Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: 97y5DHDYvDZE/Ji5EfFzHq+qQRl4Z0dDiznNGel3/co=
Subject key identifier: 75:DC:1F:9F:2C:A1:CF:97:50:31:0E:77:DE:23:B3:B0:35:43:4C:36
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 0198499C58DEC9E37990957CAAAB0FD30780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 0196
Signing time: Sun 27 Jul 2025 02:00:39 +0000
Manifest this update: Sun 27 Jul 2025 02:00:39 +0000
Manifest next update: Mon 28 Jul 2025 02:00:39 +0000
Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: RQGEDVg2eS7ij6Cr0GAyWO3QBsf7HO0yE76qtIzXd4s=)
2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:58:de:c9:e3:79:90:95:7c:aa:ab:0f:d3:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Jul 27 02:00:39 2025 GMT
Not After : Jul 28 02:00:39 2025 GMT
Subject: CN=75dc1f9f2ca1cf9750310e77de23b3b035434c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:27:4b:12:b2:89:59:e4:5e:36:d9:1e:f8:
88:f5:9a:ce:d4:ce:85:61:57:d0:ce:46:f0:38:00:
c5:c1:1d:61:d7:58:a4:20:c4:9c:f1:1a:cf:44:13:
8d:2c:e6:a4:ed:fc:c5:28:07:de:68:de:ff:7b:71:
0e:1b:5c:38:f2:cb:cc:a4:80:fd:b7:f8:8f:0b:8f:
3c:f1:d3:d4:35:ce:a2:79:aa:08:ca:e9:f5:6d:77:
9e:a7:79:1a:9a:02:32:39:ec:25:a4:1b:4c:69:97:
15:93:c1:e8:32:41:1d:7d:80:d5:e9:25:97:72:b2:
f9:83:09:8c:4f:33:4b:f8:93:d2:5d:05:0c:37:8a:
69:cd:53:14:a4:4a:1f:ee:76:bc:44:ec:12:47:fa:
be:3d:65:43:87:8c:2c:b4:24:e7:65:32:a2:e0:2c:
8b:d2:b2:d3:9c:8a:85:e7:af:47:8d:60:77:dd:7c:
d0:8b:b4:d1:f6:93:b9:3c:e7:a3:5d:3b:33:61:b7:
e9:db:6f:b4:25:73:c3:08:cd:fb:b3:0b:2e:44:3c:
f4:3f:34:1e:c4:27:96:a9:d0:79:2f:89:fd:82:6d:
5f:01:6e:63:f9:2f:f3:80:6a:8e:e3:3a:22:a8:b1:
60:60:d7:81:26:8e:56:7c:b7:d3:c4:55:31:17:9c:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:1F:9F:2C:A1:CF:97:50:31:0E:77:DE:23:B3:B0:35:43:4C:36
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:07:88:7b:b0:32:5e:0b:45:64:c3:78:e8:98:ea:8f:93:ec:
21:80:5b:b0:a6:b6:d3:19:e9:bb:9e:a6:27:60:e9:67:31:7a:
c0:c0:d3:e9:d6:2d:42:62:39:bb:1e:76:3d:0e:85:c1:38:a4:
ed:25:23:a6:07:98:fc:86:1e:e5:50:d3:12:67:7f:bc:b8:11:
33:38:f0:cd:ee:94:91:c5:4b:e5:56:d4:fe:f0:7c:e4:00:92:
3b:be:51:c5:74:c4:2a:ee:d3:8e:a2:cf:88:c3:53:95:c6:8a:
24:ed:05:e2:05:65:70:b3:f5:e6:bd:71:cb:cb:6d:c4:ad:e5:
b1:93:81:d7:84:a5:75:13:94:55:99:51:d8:ec:2b:b1:40:77:
f3:73:b2:d1:3c:d5:8d:9a:76:ee:9e:68:dd:1e:40:4b:d8:bc:
04:4e:37:05:e9:5e:58:44:3e:e7:fe:7e:18:d4:19:48:86:4a:
95:6c:12:d3:1b:47:a7:fb:b5:95:74:89:21:26:ec:dd:9b:88:
c0:29:5d:dd:7c:b1:94:c6:c9:67:7d:cf:2b:1a:84:d3:1e:80:
a9:88:80:eb:c3:bc:73:af:28:19:3a:b4:ed:55:5d:69:a9:9a:
01:4d:77:a8:dd:c5:e7:de:8c:4d:b8:8b:cf:9c:18:81:74:eb:
0e:ff:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:49 2025 by rpki-client