Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: 5cnzUs2tTwpdEPnNuMoh81A7WcpLd5CFSJloRiYU2hM=
Subject key identifier: 4C:1A:1D:27:06:E3:2B:58:D0:9B:4C:6C:6B:84:1B:48:53:06:10:EE
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 019874F490F57C54047FCBC39E759C7D90F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 10DD
Signing time: Mon 04 Aug 2025 12:00:41 +0000
Manifest this update: Mon 04 Aug 2025 12:00:41 +0000
Manifest next update: Tue 05 Aug 2025 12:00:41 +0000
Files and hashes: 1: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
2: jGJqFQVdzPNIuq__x_RJveRfPgI.roa (hash: l/kSncaCyGC+QqprUZGRI2OdInXO3OkPgy+W2EUBUIg=)
3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: UeJ0Jt5arkkTNogOldALEsAJn4e1/OF/68edTp+AArs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:90:f5:7c:54:04:7f:cb:c3:9e:75:9c:7d:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Aug 4 12:00:41 2025 GMT
Not After : Aug 5 12:00:41 2025 GMT
Subject: CN=4c1a1d2706e32b58d09b4c6c6b841b48530610ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f3:fa:e2:91:75:cf:d1:21:b1:3d:10:89:bf:
1f:de:a2:91:fd:d8:94:9b:37:7f:94:2d:10:31:5d:
5c:b2:da:41:5d:d8:f8:76:27:da:eb:bd:ef:84:a9:
65:2b:7c:b2:44:2c:55:aa:9a:c8:47:76:05:4d:05:
0f:58:e0:b3:da:bc:e3:02:9e:5f:67:2e:94:0a:48:
1b:55:bf:51:cd:fa:21:7b:37:f6:79:ff:45:7a:37:
61:d9:6a:d8:7c:2e:cc:9e:8d:d0:7e:cd:73:9b:a4:
87:31:87:f0:fb:35:80:b4:a3:ec:0b:91:2d:1d:80:
b2:3e:dd:63:6b:a4:28:07:e9:00:02:93:99:ec:f3:
43:8c:e7:ce:0f:8f:da:a5:c1:66:8e:32:73:9c:03:
2e:e7:b0:c1:fe:4d:69:d7:39:85:4f:15:95:08:55:
a9:85:f5:6e:36:57:30:c1:b5:89:e8:9a:e4:ee:91:
b0:5b:dc:3c:71:4b:f9:c3:9d:2d:f7:63:b9:fd:e3:
db:9f:c0:35:bf:8c:77:53:32:8b:37:5d:f7:48:54:
3c:85:31:da:f0:84:26:97:f5:ab:c1:9d:8a:4f:ee:
95:56:27:31:7c:c7:7b:bb:df:02:0c:86:a1:c5:34:
48:45:58:73:a5:62:f9:91:ca:7c:e1:fe:be:d1:d4:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1A:1D:27:06:E3:2B:58:D0:9B:4C:6C:6B:84:1B:48:53:06:10:EE
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:db:6e:b1:99:22:65:e5:75:f0:3b:cf:dc:8f:63:21:33:89:
9c:77:8b:b1:04:5b:ab:2f:95:da:05:3f:98:e8:d0:91:e8:6d:
78:95:cc:0d:7d:18:36:85:e0:1e:68:74:66:79:d6:d6:da:72:
44:ab:5e:fa:e0:04:04:48:a7:1e:1c:c9:d2:f6:11:59:0e:83:
cd:6f:47:ea:d9:15:a6:c4:24:92:07:34:f3:b2:3d:5b:a8:47:
f8:2a:49:e2:b8:fc:57:f6:ad:b2:d3:93:a5:96:1a:76:f2:37:
86:cb:a1:94:7e:2b:1b:80:00:1e:81:df:4c:7c:56:47:d5:eb:
79:8d:f0:90:45:bf:5f:cc:ac:a3:7c:9b:50:6f:c5:a4:19:46:
1e:09:cf:9b:b1:f1:4d:a4:22:82:65:71:a2:91:5b:7d:df:05:
20:80:ad:72:dd:f3:ee:68:c0:35:d4:3c:d4:61:b8:f3:aa:3d:
56:a7:ec:3f:f5:bc:6d:1e:fe:5b:91:91:2e:88:23:35:1f:8e:
53:c7:94:47:1e:57:e7:61:f1:8a:a5:4c:4a:55:d6:0e:6e:04:
2b:cb:1b:d1:2e:34:6a:06:d2:d5:5f:8f:2d:64:5d:84:e9:f5:
d2:a2:c8:f4:9e:8d:5c:39:d5:67:5d:f8:08:58:d6:f9:a4:35:
e9:fc:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:32 2025 by rpki-client