Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: T4rwsJY4I9Fke9K+NvOdrtYX5uQUU890pjSERRSgJtg=
Subject key identifier: AD:31:A1:98:64:AC:CF:0F:51:10:CA:FC:17:0C:C0:9A:9E:30:F6:7A
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019849D324D394B9795EED15FB80BF98C30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 0504
Signing time: Sun 27 Jul 2025 03:00:30 +0000
Manifest this update: Sun 27 Jul 2025 03:00:30 +0000
Manifest next update: Mon 28 Jul 2025 03:00:30 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: aayxGBSFprtBENR/4w/D9nXKlDVfU+uj9npVXjKepiY=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:24:d3:94:b9:79:5e:ed:15:fb:80:bf:98:c3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jul 27 03:00:30 2025 GMT
Not After : Jul 28 03:00:30 2025 GMT
Subject: CN=ad31a19864accf0f5110cafc170cc09a9e30f67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:6d:59:16:44:8e:a7:18:fa:3a:7f:cd:89:
d3:ac:08:d9:67:6f:30:8f:f2:60:d7:08:4a:a3:c2:
7f:71:35:03:bb:ff:7d:5e:f2:81:e7:82:52:af:f6:
ef:7c:2b:bc:94:93:68:2a:7c:89:30:f0:b6:95:e9:
12:35:f3:eb:bb:bb:d2:1d:15:82:11:b3:51:b7:dd:
63:0e:a6:16:ca:e3:0b:1d:b0:18:9f:d7:03:54:ea:
3f:ef:ca:66:0a:54:94:31:6d:5e:8f:86:13:56:08:
5d:b1:ed:3a:74:4d:4e:18:aa:1d:29:04:87:75:89:
31:ca:23:19:61:06:95:14:76:11:f7:e5:a7:47:cd:
be:34:3a:f3:9d:a3:4f:39:65:54:1b:79:5c:01:1b:
ca:ba:c4:ac:0a:ac:34:ea:eb:d1:79:1c:a5:09:6b:
a1:05:af:c1:c9:d8:25:df:50:3b:10:36:d3:9a:69:
95:95:63:1e:c0:62:d3:79:11:ff:7e:cb:c0:13:18:
bf:c8:f7:0f:01:c6:01:87:ed:78:ea:be:e1:0c:6e:
fa:17:5f:04:a7:de:34:e1:7a:be:b2:22:32:2a:dd:
7a:0c:b2:cd:eb:38:1f:be:f2:1f:37:a7:88:16:a1:
dc:ae:a6:c1:8b:c1:6e:27:b3:f4:16:54:fd:b5:4d:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:31:A1:98:64:AC:CF:0F:51:10:CA:FC:17:0C:C0:9A:9E:30:F6:7A
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:12:b2:13:96:55:51:b3:76:fa:70:20:2a:8d:84:42:9c:f3:
06:bd:b0:fe:49:9b:e1:0f:e3:e7:06:e8:1f:c0:4b:ea:5f:5b:
e7:e2:68:86:f0:37:e2:6a:7a:92:17:96:a7:e4:54:e6:d6:c3:
41:a4:37:24:44:3a:dc:92:af:d6:5f:c9:b1:70:f5:5c:1d:a8:
66:98:e0:32:0c:1a:b2:4b:df:b0:62:48:15:11:50:a4:11:c3:
ee:b1:24:9b:c0:4e:ad:58:d1:24:d7:4c:31:58:fa:73:7e:31:
37:3a:e7:99:c7:ff:5d:fc:dc:5e:85:4b:81:b3:ba:7d:b9:ee:
51:56:9c:5b:36:8e:22:c9:6e:96:4e:0d:96:b0:a5:69:f7:d4:
81:39:f1:4a:18:07:c8:a4:e3:ee:ec:a9:8d:31:7b:ea:bf:58:
83:68:88:68:41:8f:b0:86:87:ce:cb:18:b8:ef:c2:21:e1:d5:
4d:b6:c3:97:a2:eb:13:0c:c2:c0:6d:89:53:b8:c2:91:2a:bf:
5e:8e:f7:9d:86:b8:22:f0:51:1f:1b:ef:7f:d9:c1:f5:83:16:
06:4e:eb:3a:f4:ff:f2:e7:00:f2:35:01:2c:f5:6d:47:55:30:
64:63:ea:fd:de:74:7e:39:8b:21:31:a7:71:2e:87:86:91:bb:
98:da:c5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:22 2025 by rpki-client