Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier: Keu6MSi8z+/Kvu3+JFyQxglcHs/s9QWN0gZJcVWzvJ4=
Subject key identifier: 4D:A2:FC:1E:90:A4:CF:4E:AD:03:A8:73:A2:80:C7:6E:48:E3:1F:AA
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 01987C781F36F094347EF6442B75EA19BCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number: 0E48
Signing time: Tue 05 Aug 2025 23:01:43 +0000
Manifest this update: Tue 05 Aug 2025 23:01:43 +0000
Manifest next update: Wed 06 Aug 2025 23:01:43 +0000
Files and hashes: 1: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: xA6uH5YStHBmLWOZG9ez1qIwheQiwZriaQx3R7nfYmM=)
2: q8epYF3ITJmcTk7KzU9-ybVTiI8.roa (hash: ynf0gvvVwgf87WpAamEBJq2+/MA1NpfszumEHpnlxfU=)
3: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (hash: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:78:1f:36:f0:94:34:7e:f6:44:2b:75:ea:19:bc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Aug 5 23:01:43 2025 GMT
Not After : Aug 6 23:01:43 2025 GMT
Subject: CN=4da2fc1e90a4cf4ead03a873a280c76e48e31faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:ba:4e:df:e3:11:33:72:25:2c:19:39:ac:
a8:09:65:cf:88:0e:09:03:bc:97:11:b9:e5:cd:32:
ca:d7:46:b5:81:81:91:bb:bb:14:f9:bb:b7:36:1e:
ed:01:7a:38:fa:36:13:cd:74:f5:de:07:aa:26:a9:
b5:dd:1b:85:e3:49:97:99:60:1e:64:3e:db:09:74:
26:99:df:e0:b8:ea:23:1b:41:3a:ec:94:5a:78:b2:
3f:b4:fd:01:78:4f:2d:7a:ba:75:93:83:78:19:2c:
70:49:1c:88:3a:27:e0:49:64:c1:49:55:d8:e2:c9:
c2:8f:ff:a4:f8:46:7e:20:28:0f:ec:6d:45:d7:48:
30:05:78:c0:8e:0a:9e:5d:ed:21:5c:b4:2d:a1:bc:
08:1a:12:94:cc:d0:4a:ec:14:28:90:68:71:3f:c5:
cf:30:f5:26:5d:43:a8:ec:37:ea:2e:de:d1:7a:fa:
85:a6:0b:06:6e:61:6f:13:3d:5f:23:ee:6a:85:3e:
45:c4:52:c8:e4:ac:87:9d:60:49:42:d5:eb:0c:b3:
bd:b8:6b:7d:6a:92:96:11:82:3b:4b:c7:be:d8:fb:
e7:f8:c0:d1:5d:28:2d:83:11:66:09:83:6f:43:86:
6a:f0:ea:90:2d:fc:51:cc:39:44:24:55:a2:3a:3d:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:FC:1E:90:A4:CF:4E:AD:03:A8:73:A2:80:C7:6E:48:E3:1F:AA
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:20:93:52:5b:11:9d:29:84:2f:ae:0e:9a:66:5b:3a:2e:38:
d7:38:81:aa:fe:11:8d:cd:1b:ee:ba:9b:81:67:e6:84:dc:97:
9d:66:b2:51:87:04:30:66:aa:2b:4c:4a:e1:b6:ce:e6:3a:00:
2d:63:6b:38:47:0e:de:6d:22:81:e9:1a:ec:54:64:4d:98:55:
54:0d:89:60:50:5a:64:5f:6b:f5:df:fa:74:7e:8c:95:3f:26:
26:98:61:d0:4d:6d:84:90:b0:62:b7:8e:25:ed:45:22:66:4a:
a1:b4:4f:90:12:c5:52:8f:10:0e:dc:0a:52:de:cd:c7:48:5e:
e5:3b:90:0c:5b:98:b9:26:90:a0:af:4c:93:e4:0b:aa:14:55:
d8:4a:b5:27:12:42:9c:1e:60:07:5f:28:32:83:97:7e:81:16:
24:d4:c1:42:5d:47:4a:45:b5:1e:4d:45:42:f3:ff:cd:94:d6:
02:0a:a3:52:1c:82:38:4b:f4:d4:c2:6e:d8:19:f3:3d:6c:68:
92:6a:1b:e1:68:13:04:69:9b:bd:26:b7:cb:6f:5a:ab:4b:07:
28:b0:02:33:ee:e8:58:c7:45:22:6e:e2:87:83:07:7c:fa:2d:
d9:64:d4:1a:c6:67:24:9b:c7:f5:96:61:65:3b:f4:fe:97:a6:
eb:e6:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:52 2025 by rpki-client