Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: Xs1RB4vYHapFtwG7PThmIPe6ifo2Gf5dV7lTuEC9KU0=
Subject key identifier: 46:14:9E:0A:2E:39:E4:A0:ED:EA:D8:16:48:CC:DB:7A:59:8E:3D:EB
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 0198741930DC1DE8689957BDCCCC5D101968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0CFD
Signing time: Mon 04 Aug 2025 08:01:04 +0000
Manifest this update: Mon 04 Aug 2025 08:01:04 +0000
Manifest next update: Tue 05 Aug 2025 08:01:04 +0000
Files and hashes: 1: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (hash: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: PR2rkGcA01/0I1oqqCvLjit/jvuIeVInSeQzOEY3kG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:30:dc:1d:e8:68:99:57:bd:cc:cc:5d:10:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Aug 4 08:01:04 2025 GMT
Not After : Aug 5 08:01:04 2025 GMT
Subject: CN=46149e0a2e39e4a0edead81648ccdb7a598e3deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:26:fa:b3:70:c6:b2:00:1f:6f:fb:c9:37:
c6:53:d0:1b:47:a2:2a:9a:ef:d2:31:09:91:28:3a:
5b:53:a1:77:72:d9:15:11:df:4a:22:54:72:e6:54:
25:e2:e7:8e:16:9b:18:44:a3:b3:12:15:28:0d:a5:
12:88:36:95:0d:94:a0:29:9f:b5:6d:d7:d9:ce:a8:
1f:40:41:f1:f8:85:cb:cf:41:4d:2b:55:fb:f1:51:
ca:11:53:2a:f1:cd:2b:81:54:ef:7a:f7:b5:e3:70:
8a:44:41:c4:c6:e8:a5:1f:a1:93:7b:6f:aa:e0:87:
f3:45:9f:7a:f0:56:9b:50:64:20:7d:d2:81:2a:1b:
f6:f4:31:c8:d7:a6:aa:ae:6a:3b:2e:92:1d:e6:86:
e7:9a:2e:86:7a:4a:78:fb:af:37:c2:e1:52:5f:9b:
7d:32:5d:6f:1b:1b:4f:2f:7d:a8:63:b0:16:e4:a3:
87:6b:87:a9:39:e5:8b:64:e6:6c:23:fc:d0:fa:09:
a2:1d:6d:c0:2b:9b:bd:fd:6c:a5:b4:30:23:0a:e5:
ac:75:d2:3b:08:1f:04:b2:b2:7d:3e:3f:07:9e:a5:
b0:d4:b1:e4:a6:b8:ea:c3:a2:55:29:88:50:ec:be:
17:a0:ae:13:0d:be:66:c9:2d:01:d6:cb:d0:a9:c4:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:9E:0A:2E:39:E4:A0:ED:EA:D8:16:48:CC:DB:7A:59:8E:3D:EB
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:20:33:c1:e3:74:62:a7:40:77:22:4b:0a:1c:e0:ad:70:69:
47:e8:b3:84:df:e9:e3:b5:24:8f:e7:60:3d:15:3f:f7:8e:14:
9f:f7:aa:a9:80:89:94:63:cd:d4:24:78:3b:c8:1f:80:38:1b:
4d:85:b9:88:f4:ed:76:a2:45:fb:6e:73:1c:ab:34:46:8a:a2:
db:a0:a2:e4:ab:14:28:fd:07:16:71:3e:58:90:9b:0a:89:62:
69:8e:fc:1f:7c:e8:e9:16:65:54:45:cb:cf:59:6e:e7:ad:1e:
e8:57:5f:13:68:f8:de:e3:f1:f9:35:c0:e6:e4:9b:f4:06:ed:
20:32:29:14:9c:3c:b2:3a:80:bb:a0:84:e3:6e:40:4d:ec:75:
38:3b:ff:52:5e:51:7d:61:37:87:e6:d3:e0:6d:c4:05:96:4e:
4d:c0:cf:6f:d2:06:19:6b:ee:78:20:a5:d9:2e:83:f1:da:ca:
92:20:4f:aa:f6:11:3f:3e:1d:0f:68:07:73:15:48:a4:67:dc:
d9:9c:95:4e:83:7a:fc:da:ce:5c:d0:60:6c:93:54:1a:6a:85:
96:c5:81:08:65:88:22:20:9a:67:c5:6e:9c:64:dd:be:4a:2b:
e8:7c:5b:31:8b:03:25:62:ff:2d:ed:34:f0:03:2a:31:e1:54:
f6:6f:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:07 2025 by rpki-client