
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: 76R0FoqVknnQJ5janbz3bV4B0DT+vjtnh+rKx9gC7zk=
Subject key identifier: 29:0C:EC:0D:51:3C:06:ED:10:9E:88:9D:F6:B9:EE:0A:85:6C:A7:F8
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 0198733D21A6A5C5CDB3951E38F08FC03E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 09E7
Signing time: Mon 04 Aug 2025 04:00:42 +0000
Manifest this update: Mon 04 Aug 2025 04:00:42 +0000
Manifest next update: Tue 05 Aug 2025 04:00:42 +0000
Files and hashes: 1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=)
2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: b9kjhxFLShIhfa0NJ4P1Ei3Sv1QdtFZBnmeJ6HJGhsw=)
7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=)
8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:21:a6:a5:c5:cd:b3:95:1e:38:f0:8f:c0:3e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Aug 4 04:00:42 2025 GMT
Not After : Aug 5 04:00:42 2025 GMT
Subject: CN=290cec0d513c06ed109e889df6b9ee0a856ca7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:0e:3d:b8:c6:f7:40:d8:bb:7c:42:20:90:
93:76:57:5e:20:c6:7e:1f:e1:56:52:4b:e3:1d:2d:
d8:4b:60:86:5a:88:3e:5c:83:67:e9:67:cb:11:4c:
e5:2b:59:36:df:e6:f8:01:81:c6:22:81:c7:f3:5c:
d2:d0:66:a4:de:ba:ed:88:57:3e:0e:a7:b0:4a:d1:
f1:74:e5:23:d1:db:4e:03:e6:24:86:29:68:ed:a1:
ad:67:70:d8:f1:6f:74:db:fb:dd:91:44:d5:52:09:
ee:b7:4e:9d:a8:aa:c7:95:9c:0d:af:30:a9:d2:34:
47:ba:f5:94:44:ac:a9:0c:2f:12:12:f2:66:2e:bd:
0c:a2:77:a6:f6:c0:af:bb:c2:aa:e9:cc:8b:9b:8f:
3d:27:bd:ba:68:5e:4a:9d:0a:ed:3e:c7:aa:3a:1c:
a0:c9:3a:44:71:46:50:69:67:62:5b:0d:8e:3d:74:
7e:8a:d6:dc:62:99:8b:42:f2:d1:ff:48:ed:10:85:
a4:b8:4d:67:66:c0:a1:a5:be:57:38:d5:e0:8a:02:
a5:ec:f0:cb:c1:38:35:9b:61:a1:2e:72:5f:28:8d:
01:1c:17:18:48:02:03:ff:b9:83:83:8b:72:4f:04:
93:3f:16:bb:ea:ca:5b:33:21:ef:2e:88:7d:3b:f6:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:EC:0D:51:3C:06:ED:10:9E:88:9D:F6:B9:EE:0A:85:6C:A7:F8
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:a9:a0:a5:61:cd:8b:8f:a1:2d:51:3b:c1:e8:c5:4c:fc:
e2:28:85:6f:3a:1b:1c:e8:ba:7b:fb:18:74:a8:fd:ea:6f:25:
5e:12:65:81:d1:e0:2a:1d:d9:2d:39:4b:00:14:55:11:fa:46:
79:02:0c:ed:c8:6a:77:93:3b:24:96:b3:b9:26:bb:5d:9b:1d:
fd:06:b2:b6:cb:91:48:35:87:c9:76:de:35:f6:d9:4a:6b:ee:
cd:cd:95:9c:17:e0:eb:76:e0:d1:51:1e:ed:ef:0c:ed:b2:b0:
79:43:b2:47:6d:53:69:2b:42:02:c2:22:d5:85:17:04:95:c8:
21:26:d9:65:5f:74:40:a8:fe:57:46:4c:1f:ad:3f:7a:29:c8:
bb:3a:e1:72:81:f5:50:8c:37:66:f2:84:b6:0e:91:fd:a0:b7:
06:af:13:ec:ba:10:bb:1a:6f:fb:e5:3e:a4:ca:95:57:b5:94:
36:d7:d1:97:7c:09:79:5d:d6:c2:75:76:64:31:f5:12:60:54:
bf:01:d1:c8:6e:a3:66:91:37:6d:50:2d:ad:2e:8e:98:b5:6d:
39:f0:89:95:06:1f:e4:f0:06:4f:31:ec:f4:74:2f:f5:f9:bc:
40:74:6d:bd:aa:44:35:20:df:31:f2:c4:b1:91:0c:de:d0:40:
61:35:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:19 2025 by rpki-client