Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: 3xj7ITGHI+Us2TOM/+fGFWzqoyBgF9U2Xvyu3zztUfo=
Subject key identifier: 0E:FC:20:71:1B:B8:38:32:BB:9C:A9:16:0A:D0:E5:86:8B:5D:60:E9
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 01988FC7B5732D021EAC2C2FEF143C082F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 15BC
Signing time: Sat 09 Aug 2025 17:01:26 +0000
Manifest this update: Sat 09 Aug 2025 17:01:26 +0000
Manifest next update: Sun 10 Aug 2025 17:01:26 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: Mw3DtXt/ge3OLbE11dhFpx7/eSDTtrpGrlqP20D96l8=)
2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=)
3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:b5:73:2d:02:1e:ac:2c:2f:ef:14:3c:08:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Aug 9 17:01:26 2025 GMT
Not After : Aug 10 17:01:26 2025 GMT
Subject: CN=0efc20711bb83832bb9ca9160ad0e5868b5d60e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:9a:ba:ef:96:3d:88:77:1a:8e:75:11:47:
44:7c:02:d7:31:67:c1:df:99:93:9d:97:26:8e:a4:
98:9c:df:f6:bf:ce:be:eb:dd:66:15:fb:02:ff:c0:
fb:f8:54:d6:d5:b4:ce:b8:51:f0:64:ee:8f:4b:8e:
6d:b4:70:69:4e:38:2b:9e:af:86:0b:06:19:1a:60:
50:17:9c:53:00:55:65:2c:2f:ab:a7:c2:05:22:f2:
db:eb:de:f6:c4:44:1f:c0:d8:f3:1f:2d:63:79:7a:
50:9d:76:d8:a4:b0:4d:f6:61:77:c5:07:44:12:3c:
b3:2b:95:e6:2e:ef:57:a2:3a:d2:fa:2e:26:7c:b7:
58:98:44:d7:ab:62:90:7c:44:86:8b:2b:35:6c:62:
8e:2b:20:aa:09:40:f4:4f:47:d7:a6:28:f7:fb:ed:
6b:b2:7e:74:7d:74:ba:e8:0b:91:b0:8f:03:43:95:
ea:e7:33:eb:cf:a0:8d:20:bd:5c:57:e2:5c:5d:63:
85:6a:ec:13:e2:bb:b6:d8:6a:2f:58:1d:46:35:83:
a2:28:c4:16:02:c3:75:b6:b0:c0:19:ef:d3:9f:fc:
73:f7:06:6a:81:06:12:db:e1:80:2d:77:46:fd:6e:
c7:03:f5:13:cf:e3:b5:7e:f9:db:16:af:27:11:17:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:20:71:1B:B8:38:32:BB:9C:A9:16:0A:D0:E5:86:8B:5D:60:E9
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:35:9b:6e:01:19:02:27:8b:07:34:4d:94:b4:ad:5c:40:cc:
6b:e0:d1:37:aa:c1:64:55:31:ff:8f:97:99:08:50:2d:61:e2:
1a:ce:61:23:49:c1:7b:31:53:c9:d2:8f:8e:d3:7b:82:e7:b0:
09:34:78:a3:b1:12:76:e9:e8:50:65:7a:0c:97:a5:80:40:12:
53:07:0a:11:24:1b:1e:22:bc:3b:5a:3a:d9:4e:4f:ee:a4:43:
59:a2:f3:82:1f:6e:86:81:12:18:94:38:5f:a4:08:ca:1d:48:
65:b4:0c:2a:26:c3:4d:ff:84:88:49:c2:34:e7:c1:52:cf:28:
de:34:4e:c8:bf:4e:40:58:23:df:bc:9f:53:bb:d8:4a:ac:03:
ad:bd:16:d4:71:35:56:96:d8:ce:00:d4:5a:42:4e:5e:e7:2b:
ae:1e:1d:4e:72:78:ae:c1:6d:bf:ac:99:89:d4:d3:66:2b:0e:
de:bc:b0:29:2c:df:ac:51:1d:53:c8:dc:aa:e3:60:59:3c:02:
aa:93:74:36:ce:b1:4f:70:43:73:3a:7b:b0:e2:5b:b5:45:f1:
bc:25:fc:a5:1f:bd:39:83:cc:e9:50:8b:a5:4e:55:a8:f6:54:
5b:a2:17:7f:8d:87:fa:49:e7:3e:c6:5c:1f:46:54:de:d9:12:
5b:23:14:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:48 2025 by rpki-client