Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: 36InLFt7Gh+GKowXhmY4m1bV9ok3KdXlb/2BlXMHqZk=
Subject key identifier: A8:BA:57:28:20:9C:30:D9:A5:CF:7E:B3:D6:03:19:EA:77:7E:D7:F9
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 01984DE67D2A2CEA71EB42C99089C1035154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 07C2
Signing time: Sun 27 Jul 2025 22:00:07 +0000
Manifest this update: Sun 27 Jul 2025 22:00:07 +0000
Manifest next update: Mon 28 Jul 2025 22:00:07 +0000
Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
2: LA-cz5sVCzNk_tA4a42FeutMowQ.roa (hash: uiKIsaEo4/vDsaJKzBGvYmUH1yNN4/rpS3B9ab7S0rw=)
3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: UgDGs0pHY4k0uYvgrx4ZO58ge5hCuy8YkOTeAZ3vAwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:7d:2a:2c:ea:71:eb:42:c9:90:89:c1:03:51:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Jul 27 22:00:07 2025 GMT
Not After : Jul 28 22:00:07 2025 GMT
Subject: CN=a8ba5728209c30d9a5cf7eb3d60319ea777ed7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:c9:e3:56:e7:f8:06:b4:38:b1:db:4a:3f:
9b:da:08:d8:99:74:77:a0:31:c0:61:2c:67:71:35:
58:c2:09:d0:dc:72:45:0e:32:16:6d:71:ef:1c:c4:
45:d9:9e:90:a4:17:cb:96:f9:6a:f9:43:39:a5:d5:
60:72:40:d8:6b:3a:9b:1b:cc:ad:c8:bf:c7:fa:40:
20:38:6f:85:da:84:b6:93:03:fc:d2:96:01:4c:57:
e6:7e:b5:e8:48:9e:97:83:0f:30:83:ab:ff:64:25:
ec:ef:d2:f2:87:8f:68:ab:d1:56:f5:a2:65:f9:fa:
8f:95:42:07:5a:4a:06:d8:b6:f2:14:65:86:ce:3d:
33:7a:7a:f7:fa:c8:d0:cd:7c:4c:1d:de:34:fd:cd:
2c:01:bb:93:85:99:f1:1e:26:c7:77:b2:c9:8d:b0:
ca:3c:a8:d7:86:18:e3:e8:5f:7c:d1:47:20:20:b3:
9e:09:3d:5a:4c:77:f1:62:28:91:8f:db:94:2c:7e:
13:1d:4d:22:3f:9b:2b:37:ec:1a:55:29:db:90:8c:
af:2e:34:b0:ff:06:4f:e9:a2:75:bc:dd:74:4e:87:
f1:d9:8c:32:63:04:dd:c5:40:9c:ed:2a:e4:f0:8d:
24:ff:fe:3a:9a:ac:0d:e1:ca:c1:66:2b:06:05:05:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BA:57:28:20:9C:30:D9:A5:CF:7E:B3:D6:03:19:EA:77:7E:D7:F9
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9b:92:de:88:10:f9:e4:ff:24:88:35:51:f3:c4:6d:b8:bb:
94:65:3d:97:0e:b5:1c:50:3a:64:13:40:d9:d2:8d:ee:49:37:
24:6c:33:a4:ec:ae:61:0e:be:0d:a0:ca:9a:ec:3c:bf:14:1b:
b4:e9:f2:b0:0f:f1:a6:16:f9:16:3d:d6:f2:22:54:75:53:2a:
ef:4a:03:48:31:af:2c:3f:47:8c:46:52:fb:c5:03:85:94:58:
32:56:5e:ce:13:43:3e:d9:1a:1b:7e:a5:f5:76:09:cb:20:6c:
bc:ae:0b:bb:aa:93:73:11:e1:0d:92:87:9b:ee:4b:f7:10:a7:
3c:e3:a4:28:da:20:95:0f:31:13:98:b4:94:a6:f1:3f:e0:d1:
78:34:99:eb:f1:80:38:36:1a:c0:47:a1:e8:7e:e5:b8:b1:60:
83:20:b9:5f:69:61:68:ae:7f:24:38:40:99:b6:18:66:3d:7f:
b5:9e:c6:de:4b:53:f2:01:66:91:a2:c7:c7:bd:c6:e3:e8:e1:
c9:6a:f3:e4:54:b2:df:f8:b1:a2:16:67:fa:ae:2e:4f:37:ad:
1e:53:59:99:06:60:5a:e6:af:01:88:22:76:d7:50:fc:66:7e:
b4:a4:bc:8d:ca:24:85:17:7d:77:0b:fe:1d:b8:3b:2b:be:b6:
5e:c7:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:42:58 2025 by rpki-client