
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: SMl3ic7I5svi8QnaDyumsKwr8zShMEDIoTM4NYSUSsQ=
Subject key identifier: 73:A7:11:97:14:41:C8:35:BD:50:21:09:89:F2:7B:71:7F:D7:A1:BC
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01987298418227E41B26438070A739E9F4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 130B
Signing time: Mon 04 Aug 2025 01:00:37 +0000
Manifest this update: Mon 04 Aug 2025 01:00:37 +0000
Manifest next update: Tue 05 Aug 2025 01:00:37 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: hF1GwLFuxLw9GeC7JgHKPQwtcYeMLUNLrDS6Gap7RX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:41:82:27:e4:1b:26:43:80:70:a7:39:e9:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Aug 4 01:00:37 2025 GMT
Not After : Aug 5 01:00:37 2025 GMT
Subject: CN=73a711971441c835bd50210989f27b717fd7a1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:d3:d3:75:4c:00:54:d6:3e:a7:dd:1e:b0:
e1:71:ae:20:e0:5e:e3:f4:ac:34:ad:88:61:00:32:
ae:83:eb:0d:e2:d4:0f:2d:e2:e0:92:18:b6:42:33:
83:43:f6:0d:9b:11:c4:e7:ed:bb:24:38:10:b6:4f:
39:d3:d3:d7:82:dd:cf:5a:4d:ac:1a:6a:19:cf:48:
ff:15:1c:75:6b:0a:f0:c9:88:5d:3f:0d:1c:02:c4:
14:1d:5d:e5:05:a5:3d:9b:eb:7f:1a:66:5e:91:99:
b2:2c:95:77:dd:1d:81:74:27:f8:69:47:00:0d:c1:
58:46:37:d4:3a:6f:07:07:56:c9:2b:10:b8:d7:ed:
f9:e1:fc:5b:b5:02:ff:2e:58:b6:07:9a:29:69:b5:
24:dd:71:a7:1f:23:05:82:d9:a3:4c:8b:90:20:3f:
18:ed:bb:11:f9:11:08:89:ec:73:b7:d2:c2:e5:bd:
35:ed:da:ea:44:dd:a2:a2:03:73:8b:8c:31:37:5a:
22:24:1c:28:b3:c8:6f:69:9f:57:9f:8a:29:4b:88:
e8:ee:fb:d6:b4:d3:0c:3b:04:ce:58:2f:78:8e:67:
bf:7a:46:f2:ae:c4:28:03:21:b2:f2:6e:59:1c:b9:
53:75:a6:3c:e7:8a:90:75:6f:8c:87:3f:c4:14:00:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:11:97:14:41:C8:35:BD:50:21:09:89:F2:7B:71:7F:D7:A1:BC
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:3f:82:7c:06:67:5a:49:6d:8f:32:20:11:0b:c7:85:e8:
25:12:10:5d:9b:bc:60:90:bb:16:8a:7f:d1:b6:2c:16:51:b7:
16:23:de:58:c8:9e:bc:e0:44:08:f9:93:14:15:63:da:0c:0e:
fe:31:47:40:04:15:b4:ee:b9:e7:61:8e:37:cd:02:83:3f:58:
dc:6d:75:40:08:20:0f:20:28:12:d7:80:2a:49:75:7f:2f:65:
ba:fa:fe:e5:d0:0a:dc:72:5d:b8:a4:38:40:96:6c:bd:92:b9:
8b:d6:c4:6b:5c:01:72:38:5b:78:ef:01:ea:cc:72:99:6c:1a:
32:d3:73:1d:23:72:c8:59:30:a2:0f:11:bd:10:98:a1:3f:56:
35:56:d0:98:83:37:57:76:7a:d1:e2:bb:2f:97:44:1c:56:76:
5d:87:14:9f:22:6c:7e:df:3f:41:3c:cf:0e:39:be:4a:cc:36:
ce:9a:3c:eb:0d:b8:6f:61:a1:78:4d:42:35:2b:34:ed:2f:f7:
6e:30:3a:77:fc:50:c2:b0:3a:d6:69:e9:35:2a:c0:2c:d4:72:
e7:22:32:cf:9a:fa:b5:6f:21:98:fd:f6:60:08:f5:cc:ff:e0:
c2:18:73:12:db:e3:e7:b6:a7:57:9f:ef:06:09:9e:e4:69:9f:
d3:6b:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:26 2025 by rpki-client