Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: BQVezWh6iVob6cNMet1ZvfMkI6Q4+3+MQsqj4cyESi4=
Subject key identifier: AF:7A:7B:73:57:8C:F2:71:37:38:E8:B8:24:DB:9D:CE:27:93:E2:99
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 0199326D7B7654BC988A78F99D54DAB892E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0B5B
Signing time: Wed 10 Sep 2025 07:00:59 +0000
Manifest this update: Wed 10 Sep 2025 07:00:59 +0000
Manifest next update: Thu 11 Sep 2025 07:00:59 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: dyAGouRMT/ByllyFZ2lyWh6/0L4/3o7obiH8bhdOQ8c=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:7b:76:54:bc:98:8a:78:f9:9d:54:da:b8:92:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Sep 10 07:00:59 2025 GMT
Not After : Sep 11 07:00:59 2025 GMT
Subject: CN=af7a7b73578cf2713738e8b824db9dce2793e299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:70:e5:32:ff:7a:e4:d7:e5:f6:fb:4f:da:
66:c7:eb:f5:1a:9f:79:37:b2:fe:c0:4c:34:71:da:
e4:7a:45:51:b5:1c:e6:73:9b:17:8d:ee:f2:9c:3a:
95:96:7a:98:d1:79:c1:35:8c:5b:e4:24:cc:58:f8:
bc:96:60:5f:10:f7:0c:73:9e:77:36:de:84:e1:14:
d6:4f:d4:45:22:fa:20:14:81:82:18:14:60:cf:d5:
2c:ec:3c:93:8f:bb:ec:a3:48:46:b8:bf:b3:f1:a1:
15:1c:7b:92:4f:d7:9e:aa:4e:c7:11:a8:5a:2d:36:
d6:5c:f5:51:75:06:e9:6d:45:30:1a:48:2b:43:b9:
15:a5:29:a4:2b:64:e1:ed:16:8f:ee:c0:9e:78:d0:
df:07:cc:d2:bd:f1:55:ce:e7:aa:17:ef:9e:d5:96:
1c:8f:b4:d2:cb:c4:d5:17:b7:3c:f1:05:7e:6b:9a:
32:54:df:17:5c:45:fb:03:5f:bb:5a:28:3e:7f:66:
17:35:37:b3:22:9b:03:f9:d8:eb:e3:9b:10:c5:f2:
fd:75:46:81:6a:97:60:a7:fc:5c:07:40:61:78:ee:
0b:66:70:53:51:a3:61:dd:33:63:f5:65:19:85:43:
84:23:3c:01:9a:a8:e0:47:34:97:df:cb:59:2e:b3:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:7B:73:57:8C:F2:71:37:38:E8:B8:24:DB:9D:CE:27:93:E2:99
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:9d:f8:c0:4e:ed:d1:e8:1d:cb:cb:37:9b:7e:4c:2f:94:
80:8e:8c:4a:82:2c:40:61:dc:84:67:c6:9f:e8:ce:46:85:bf:
11:ca:97:ad:04:3c:9c:16:e2:79:e6:24:2f:36:95:5d:c9:7e:
1f:e0:df:de:56:26:df:c8:b9:e4:3d:d6:dc:b7:21:f2:6d:4b:
a3:c3:c3:af:fa:9b:02:c2:8c:7e:7c:e7:7f:a4:15:b1:6b:8d:
9b:4f:f2:a4:81:e2:6c:0c:4b:04:2d:cf:b9:4c:83:29:de:91:
49:7a:90:61:2a:91:d4:bd:f6:12:5f:29:1b:71:d4:69:ae:38:
bc:ab:c5:19:1b:16:fb:9b:8e:1f:03:e0:f7:f3:da:5c:1a:fc:
a2:80:25:bc:1c:c3:5a:f1:bc:c7:55:7e:b3:b8:85:70:18:26:
b5:be:2e:44:8b:e4:f2:03:94:4d:46:02:75:a1:4a:f2:49:77:
94:bb:7b:05:ae:6d:d8:8b:a8:77:bd:28:da:c2:71:b2:23:94:
a0:1e:da:07:89:87:7a:93:89:be:05:b1:b6:3e:83:e0:9f:c5:
a0:f3:5d:fd:94:29:21:37:14:23:8c:a8:a1:c1:da:cd:a2:27:
a8:34:48:06:82:b4:a2:bc:27:bd:4f:d7:88:dc:a3:a3:b9:55:
22:01:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:30:14 2025 by rpki-client