
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File: qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier: 35stpkjgYOSED57Q6y4LGcqbIa2Ep8jGRxov3FoEs9k=
Subject key identifier: C2:F3:8D:9D:1B:46:C0:C3:41:E0:C9:1D:75:5B:21:7F:3E:51:B8:C1
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 0198733DC8BC2C0FCAFCB0ADEF8FDB34BD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number: 13BE
Signing time: Mon 04 Aug 2025 04:01:25 +0000
Manifest this update: Mon 04 Aug 2025 04:01:25 +0000
Manifest next update: Tue 05 Aug 2025 04:01:25 +0000
Files and hashes: 1: LgqWUP0536hPg5BCpisRq1CfwzE.roa (hash: vMIIsO4xKqj7JGP30ELt6Q8iCAR8hVZNP/9djB0t8ro=)
2: dJRAHiOGAXHi9ZK3B82VqToDqnk.roa (hash: uJbxE7UmTFUvOg3MJeibMc8I9N/6ZLAzoiFFQ1kOB8U=)
3: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: Rtp59X6Fu+gNGal/xdG2cFpEeDW+J5haQB1rZORJhm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c8:bc:2c:0f:ca:fc:b0:ad:ef:8f:db:34:bd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Aug 4 04:01:25 2025 GMT
Not After : Aug 5 04:01:25 2025 GMT
Subject: CN=c2f38d9d1b46c0c341e0c91d755b217f3e51b8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:6a:23:4f:05:79:65:37:af:0e:55:a8:13:
b7:75:75:e9:15:5e:80:bb:de:cd:14:cc:25:b4:49:
1f:df:31:76:7e:3d:7f:c8:0d:e3:90:e5:2a:aa:a7:
bb:15:6d:08:96:95:a1:7d:94:24:0f:46:18:5d:21:
f9:6d:3a:f1:f7:82:b5:96:8d:d0:20:36:56:d2:4b:
d3:86:6b:01:83:63:2d:af:2b:10:fb:37:e4:20:66:
84:2b:30:19:a0:ad:c7:92:37:c1:b2:f0:09:63:89:
74:ac:cb:1f:71:ed:65:62:4d:7e:bb:b6:0c:ed:73:
29:b3:14:27:9a:f9:c8:86:17:52:50:1c:fc:9f:3e:
88:dc:8e:6b:0a:ea:30:51:b5:98:b0:3b:ab:1e:94:
5d:f1:d4:7a:3f:ef:57:d6:ee:c0:2a:32:de:4f:ed:
50:9a:d8:4b:43:8f:1e:e1:33:d3:89:40:9a:21:44:
1e:6f:b4:45:2f:8c:c6:86:3d:ff:36:3b:06:b3:79:
25:dc:50:c3:4c:b2:1d:d3:10:39:02:93:19:32:5e:
7a:a1:ab:14:ae:35:b6:74:44:db:7a:5f:e8:9b:63:
49:b2:69:a0:83:e3:c5:54:dd:7b:85:a7:51:1f:03:
ad:d5:bf:f2:9b:88:ba:72:12:75:73:6b:19:36:c2:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:8D:9D:1B:46:C0:C3:41:E0:C9:1D:75:5B:21:7F:3E:51:B8:C1
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d7:35:27:81:46:f6:b9:39:06:97:5c:9f:ed:9b:05:e3:e5:
a9:6c:8e:2d:7c:9c:87:55:4b:92:e9:a0:ee:68:9f:58:ff:4a:
94:fe:2e:28:39:e9:aa:42:16:5e:54:27:39:ea:e4:39:78:27:
f2:7e:59:41:00:af:ec:37:fe:5c:86:62:ce:44:12:20:e8:d4:
b6:55:1a:45:a9:bb:69:9e:e3:20:5b:c6:c2:04:6f:e9:87:1d:
83:d5:8b:06:4b:95:20:66:9a:22:9a:a4:a9:27:64:0c:48:7b:
5d:59:9b:8b:3f:32:bf:ed:39:dd:e9:9b:9a:fe:c6:78:fc:a8:
a8:3c:cc:1d:7a:6f:61:e2:40:fb:c4:80:1f:fb:be:c2:5d:2c:
bc:c9:f9:fb:1b:d1:07:f8:b5:2a:12:47:dc:f5:1a:7e:1e:bc:
35:ef:8b:2e:1e:9e:3e:e4:3b:05:f7:88:2b:4f:66:34:81:54:
d3:b3:97:2c:fd:56:71:66:70:fd:e6:58:ff:65:8e:d8:fc:d6:
aa:52:c7:b2:88:bf:98:ea:c7:c1:43:08:de:e9:70:da:5e:8f:
74:a2:df:a6:e5:dd:60:98:95:f8:a4:0a:be:81:58:24:77:1d:
34:be:19:86:3f:80:c6:0c:fd:a8:01:05:9d:68:a7:6e:f1:cc:
e9:fc:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:30 2025 by rpki-client