Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
File: quarBHvHMpbJcVvLrq4ukYMWt4o.mft (raw, json)
Hash identifier: BfB8/l60k4DRHIXFbGl1DkrUusWBS6AhAoGhZ8JC53M=
Subject key identifier: BE:BC:1A:1A:BD:0B:44:EE:98:7E:B8:92:E7:86:5D:79:5B:B7:89:99
Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
Certificate issuer: /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Certificate serial: 01984C2F9A4EAB8EE6DE66A8B7277624B317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
Manifest number: 05D0
Signing time: Sun 27 Jul 2025 14:00:44 +0000
Manifest this update: Sun 27 Jul 2025 14:00:44 +0000
Manifest next update: Mon 28 Jul 2025 14:00:44 +0000
Files and hashes: 1: quarBHvHMpbJcVvLrq4ukYMWt4o.crl (hash: c1Zia+YvOxaYxy1RA/44XHWpaA5qWAYgXV8o1q0KaKI=)
2: uYoqxUmmvNO7Wii7YVSG5anWzrY.roa (hash: aA074fRdJxXnyU4wE12JFVrrch97b4B8/lsvIbEFtt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:9a:4e:ab:8e:e6:de:66:a8:b7:27:76:24:b3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Validity
Not Before: Jul 27 14:00:44 2025 GMT
Not After : Jul 28 14:00:44 2025 GMT
Subject: CN=bebc1a1abd0b44ee987eb892e7865d795bb78999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:b4:19:42:07:e9:e2:dd:1e:92:9f:62:2f:
5b:a7:c1:ea:cd:d5:8e:2c:5f:33:40:4e:18:99:11:
6f:e7:5b:4b:e0:c8:36:16:16:01:f0:14:11:85:c4:
07:0c:33:67:e3:ff:a7:a9:a3:22:e3:7b:e8:54:2d:
14:1c:5d:05:d5:6f:47:3e:b4:be:e7:6d:7d:13:01:
16:f4:b5:66:25:c2:f0:24:e1:3d:9d:ff:bc:15:4b:
fe:94:a4:8d:c0:d2:ca:e9:56:f6:7e:18:5c:c0:ee:
10:ec:dc:0d:06:fe:37:04:67:52:60:c8:70:ff:5b:
6e:d7:c7:9b:12:8a:93:02:6b:5b:cd:de:76:92:82:
c0:ba:7b:c4:9e:70:ff:5e:8e:0e:5f:8d:fc:59:98:
b2:89:bd:a4:fd:2c:e4:d1:67:a7:da:3c:9d:5c:bd:
bd:6e:63:d1:06:cd:60:77:cd:6b:c7:6c:82:59:77:
36:21:e3:05:2b:d0:b3:84:80:af:a4:7c:f3:ec:1e:
81:1e:ef:0f:91:98:77:1f:ad:25:22:f0:9c:e5:e8:
2f:5f:ae:9d:69:ef:9c:1e:27:1f:a3:6b:31:32:04:
61:95:7c:b9:94:6e:fb:0e:fe:1f:02:b0:83:d8:5b:
14:28:99:53:24:95:00:0d:c9:18:c4:ee:b8:cb:72:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:1A:1A:BD:0B:44:EE:98:7E:B8:92:E7:86:5D:79:5B:B7:89:99
X509v3 Authority Key Identifier:
keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:26:21:48:0c:0f:b6:8f:92:3f:28:cc:08:b7:bf:82:f7:
2f:9f:0d:8b:42:0f:62:a9:38:3d:73:70:69:cc:b0:3b:d9:66:
43:f4:2c:26:66:75:73:0c:19:81:a2:17:9b:d3:16:f4:ae:58:
62:98:44:b0:43:e7:db:7e:be:97:67:c9:ea:8c:8b:ce:cc:19:
7f:e6:0e:13:d3:0e:66:bd:1d:9f:8c:ed:42:6f:b4:06:5e:de:
ad:de:81:64:b3:86:c3:76:ca:9a:1e:7b:01:79:a0:56:29:72:
c5:5e:19:d7:c8:a7:6e:d2:89:a4:db:45:de:f9:e7:b7:06:af:
69:90:14:53:32:48:97:49:4b:7f:d2:c1:71:eb:75:a7:a1:9f:
76:79:72:ef:85:20:c0:29:f0:1c:16:da:b7:9a:89:83:5c:fc:
aa:fe:35:84:81:79:2f:03:13:d2:9d:ae:db:74:4f:37:e6:53:
94:0f:95:24:32:35:48:17:03:58:65:e2:f8:90:2d:73:c7:a1:
c6:b1:25:b9:25:fb:7c:2a:e7:95:3c:40:a5:9d:a6:8f:81:1c:
aa:7c:55:74:d7:07:43:04:a7:b5:c3:ef:15:32:cf:11:06:67:
bd:3d:2f:7c:3d:7d:5b:4f:f7:c2:55:ec:07:cc:af:a8:5f:3a:
00:51:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:54:26 2025 by rpki-client