Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier: QFM8K/69biS5lgyR8JADnxRhl3za0taoa3OdQ9XaFns=
Subject key identifier: 94:31:C9:47:A7:65:D0:5A:C5:D8:DD:ED:EF:18:E8:DA:2F:F9:0A:9F
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 01987A896AD328330077362E328C0BD35667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number: 0C0A
Signing time: Tue 05 Aug 2025 14:01:22 +0000
Manifest this update: Tue 05 Aug 2025 14:01:22 +0000
Manifest next update: Wed 06 Aug 2025 14:01:22 +0000
Files and hashes: 1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: 52hKbxTCywlb6y6q4S5zT3sV24XlePQZ9+aKnK0I8RY=)
3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:6a:d3:28:33:00:77:36:2e:32:8c:0b:d3:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Aug 5 14:01:22 2025 GMT
Not After : Aug 6 14:01:22 2025 GMT
Subject: CN=9431c947a765d05ac5d8ddedef18e8da2ff90a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:40:5f:c4:e5:97:f6:8f:18:b3:3e:15:fe:
61:49:bb:ae:ed:0b:58:44:76:9e:9e:3f:fd:a2:85:
6d:7a:2b:e2:d8:22:b5:89:41:0d:8a:23:8f:c4:e4:
fb:0e:1e:7e:24:7b:7e:aa:24:46:3a:75:b5:3b:3d:
72:39:f2:5a:53:3e:a9:4e:7b:34:d7:36:2a:ea:88:
46:c2:9e:4b:cc:35:1d:59:8c:8b:a1:44:9d:46:15:
45:9c:80:9e:75:2e:4a:a2:5e:08:46:a1:eb:45:74:
b0:f6:9d:bb:f7:27:c4:2d:16:2e:18:27:ae:2c:2b:
1b:d4:96:bc:14:85:be:30:e0:54:3e:bf:9a:f4:2d:
c7:15:5d:6e:7d:92:47:84:a1:da:91:07:4a:da:33:
a2:da:f3:f5:94:49:6c:0a:c0:7f:e0:eb:09:50:84:
56:16:ac:e1:7d:97:d4:ed:77:93:98:70:ec:66:d4:
df:2a:50:26:f2:c1:b6:46:b9:38:98:36:85:c8:11:
d9:77:af:dd:7c:bf:40:a3:6f:b4:3f:bc:a9:e5:6f:
8f:69:97:bf:26:02:23:94:0b:36:e7:f8:63:cf:51:
d9:9b:f2:68:94:d4:1c:9d:9a:0f:92:ab:f9:11:c7:
d3:f9:3b:70:50:40:89:ff:97:27:db:53:d9:1a:50:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:31:C9:47:A7:65:D0:5A:C5:D8:DD:ED:EF:18:E8:DA:2F:F9:0A:9F
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:79:2b:24:9e:7e:20:a5:8d:d3:eb:b5:5a:a9:0d:11:64:78:
95:b7:47:7c:1a:9d:f0:00:fa:60:10:34:0f:20:02:63:9f:09:
2a:2a:6d:ee:ee:ef:fe:ae:c7:fa:c7:cf:92:58:21:a8:75:87:
33:6c:01:0e:95:56:76:9e:f8:8f:a7:b8:03:6a:20:f0:7b:51:
72:3a:a5:bc:15:92:91:35:d7:9a:3d:73:8a:3c:c1:b1:bc:9a:
cc:d4:40:e3:4b:cf:01:5c:07:5c:93:a7:03:c1:04:42:f6:50:
4b:46:1c:2d:b4:88:88:61:01:76:f4:e2:09:ed:92:97:20:b9:
13:d7:48:96:50:f1:a7:fe:c3:c5:aa:c9:aa:0f:52:32:dc:60:
6b:87:e4:27:1b:f5:a5:3d:d6:c4:2e:62:9e:94:1a:c3:a1:60:
e6:34:0e:86:80:6c:7e:a7:cc:94:25:9c:1c:74:63:f7:fd:00:
39:95:fd:0a:b1:36:81:75:c1:25:af:be:a8:c3:8a:27:ed:1d:
f4:95:51:33:52:21:11:1e:05:4d:4e:a2:4a:01:61:be:cc:25:
b5:44:10:c2:ef:cf:70:fd:99:4c:5d:70:7d:36:f2:e5:2b:22:
4c:54:d5:db:6a:a8:20:8e:e5:cb:c4:93:84:bf:49:97:8b:3d:
81:c1:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:08 2025 by rpki-client