Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier: ovJyvlkVInNbl8P2aKK5skgWS05DUUqS76TI3wZJMRk=
Subject key identifier: A4:A0:C2:5E:78:11:DA:98:0E:91:B1:BF:FD:80:7F:AA:58:AE:73:20
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 01987A88E9201B22734EC9ED7DC16651ACE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number: 02DD
Signing time: Tue 05 Aug 2025 14:00:49 +0000
Manifest this update: Tue 05 Aug 2025 14:00:49 +0000
Manifest next update: Wed 06 Aug 2025 14:00:49 +0000
Files and hashes: 1: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: q+5Mzh+gj12Y6YoSd5A9jvd0RmbLc1r9ReIDphRfLQY=)
2: tTBKVFQWZufXMYyq5fxW8fRNH90.roa (hash: YC4oYFYBwZQuGV+b+L7LVxd1pwxsZMobv4J4wury7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:e9:20:1b:22:73:4e:c9:ed:7d:c1:66:51:ac:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Aug 5 14:00:49 2025 GMT
Not After : Aug 6 14:00:49 2025 GMT
Subject: CN=a4a0c25e7811da980e91b1bffd807faa58ae7320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:c3:28:d6:89:57:c1:e1:71:c4:41:c3:24:
28:58:40:14:ea:b4:da:3d:b9:fb:b4:56:25:54:f5:
85:5b:3b:10:d9:37:5f:9f:a2:14:03:c0:9a:85:18:
41:3d:26:c5:df:d2:37:52:af:36:27:0e:36:8b:00:
08:90:99:7d:99:29:81:00:4b:1f:22:54:64:2f:6d:
9e:36:5d:20:66:3a:ae:0a:e1:eb:20:72:c3:ef:a7:
71:dc:18:75:58:9a:f8:f8:db:c6:8d:e0:3f:b3:f9:
fb:c2:29:db:66:05:3b:6b:83:5d:95:eb:c1:0a:f1:
33:b2:98:a1:dd:b6:6f:3a:4e:5b:b4:29:cb:85:34:
46:fb:7c:0f:56:75:d2:e7:9f:15:60:06:eb:75:ab:
0d:1f:50:ca:f4:65:67:6f:e7:a0:f0:87:aa:aa:ff:
6c:88:9d:cd:4c:d7:1a:4b:7b:6a:73:b8:88:ca:9f:
b1:45:a6:cd:11:78:19:17:f6:d3:4f:b8:d1:1e:a8:
a6:97:1a:ee:22:c8:78:d8:30:27:d1:58:b4:60:e9:
9c:96:52:fb:70:92:73:57:8e:0a:4c:f6:4c:60:3c:
55:32:4e:50:26:4b:b8:3e:15:17:29:80:e5:d6:73:
08:2b:0e:7f:3c:e2:4f:75:4b:5d:bd:51:1b:93:bd:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:C2:5E:78:11:DA:98:0E:91:B1:BF:FD:80:7F:AA:58:AE:73:20
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f9:e2:bf:f2:62:76:71:48:88:31:c0:71:a1:82:81:5c:82:
f8:23:30:d6:55:a1:fa:13:77:22:f4:bb:62:c3:02:a6:e4:2d:
c3:37:b8:41:e6:7f:9e:6a:ef:7d:cc:02:cf:9c:03:ba:32:94:
ef:8b:79:cc:58:3a:48:8c:7d:94:ef:dd:41:f7:08:b2:86:d7:
04:1c:ad:cb:58:8d:6d:9c:a2:1a:03:48:88:94:d3:aa:4b:fa:
83:95:07:6a:22:d5:b2:09:08:a8:11:49:27:59:68:41:cb:b1:
61:ce:7d:88:6a:60:fb:70:51:4d:a8:0a:97:ba:f0:63:6e:41:
e0:ea:f3:4a:12:4b:48:a8:79:bb:9f:7a:35:a0:2a:37:58:7d:
4d:a6:29:64:ac:f5:24:6e:a7:92:96:9d:fe:df:33:b3:39:f6:
bb:b7:5d:42:6c:64:ef:32:5d:70:d5:c9:a2:8c:ed:03:18:93:
bc:48:d1:75:c5:d7:e8:d4:92:84:ac:ab:0d:4d:42:8e:85:6d:
2a:9c:2f:56:26:7a:c2:85:86:d5:3f:3c:4f:8a:28:ed:4a:02:
0f:98:27:72:7e:84:75:51:7f:30:2a:1c:6d:4a:a6:9a:58:93:
63:06:f4:39:37:12:19:6f:96:e4:e0:fc:bb:a3:e6:9e:2a:5d:
1b:11:cd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:13 2025 by rpki-client