:
ba:d0:01:ac:e1:20:97:64:88:cb:2e:da:9c:63:c8:80:01:0d:
cc:a6:08:54:9e:07:83:7b:4b:e3:9b:2b:53:a0:3a:5b:93:9c:
22:0f:a6:57:a2:30:e5:95:59:07:14:33:c9:75:95:30:b7:e7:
75:8f:f4:04:c7:08:71:e3:8f:10:21:4a:0a:11:14:e4:e3:3b:
83:be:b8:0a:f7:c1:73:a4:82:14:d8:6c:09:c0:20:38:ed:db:
7b:50:3c:56:4b:63:01:eb:45:20:4a:e0:4c:d0:9e:f9:84:5c:
54:2b:d3:df:9a:fe:20:b5:c2:f7:b3:66:e9:c7:4b:71:06:60:
55:45:5b:4d:2b:55:31:71:c7:6f:28:25:b2:5f:36:a9:ff:ee:
ed:ff:46:ef:54:3d:b8:86:ce:cf:ca:f5:09:db:62:be:9b:d4:
2a:70:32:5b:23:a4:65:fd:62:d0:7a:a7:2b:29:a7:b6:06:86:
41:c2:28:ba:b9:dd:c4:1b:b0:2f:1f:79:b9:6c:89:a3:1c:04:
cb:f1:39:90:18:35:c5:4c:23:80:08:19:f4:8a:2e:19:41:db:
7b:78:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:46:32 2025 by rpki-client