Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
File: QqbmQBmAE94SolHwhgMM14xzJRY.mft (raw, json)
Hash identifier: RQdI+4g8DAGnjbA96eJ6A1hR6p738p6RgmnhfiPwKlg=
Subject key identifier: 50:B2:70:AF:0D:A6:28:51:75:3F:CC:BC:FD:77:A5:8E:B4:79:3F:0D
Authority key identifier: 42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
Certificate issuer: /CN=42a6e640198013de12a251f086030cd78c732516
Certificate serial: 019897811868CDF5C0C712F0725072868A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
Manifest number: 15B9
Signing time: Mon 11 Aug 2025 05:01:16 +0000
Manifest this update: Mon 11 Aug 2025 05:01:16 +0000
Manifest next update: Tue 12 Aug 2025 05:01:16 +0000
Files and hashes: 1: QqbmQBmAE94SolHwhgMM14xzJRY.crl (hash: +JjM+CYgFCQb1nGhK1oIKOwtyRRZcndsUrHhh7sWerI=)
2: j37XoMC3UG0E_oUwTDht88JJrh8.roa (hash: cqy63HfmTCUoUdF/JZjPLrFzuSfjpRSNk0rinu9lqNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:18:68:cd:f5:c0:c7:12:f0:72:50:72:86:8a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a6e640198013de12a251f086030cd78c732516
Validity
Not Before: Aug 11 05:01:16 2025 GMT
Not After : Aug 12 05:01:16 2025 GMT
Subject: CN=50b270af0da62851753fccbcfd77a58eb4793f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:0f:a8:c8:8a:f4:72:a3:3d:0b:aa:15:d9:
54:05:53:de:4e:6c:10:39:4b:8a:17:84:18:ae:3e:
0c:62:b7:59:ca:23:50:d0:fd:4e:b6:6e:0f:3d:dd:
db:7a:ab:bc:48:60:f6:af:c0:f1:3e:94:b6:d6:e3:
40:e5:fa:ed:f3:5d:f1:0e:80:7b:06:e7:81:c1:76:
86:b2:ac:82:6b:d1:de:ec:34:b4:b7:ad:c0:09:5c:
87:70:52:a3:13:3d:4c:e6:ad:f7:10:bf:e8:69:13:
98:1a:65:71:ed:cb:81:2b:46:86:6c:19:53:c0:26:
25:4d:82:83:15:24:8f:e6:75:47:68:c0:22:18:26:
ae:59:7c:33:43:83:03:e2:ec:65:a8:d2:cb:76:e5:
d2:a2:ed:08:9f:1a:a7:16:43:a8:d0:bd:18:89:4b:
b0:79:2c:a6:97:6c:da:3a:e3:80:48:e7:d8:8c:fc:
37:5c:ed:e9:72:87:61:8f:b6:f1:e2:f6:76:88:79:
54:ce:2c:0c:ad:b0:0c:4b:35:d4:23:ad:d7:27:93:
25:fd:98:26:5d:ee:f4:b8:58:31:4f:a5:8f:8b:22:
62:e6:84:43:37:ef:ed:2e:ef:a9:bd:e1:24:15:63:
c0:ce:75:6e:50:2f:c9:4d:de:23:62:3e:0d:59:d3:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:70:AF:0D:A6:28:51:75:3F:CC:BC:FD:77:A5:8E:B4:79:3F:0D
X509v3 Authority Key Identifier:
keyid:42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:03:02:3e:83:9a:0b:a7:23:a9:a7:a4:4f:4e:bd:a8:e9:6b:
dc:36:09:66:2a:9e:7b:62:7f:6c:95:cc:d9:9e:9c:c7:35:6a:
80:b2:ab:8b:d5:a8:8a:a6:f3:c2:69:dc:5e:3c:8e:da:80:4c:
05:2a:d3:12:2c:a8:6a:3d:90:5e:64:4c:40:66:ef:bd:36:1a:
9c:d4:42:8b:d6:8b:3f:7f:cf:cf:c9:6c:d0:0b:61:5a:e4:a3:
d3:59:ee:07:7a:5a:4b:dc:c1:00:36:14:21:eb:da:93:78:84:
07:fa:83:44:f8:b7:01:00:24:fc:7e:3d:b2:f0:70:9e:ab:2e:
44:e5:34:7c:ae:d8:40:7d:6a:c1:a4:3d:5d:23:0d:85:68:26:
c2:4d:4c:a7:b0:96:55:cc:8b:40:5d:d9:eb:02:89:af:91:be:
45:cb:d6:64:b9:6a:e1:bb:d1:43:d1:ba:d1:8f:32:11:50:e6:
72:3c:db:6d:fa:de:8b:19:d9:53:03:f1:80:ed:d5:25:df:7b:
4d:20:98:53:62:a2:6c:1c:b8:4f:40:b9:dd:64:16:8d:43:dd:
c7:d8:4f:29:24:9c:c0:a9:c7:ce:b9:f7:b0:16:29:04:d7:3e:
24:f4:e2:49:cb:32:41:51:93:5b:ae:88:34:9c:14:5c:63:ee:
f9:a6:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:49 2025 by rpki-client