Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier: 2U0N41g8MHZBDZdKfbMmkIge7auALJLMwauXjboMYe0=
Subject key identifier: 8C:74:DD:7D:1B:A3:C5:11:88:C1:D9:F7:BF:D0:FA:65:DE:D1:B3:48
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial: 019880F933C2D1619C12B65AFD9EED590512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number: 038A
Signing time: Wed 06 Aug 2025 20:01:11 +0000
Manifest this update: Wed 06 Aug 2025 20:01:11 +0000
Manifest next update: Thu 07 Aug 2025 20:01:11 +0000
Files and hashes: 1: 5lkgevE67JqLPCJiuIVDQvx8C9s.roa (hash: TbV0l1n+K1FvkmmG4RWk4U+vij9oLV2Tx8NUa3IQ8as=)
2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: 7U4HI2UX+02JtZrcui0gBxRaYXN8jbmqLSQsZCM5+sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:33:c2:d1:61:9c:12:b6:5a:fd:9e:ed:59:05:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Validity
Not Before: Aug 6 20:01:11 2025 GMT
Not After : Aug 7 20:01:11 2025 GMT
Subject: CN=8c74dd7d1ba3c51188c1d9f7bfd0fa65ded1b348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:57:0a:bb:f0:37:6d:b6:c1:73:37:f5:b7:
a5:a1:31:ba:d7:d6:97:27:36:04:80:df:5a:b2:c6:
f9:ac:d7:73:9c:ab:77:6a:b4:fa:42:ea:d6:6c:d4:
c0:48:b6:4c:f3:73:c4:7d:43:3a:1f:a0:12:19:2a:
79:3e:f8:56:3a:39:c1:d4:58:27:a2:ee:57:38:99:
43:62:a4:4a:be:16:ae:a3:32:67:4c:8e:06:32:0c:
a8:78:67:3e:48:bf:e9:b3:1d:71:b5:f3:4f:a1:0e:
d9:17:3e:5c:49:b5:8b:8b:78:d4:22:d3:34:51:a2:
41:f9:29:e3:ef:79:91:6c:ef:2f:63:88:55:b8:8e:
7b:ae:5d:3f:4e:3e:35:94:3e:3b:6c:86:c3:bf:ef:
81:c8:d5:60:ec:5b:ab:c9:b5:e8:90:26:ee:8f:0d:
f1:ca:38:3c:5a:7c:23:41:a9:9b:5d:b3:1f:fa:19:
73:9a:28:b8:a1:0f:fa:73:bc:b4:8e:30:34:b8:23:
09:46:df:55:e1:51:eb:ea:1c:9d:6c:73:23:25:e4:
02:42:9a:45:6c:d6:2d:d6:87:22:ad:93:e7:ce:be:
87:d1:48:01:28:00:1b:3e:3c:49:ab:7d:36:78:c2:
49:cb:7b:ac:43:76:61:8f:2c:83:e0:ac:da:38:45:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:74:DD:7D:1B:A3:C5:11:88:C1:D9:F7:BF:D0:FA:65:DE:D1:B3:48
X509v3 Authority Key Identifier:
keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:01:ba:88:0e:e9:99:fb:f2:e5:da:8a:6a:cd:0f:6c:22:46:
33:a4:7b:7b:f7:8d:32:53:3e:2f:2a:71:05:c9:99:f2:f6:bc:
9a:97:f2:8d:89:1b:28:4f:28:44:68:64:0c:5e:88:3e:90:ef:
99:8b:85:f7:20:58:0b:9a:b0:d0:ef:7f:82:a0:fa:4e:bb:9a:
c6:d0:cb:c6:fb:b2:28:9d:cb:a0:19:0e:7a:2c:c2:12:4f:aa:
7e:7f:fa:82:4d:72:a7:bc:8e:6c:1b:68:ca:4e:c1:25:e8:ed:
c5:f5:c4:59:fc:79:aa:fc:34:6b:17:18:d8:20:b5:97:33:09:
fc:b6:a6:76:f0:3e:a2:e4:b2:0e:20:5a:1c:8b:93:81:12:1b:
ed:0e:f8:9c:cb:8e:e7:e1:43:68:c5:1a:64:11:63:93:76:c8:
fe:00:10:05:ce:a1:06:60:1d:73:36:27:06:71:dc:ce:aa:81:
c1:8b:df:82:06:da:ae:b7:33:69:b7:9c:ad:90:c1:05:3b:48:
9f:f1:fb:52:18:c5:33:34:d7:a7:bf:52:ee:1e:c1:f1:fd:69:
de:df:10:af:eb:09:07:8d:47:ef:71:eb:75:48:9d:db:95:f5:
0b:f3:e6:77:d2:c9:68:89:35:91:3a:31:a0:89:c9:22:ed:1d:
4e:77:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:50:53 2025 by rpki-client