Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier: naX4C/jjs7Qtqg/mO43Is4kXRUuR5xCu5gMCPbxrrJg=
Subject key identifier: B2:4B:A0:EF:CD:07:E2:01:20:BC:04:19:22:FC:B4:2B:5F:E8:70:36
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial: 0198744FA6299D62158CC1BE4481DC444162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number: 0598
Signing time: Mon 04 Aug 2025 09:00:33 +0000
Manifest this update: Mon 04 Aug 2025 09:00:33 +0000
Manifest next update: Tue 05 Aug 2025 09:00:33 +0000
Files and hashes: 1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: tG2kFiNCiWTEEil0L/CefMSpHyRPhBKzYgfV0yy5jWA=)
2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a6:29:9d:62:15:8c:c1:be:44:81:dc:44:41:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
Validity
Not Before: Aug 4 09:00:33 2025 GMT
Not After : Aug 5 09:00:33 2025 GMT
Subject: CN=b24ba0efcd07e20120bc041922fcb42b5fe87036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:65:40:41:ba:f5:5b:0f:85:db:bd:1d:ba:
75:f6:c6:f6:78:0e:c0:0b:26:4c:8c:4d:b0:c2:aa:
b9:2c:4c:07:d9:dd:17:fb:56:9e:e4:57:95:7b:dc:
b9:6d:25:ce:03:1d:9a:c1:30:c1:b6:97:4d:87:ea:
f6:c4:f4:a4:44:e2:f0:3a:a0:c6:be:dd:ac:34:a8:
a2:dd:72:af:6b:d2:36:0b:e2:b4:fd:4e:f5:df:f0:
34:d5:6f:2e:7d:d0:c1:9d:ee:f7:83:46:c2:60:0b:
cb:4e:d5:0b:cf:5d:1a:1d:8c:c0:f3:af:a5:14:c1:
3a:ec:6a:e4:40:7b:dc:26:87:d8:6a:f1:42:ac:cd:
d3:71:23:6f:e9:52:0e:33:4e:2b:96:12:08:09:e0:
d5:08:41:55:59:f8:9a:f3:9b:0d:61:f7:07:e0:56:
0d:e1:75:e3:65:78:0f:fe:ba:fb:13:e4:6c:a9:7c:
da:14:cf:96:e7:30:02:25:98:de:c4:41:fa:af:27:
78:91:20:a2:12:a9:11:de:85:5e:1c:a1:9e:33:f5:
6c:ee:95:76:7c:dc:d9:8d:61:1c:a7:77:fe:4f:a2:
c0:6e:93:3a:12:d2:0f:0f:19:ff:ce:0c:96:40:84:
2a:b5:ec:8f:0e:67:5d:8f:e4:9b:31:53:0d:f9:b4:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4B:A0:EF:CD:07:E2:01:20:BC:04:19:22:FC:B4:2B:5F:E8:70:36
X509v3 Authority Key Identifier:
keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:da:32:ee:81:4f:8d:4c:51:ec:47:76:f6:69:49:7a:43:85:
30:bc:a8:cf:d7:bf:af:0f:fd:46:07:0b:b0:5c:fd:d3:7d:0d:
b0:84:8b:cd:20:46:64:c9:cc:64:e8:79:44:28:8b:cc:a4:9a:
5d:5b:3b:e5:13:3b:3b:d7:ae:fb:62:6b:ca:78:79:5a:ef:2a:
7b:07:df:72:a2:6c:10:3b:7f:14:88:33:90:7c:85:72:ad:18:
29:88:d3:0d:a4:55:11:ca:c3:74:06:f3:7d:73:97:81:66:99:
c7:aa:2e:5a:a7:6b:75:a3:1c:1e:2d:bf:57:e6:e0:84:99:1b:
31:10:88:6e:b9:bf:9b:fa:c4:5c:d7:9b:b5:3b:b7:87:0a:b4:
40:fc:bd:ed:e7:15:d3:1e:59:d8:d7:bc:4f:b4:df:1f:65:2c:
cd:28:18:e1:a6:af:cf:02:b4:95:dd:9f:08:cc:1d:90:20:00:
13:de:c4:37:04:c4:79:42:10:00:99:04:d4:4b:c2:7c:1a:2c:
98:42:95:e8:c9:7f:30:8e:29:ba:66:07:33:e7:86:a1:6f:dc:
68:b1:0b:56:46:1e:3d:ff:d3:85:7b:60:e4:35:b6:d1:39:38:
4d:1d:33:94:a3:24:d8:2e:e2:05:5a:cb:43:42:fa:a1:f7:f9:
fa:48:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:16 2025 by rpki-client