Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
File: qGBXhZ0WYOjYcpee5tamssQzowU.mft (raw, json)
Hash identifier: 6/8GppFTlpjqYbvCAgqDk8B+CG13UIOUXVomgwVPT4E=
Subject key identifier: 24:94:49:85:D7:6F:3C:95:95:B1:3E:52:32:13:64:C3:83:D6:D6:52
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 01987DC1078F9F2316385D2D4DCB653C0CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 05:00:58 +0000
Manifest this update: Wed 06 Aug 2025 05:00:58 +0000
Manifest next update: Thu 07 Aug 2025 05:00:58 +0000
Files and hashes: 1: PW17_Y421OHbEdWMpqGOAItDAMQ.roa (hash: L2gpot5aAwJ9/O+fD4LlOhf1tqLhMij+IcuFZyDR7dA=)
2: qGBXhZ0WYOjYcpee5tamssQzowU.crl (hash: vRSXYC6VT243CuQJKdnofh+GEnPahsbqQqdohr0kFGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:07:8f:9f:23:16:38:5d:2d:4d:cb:65:3c:0c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: Aug 6 05:00:58 2025 GMT
Not After : Aug 7 05:00:58 2025 GMT
Subject: CN=24944985d76f3c9595b13e52321364c383d6d652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:46:3c:64:30:dd:07:af:92:77:c9:10:4f:
4f:75:18:1c:c6:13:ef:58:fb:5f:61:6f:4f:d4:38:
38:44:e6:ac:3e:57:aa:23:a4:ac:33:d9:76:a6:78:
50:e0:cb:87:9c:84:05:17:49:b2:fc:92:e7:94:e8:
58:d8:d1:88:5d:c6:85:52:07:92:ce:0c:23:b1:d4:
ce:b4:ea:4a:5c:6c:4c:2d:43:44:9e:a2:7a:6b:e1:
da:ca:19:c4:a5:7d:f3:fc:e7:49:77:42:89:f4:30:
53:bb:e7:be:6c:ed:d6:ba:98:8b:a8:ea:99:0b:20:
4f:7e:52:3c:9e:c4:62:6c:48:83:df:05:f1:2e:76:
7d:50:14:59:ae:4a:97:32:c4:34:e8:36:99:86:9b:
84:93:21:c7:d0:8f:84:93:77:91:a1:ae:69:50:d2:
d2:ca:78:fe:53:f7:b7:5a:58:ba:88:70:06:c4:07:
c2:b5:dc:09:fb:0c:7a:4b:ef:22:ff:93:7f:9f:16:
b5:0d:eb:67:2d:94:5c:16:96:45:fd:e2:e1:be:a5:
2a:49:35:60:72:a7:aa:06:6a:b9:e8:0c:2c:d1:45:
c9:e2:60:ea:77:f1:f0:82:67:f7:0a:78:11:1d:a5:
d1:0c:a3:52:71:c3:93:7c:db:c9:33:55:3f:a7:38:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:94:49:85:D7:6F:3C:95:95:B1:3E:52:32:13:64:C3:83:D6:D6:52
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:0b:70:d6:10:49:55:df:21:e3:dc:c0:4e:da:cf:be:2a:
ef:ac:82:94:75:1f:30:7f:60:f6:dc:5e:83:75:57:2f:66:ec:
f9:aa:ba:a3:6f:03:5c:c8:68:67:d2:18:bc:92:55:4e:9f:63:
66:ab:70:c9:e8:ed:7f:74:ab:fc:34:89:40:8a:ff:a2:ee:e2:
8c:1d:35:2a:93:86:b6:af:0e:74:7b:9d:13:f0:b6:a6:9d:5f:
d0:64:d0:77:05:0d:bc:e2:a2:33:05:77:a8:08:2c:35:23:70:
1e:1b:88:cd:49:b2:96:ad:11:b3:af:9e:07:95:da:74:aa:15:
55:6f:bc:e7:98:46:0f:7d:a1:00:07:37:d3:14:2d:99:95:f6:
90:3e:32:0b:20:5e:63:54:8f:43:2a:03:66:3d:f1:60:80:6b:
4c:21:0e:ba:03:a4:3a:60:d1:80:7b:b7:a0:ef:a0:fe:a2:bd:
63:23:6d:0f:05:f6:f2:c7:e5:08:37:a8:2c:5e:a7:33:c8:c2:
f9:71:1d:43:41:01:95:29:f6:28:73:ef:d0:57:f7:cf:c9:72:
83:4a:f4:46:df:d5:f5:cd:4d:8e:80:e6:c6:dd:29:6a:ec:cb:
fd:f6:a5:86:a7:2a:5d:8a:85:88:ea:48:60:59:27:ec:f3:f4:
83:9b:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:31 2025 by rpki-client