Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
File: QBMclDl36gqT787s000dXRyxgq8.mft (raw, json)
Hash identifier: WulaBPgGmP2tTYR4mtuS3xS9WjScNRzVqAmh8OFUCgY=
Subject key identifier: B5:B6:1E:48:12:1A:AB:49:62:5C:30:B8:3B:E1:85:3B:88:7F:92:AD
Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Certificate serial: 01989F3A59C6D396ABEA8B9090A565A8CFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
Manifest number: 0EDC
Signing time: Tue 12 Aug 2025 17:00:57 +0000
Manifest this update: Tue 12 Aug 2025 17:00:57 +0000
Manifest next update: Wed 13 Aug 2025 17:00:57 +0000
Files and hashes: 1: QBMclDl36gqT787s000dXRyxgq8.crl (hash: WakMULCfIZpaawAckumDQK7oxxNZ6q0XlDnxDiMIM3U=)
2: ULUALQSKNZEpPcNq68X1y69o-9w.roa (hash: u+zVU0SkY5ZMKNVKnpjmcvlKMcttm6HzHNnhk032Vso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:59:c6:d3:96:ab:ea:8b:90:90:a5:65:a8:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Validity
Not Before: Aug 12 17:00:57 2025 GMT
Not After : Aug 13 17:00:57 2025 GMT
Subject: CN=b5b61e48121aab49625c30b83be1853b887f92ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:6b:6e:17:57:31:0b:3b:96:31:db:a5:e6:
c5:fb:8d:15:13:16:21:16:43:85:7a:73:9b:dc:c8:
dc:5f:81:c5:ca:49:ad:a3:3e:dc:1f:25:e4:13:d7:
8a:f6:99:aa:01:0b:81:2a:7f:89:6d:40:95:0b:70:
59:09:bf:96:54:1d:39:31:e5:87:17:ef:d2:55:ad:
00:b3:ba:6c:76:e4:03:1b:e4:9b:d5:ee:75:57:16:
39:14:8a:ef:a8:92:1b:fb:0d:61:f5:ea:fb:58:95:
23:91:96:f3:95:c4:55:59:65:1f:a6:aa:bb:97:f9:
75:ff:07:2c:cb:df:f8:9d:b0:48:55:06:24:35:33:
2e:8e:3f:5e:79:95:e2:bd:d4:eb:c6:d2:a0:f0:9c:
73:e7:35:ea:ed:08:07:0f:8e:73:11:21:35:60:9e:
4c:84:0c:71:8c:ac:ab:14:61:e0:ad:21:c7:b0:a1:
30:bc:d7:4d:3e:67:9a:5d:6d:a8:14:39:99:60:16:
ea:3e:99:e1:f9:24:af:f8:f5:76:5f:ed:4c:b6:75:
3a:32:2c:15:8e:a3:c4:77:89:9f:98:20:0b:ba:08:
23:41:bb:3b:4f:c5:5c:c4:10:3c:c2:c6:68:7b:88:
a3:a0:56:e5:0d:7f:5f:d3:40:00:6f:43:10:9a:e2:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B6:1E:48:12:1A:AB:49:62:5C:30:B8:3B:E1:85:3B:88:7F:92:AD
X509v3 Authority Key Identifier:
keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:50:77:bd:e9:8e:28:39:ba:ce:df:f1:e3:1e:c3:89:29:57:
db:dc:8e:44:87:a5:e3:15:3d:8e:11:ff:b0:79:8d:90:f2:f0:
32:0f:d7:21:38:09:65:7f:13:c6:52:fb:97:c9:43:bb:40:96:
d5:d2:f2:ca:d9:31:0b:23:25:7a:c8:74:fd:af:c7:0a:e3:a8:
2f:5a:77:d6:7a:e1:ee:9c:bc:dd:be:73:b9:a9:49:90:e6:44:
03:c3:20:74:2b:47:e6:dd:0e:13:56:2e:cc:99:10:e3:8f:3b:
fa:16:73:b9:67:3f:35:8f:e7:c1:51:4b:3a:7a:08:1c:9e:e1:
92:41:d8:d5:e8:b6:83:fe:99:ad:1c:36:2f:84:94:12:6c:76:
f3:74:78:3e:d8:b8:68:98:b1:e3:8b:a8:e1:be:1e:60:eb:9f:
64:99:fa:60:45:1f:0a:9f:c7:e6:03:d3:09:c1:d1:ec:4f:d0:
90:a5:72:b0:f3:40:c2:9f:46:63:29:6d:97:19:a6:74:84:b0:
f1:94:a5:8b:c9:3f:b7:67:49:53:6d:64:c1:19:b9:a0:e0:4b:
8a:c8:aa:18:c3:ee:2f:9b:e7:bb:c9:5d:87:66:49:a3:0a:56:
13:fb:65:57:cb:26:ba:d1:b2:be:4e:9f:51:1f:36:7b:16:6b:
9f:f8:9a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:58 2025 by rpki-client