Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: jLG1mTjJFBm5rBMYLSDrwV+A8VyFsD6Kr31tohgWFl0=
Subject key identifier: 4A:8C:15:94:3B:6D:9C:0F:77:BA:E1:07:F1:AB:D5:24:DD:D7:E8:99
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 01983615EA99F032777231B44D6FDE39B8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 06B4
Signing time: Wed 23 Jul 2025 07:01:02 +0000
Manifest this update: Wed 23 Jul 2025 07:01:02 +0000
Manifest next update: Thu 24 Jul 2025 07:01:02 +0000
Files and hashes: 1: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: mA0lBr5h6AH0SNmSDUv/5YfFvgLcIFaTY9pKKZeal38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:15:ea:99:f0:32:77:72:31:b4:4d:6f:de:39:b8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jul 23 07:01:02 2025 GMT
Not After : Jul 24 07:01:02 2025 GMT
Subject: CN=4a8c15943b6d9c0f77bae107f1abd524ddd7e899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:2a:7e:9f:2b:31:b4:00:ce:d3:95:a1:17:
73:e3:e8:81:19:48:47:f5:f8:b5:03:1c:66:f1:39:
62:7e:4b:31:91:87:d1:b1:95:26:83:a0:f3:17:d6:
ff:9b:65:88:d4:fd:c8:32:48:55:29:ba:b0:9a:8f:
26:a7:46:a5:1b:42:f5:b9:9a:a7:02:8a:d7:b5:4d:
55:13:a5:d8:91:50:19:2c:7c:e7:ce:8d:a3:20:14:
e9:43:4b:a5:fe:7d:3d:26:50:6a:c0:8a:e1:96:8f:
c5:e9:ed:db:d9:9e:b7:d7:43:9c:8d:9a:46:13:4a:
be:1b:64:62:b4:28:9d:de:b2:a3:2a:03:fa:dd:f1:
b3:db:76:78:80:bd:5b:e9:1a:5e:79:3d:a9:81:ea:
4c:14:87:83:69:ac:b8:a1:3f:ce:5e:19:fe:62:a6:
8e:26:81:f7:86:d4:19:fc:51:ca:82:f6:cd:06:6c:
83:e0:18:91:1b:f1:d1:3c:01:af:b0:66:6a:35:3e:
68:5f:d1:99:1a:ab:19:d6:cd:d0:f1:e4:c9:31:d2:
e6:87:a2:0f:ff:ac:a1:98:b9:50:ef:01:a0:5c:81:
fc:87:63:ea:0a:55:72:91:06:ec:b6:1f:43:0d:07:
2b:65:8c:ea:5b:6e:7c:5d:e6:98:b5:e4:a9:be:7a:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:15:94:3B:6D:9C:0F:77:BA:E1:07:F1:AB:D5:24:DD:D7:E8:99
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:fc:ef:d1:4f:e3:28:33:75:f0:90:db:61:0d:39:de:49:
fd:1e:d6:1c:bd:6a:d9:00:5e:d5:bd:f1:6f:de:5e:f2:a5:71:
55:e4:70:51:dc:2f:d5:32:83:05:c0:83:97:12:6f:2f:dd:9b:
d4:5b:80:ea:3b:81:23:5f:00:03:ad:8a:78:59:a7:bd:e4:92:
a4:20:0c:e9:7b:f2:8f:05:db:09:41:da:1f:fc:6a:ce:25:80:
61:05:2c:ae:37:af:6a:8e:78:66:80:86:43:cc:96:aa:e3:5f:
9e:16:bc:3d:d0:a9:ad:e1:7c:75:3f:13:4c:98:3b:db:9a:54:
9c:09:94:73:1f:15:eb:74:01:5d:0c:6f:00:ac:5e:8e:cd:cb:
5d:96:62:f2:98:99:74:e5:1a:70:66:30:3d:5a:54:77:99:5d:
72:68:13:7f:dd:7e:60:54:9f:bd:1a:19:49:7e:99:3b:f9:90:
88:ce:00:3d:35:4e:02:7c:e6:be:96:48:a2:3b:c0:8e:52:77:
a6:18:68:da:76:bc:e5:76:9e:5b:9c:36:2e:39:03:72:c0:33:
df:79:a3:03:3a:f0:60:c4:ab:10:00:ad:d6:4f:ce:b6:4f:75:
04:06:ad:72:bf:c4:81:a7:f6:36:ce:49:c4:24:c0:4c:a2:72:
f4:7d:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:12:24 2025 by rpki-client