Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: wuCi6SAWm0JJEM8NILH8e65h0uI/XOaf7jd2PS6fnCQ=
Subject key identifier: B6:A3:4A:91:F1:3A:A5:47:B2:34:3C:AB:EF:B8:26:55:90:D8:3B:D4
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 019847AE03C93AB98B5842C85B7ADD1F1D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0BEE
Signing time: Sat 26 Jul 2025 17:00:43 +0000
Manifest this update: Sat 26 Jul 2025 17:00:43 +0000
Manifest next update: Sun 27 Jul 2025 17:00:43 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: /V5q08NAD82KOzIGQqoNmaGKK24C8rsNCas6ilh9IV8=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ae:03:c9:3a:b9:8b:58:42:c8:5b:7a:dd:1f:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Jul 26 17:00:43 2025 GMT
Not After : Jul 27 17:00:43 2025 GMT
Subject: CN=b6a34a91f13aa547b2343cabefb8265590d83bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:f5:a1:f1:88:f2:92:43:d7:ca:e3:e9:10:
2e:ef:0f:c1:bc:38:29:bd:34:d1:d9:c0:15:f5:85:
ba:ce:dd:40:f8:df:75:2c:b0:92:1d:84:47:a7:54:
1c:6b:64:7a:59:1d:08:b1:5d:c1:ca:20:85:a6:f2:
f0:0b:5f:e1:bf:12:7a:00:5e:a2:8c:9f:99:e3:93:
1a:e2:0c:2b:bd:2a:51:cd:8f:55:45:2f:ee:3c:1d:
e2:58:0b:ac:a0:31:16:07:5a:49:55:f7:5c:b6:34:
60:20:41:f1:36:13:11:ac:bd:e5:94:0d:92:59:75:
bd:29:9b:44:df:75:15:1d:57:aa:a5:17:7e:76:4a:
b9:a8:e8:e2:ab:d7:ca:b6:a9:76:b3:da:e1:9e:0e:
23:57:7d:42:e8:3c:58:4e:b0:10:2d:ef:a1:ba:98:
49:8f:eb:d0:0b:38:dd:74:e6:3a:5e:92:4c:8f:e3:
f9:5a:a3:6d:fe:5f:b6:2f:52:f8:6e:f0:bd:97:01:
7d:8f:49:b6:53:5e:f4:58:e9:f2:1b:9a:2e:c7:85:
4f:bc:64:d8:6e:81:43:70:96:c7:08:88:e6:2d:cd:
f8:64:97:29:d7:df:68:29:c5:95:17:48:3c:61:cc:
67:be:40:1b:11:a7:e8:10:bd:19:3f:b0:15:44:68:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:4A:91:F1:3A:A5:47:B2:34:3C:AB:EF:B8:26:55:90:D8:3B:D4
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4a:3f:b1:26:1c:60:a4:55:f7:8f:d8:56:7f:fe:71:e4:49:
61:1d:17:3b:e8:8c:d9:9f:90:44:09:ae:d9:9a:3e:9c:d8:db:
17:7e:ed:70:0c:1d:76:4f:e2:99:a8:ad:3a:1f:fb:03:9a:ac:
b8:77:75:93:5a:6e:5e:65:4f:7a:35:aa:6b:1d:08:1b:54:21:
5d:a9:df:7a:b7:a0:3d:ab:0e:6b:13:0d:25:ec:39:e2:6a:00:
e0:ad:56:6e:27:54:cd:c2:0e:25:f4:94:50:11:bc:84:19:d7:
b5:ed:1a:ad:cd:41:a1:7c:bc:68:b9:51:74:cf:85:5d:0d:aa:
45:27:e8:16:8e:10:f1:e6:30:18:3e:e0:99:a6:c3:84:f0:90:
e3:9a:fd:40:b3:e0:fe:7b:10:97:17:b4:e7:c8:59:59:f7:63:
bd:cd:47:8e:29:b1:23:a7:9e:a2:bd:d0:f7:5f:b8:c0:74:12:
a3:a1:f1:f7:6b:65:4b:da:bc:a1:0a:2e:08:ae:91:f4:e0:06:
51:52:82:4e:19:86:32:24:88:b1:92:d4:0f:24:cd:1f:82:e0:
cc:0f:2d:9b:f9:19:fd:d2:c8:2f:9c:fe:6a:b2:eb:ba:54:60:
f6:ab:ba:75:ea:78:7a:9d:c2:58:d8:b3:c9:42:56:e8:21:e5:
75:d5:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:28:08 2025 by rpki-client