Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: mpSIMFWNIvNZke3eLvURR7C0TsjikN0oXK1N4NXHlfE=
Subject key identifier: A5:00:47:47:3D:04:9C:B3:E3:72:14:49:97:78:80:67:E5:75:B6:8B
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01984B8A4D1E81DF29900FCD9FA39FE5B169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 11:00:11 +0000
Manifest this update: Sun 27 Jul 2025 11:00:11 +0000
Manifest next update: Mon 28 Jul 2025 11:00:11 +0000
Files and hashes: 1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: 0xzbYcNOdLteN11SyxVpLxLi1ILLaYpqF3S4FTafuO8=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:4d:1e:81:df:29:90:0f:cd:9f:a3:9f:e5:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Jul 27 11:00:11 2025 GMT
Not After : Jul 28 11:00:11 2025 GMT
Subject: CN=a50047473d049cb3e372144997788067e575b68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:0d:4b:6e:30:f7:c5:b0:2d:76:ae:20:fc:
bd:5a:b3:9c:f7:64:ac:dc:06:07:f3:58:44:aa:51:
81:39:0c:1f:07:40:2a:6f:10:28:88:c9:3d:5c:c1:
6c:14:9d:dc:aa:ad:d8:93:16:86:2d:72:a2:0f:df:
51:ef:65:52:d6:0a:e5:13:00:54:3c:1d:bd:32:1e:
19:41:f5:5d:dc:97:87:25:bb:55:d8:8b:76:c0:73:
a2:1d:a0:9d:d1:74:20:f9:42:fd:1c:0d:c9:2d:8f:
b5:4f:85:c8:38:0e:45:c3:14:79:a7:3b:68:a5:4c:
fb:53:15:bc:dd:06:7a:79:ec:8e:80:43:25:97:d6:
f6:76:d3:ee:38:20:5c:11:09:9b:79:84:dd:17:31:
38:5f:64:e3:31:27:eb:1f:e5:9f:0a:42:1b:32:30:
9f:8c:e4:bc:d0:02:06:54:3d:a9:e2:be:f0:11:2f:
bc:48:76:38:84:eb:ef:c4:89:a9:09:ee:85:31:a8:
bb:94:b6:1b:7a:56:f8:b0:f5:41:0d:b9:33:8b:e0:
8c:a9:dc:ed:d4:2c:69:1b:64:b8:39:1c:a5:0d:e6:
06:bd:44:ba:e7:be:18:80:3e:2d:e0:72:db:c7:3e:
c0:a5:e3:95:da:bc:22:02:d0:ab:74:96:55:d7:d0:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:00:47:47:3D:04:9C:B3:E3:72:14:49:97:78:80:67:E5:75:B6:8B
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f8:85:f0:0a:af:74:8c:f5:0a:82:8e:ba:26:85:02:9e:14:
59:07:89:15:12:75:1b:65:8c:3e:53:8e:6f:01:4f:a4:14:b7:
10:f8:d0:1c:f0:06:25:e5:19:75:cf:73:16:b6:5c:a4:01:44:
09:25:7a:58:26:9a:7c:a4:cf:a9:da:f0:6a:b2:e0:92:ba:47:
00:c5:25:7f:34:9c:80:85:0f:4e:54:c0:f2:65:98:b8:4c:26:
ea:3e:50:93:87:86:51:55:b8:50:72:0d:58:2f:25:48:ca:af:
9c:82:1a:70:e6:13:14:1c:c6:fc:43:51:9a:ce:e9:7d:c5:91:
72:18:75:b6:a4:22:37:56:42:9f:b9:4d:15:e6:6a:21:9b:eb:
6e:46:94:af:4d:d7:d5:8c:64:e9:41:53:ec:f5:a3:9a:70:11:
5e:5c:fe:24:cb:db:f6:a1:b4:dd:ea:bf:e0:b0:0a:0f:17:af:
3f:4e:3a:35:4d:58:e2:d4:6c:39:76:89:c8:99:91:ac:65:05:
56:be:c9:a3:27:9c:ac:e8:02:4c:54:0a:1a:cb:fd:4c:45:f5:
c9:d7:e7:0d:c8:16:cd:79:a1:84:2a:3c:3f:29:82:a8:41:6c:
c4:bc:d0:3f:02:32:ff:e1:c2:36:02:78:a5:ca:41:3f:71:ff:
d1:10:2e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:05:38 2025 by rpki-client