Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: fg0O/KFR08S6BBGxIfHR+0vgW+SSyxmk+V414vaeb7k=
Subject key identifier: 67:98:8E:6E:E9:BB:48:DF:2E:EB:4E:C0:3F:BE:ED:75:CE:C2:57:87
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 0198451A65BE72C8C8DDECED81EBCB2CCA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 0CF4
Signing time: Sat 26 Jul 2025 05:00:14 +0000
Manifest this update: Sat 26 Jul 2025 05:00:14 +0000
Manifest next update: Sun 27 Jul 2025 05:00:14 +0000
Files and hashes: 1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: UIGOLcWAcRzZu4mz/Rdk6PS4KtJkENXdMAJsGdCTIa8=)
2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:65:be:72:c8:c8:dd:ec:ed:81:eb:cb:2c:ca:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Jul 26 05:00:14 2025 GMT
Not After : Jul 27 05:00:14 2025 GMT
Subject: CN=67988e6ee9bb48df2eeb4ec03fbeed75cec25787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:24:1e:22:9b:59:64:09:f4:b6:3b:7c:6b:
6c:5d:54:43:59:f1:01:66:9b:f7:58:db:ee:32:23:
6d:d5:ca:56:02:67:ec:08:83:67:ce:41:f8:0e:02:
76:c1:1b:3e:c3:21:64:37:9c:13:d0:68:e4:52:10:
d6:7c:f8:fa:6c:d2:e2:97:58:6c:1b:82:3f:7a:f4:
1d:8b:cf:c3:52:00:2c:6b:15:3c:84:cc:c8:b8:91:
b3:18:1d:3d:b7:9d:8a:98:88:da:34:75:3e:65:5b:
9a:e9:e1:a3:92:20:e6:2a:e1:c4:86:9c:0f:16:17:
1a:89:29:06:19:3e:ba:55:3f:6e:b2:0f:bf:c2:c5:
6a:b0:32:f0:47:ab:ef:55:b8:c1:56:d7:b6:35:3b:
93:0c:31:4b:d0:33:2b:75:a6:48:da:76:0b:a3:18:
de:d2:24:ac:7b:dd:bd:d9:d3:f1:7a:43:c3:d3:98:
ce:ef:8b:68:e9:20:f4:6f:14:32:02:2b:c5:74:05:
fe:68:a0:a7:00:34:8d:e6:66:29:a5:12:7b:be:d6:
fb:d5:f9:3e:78:2b:b9:6c:aa:27:6b:ed:24:67:8f:
95:8d:10:73:8a:05:a9:d6:4b:45:1b:20:6d:ad:1d:
40:04:8f:e9:09:97:8a:7d:8a:38:ef:07:eb:b2:d5:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:98:8E:6E:E9:BB:48:DF:2E:EB:4E:C0:3F:BE:ED:75:CE:C2:57:87
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0f:67:c7:5d:a4:1d:42:c0:29:a5:ed:74:20:87:32:d9:be:
1f:22:f8:c0:3b:2a:6e:81:a8:58:f2:10:31:9e:4b:fd:89:fb:
63:1e:9b:f2:e7:d7:37:a9:d0:89:af:5c:7d:28:e0:4e:ad:ca:
ff:ca:72:61:26:c3:b6:f0:6a:45:1e:df:c6:42:bc:ab:66:52:
02:5a:e0:2c:0a:9f:3f:90:6b:51:47:35:d0:34:fc:3f:0e:10:
99:c3:84:c0:75:b3:19:78:ec:db:2b:33:83:dc:97:a0:75:73:
4f:6c:21:2d:45:98:1b:2a:20:89:8c:6a:0b:ba:8f:8e:af:61:
a1:c5:51:b1:f5:00:04:c2:f7:99:30:db:64:88:70:b0:5a:ff:
9b:3c:b6:b6:bf:d5:01:6b:33:b0:4b:66:15:f3:31:bc:88:04:
55:1b:ef:65:cf:c7:9a:04:fb:fb:5a:a7:43:cd:3f:f4:11:53:
3b:66:5f:8c:92:eb:e7:a2:ac:81:45:5e:ec:52:9d:7b:c5:c0:
bf:77:ee:cf:f3:b4:7a:b2:42:58:0c:15:76:f3:d3:3c:38:21:
f4:23:23:8b:b7:9a:dd:48:fc:7d:63:78:29:ad:96:68:ee:6b:
c8:5c:16:d7:b4:92:92:e5:7b:88:f7:56:c7:dc:13:cb:78:58:
1a:78:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:31 2025 by rpki-client