Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: 2sHEv7EuqBtlPkYbY3l9HsXZGq0vl5wi04a4ybQz8HI=
Subject key identifier: 51:1D:B7:5E:84:6F:DE:A7:FC:9A:AF:47:7B:3F:C2:07:5C:91:A4:DB
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 0198745080406A0AB5324EF2CD351641D664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 051A
Signing time: Mon 04 Aug 2025 09:01:29 +0000
Manifest this update: Mon 04 Aug 2025 09:01:29 +0000
Manifest next update: Tue 05 Aug 2025 09:01:29 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: OVqDWSocFwX0oUxKdpUJXQkyfyCojoeC0Rge546BSdY=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:80:40:6a:0a:b5:32:4e:f2:cd:35:16:41:d6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Aug 4 09:01:29 2025 GMT
Not After : Aug 5 09:01:29 2025 GMT
Subject: CN=511db75e846fdea7fc9aaf477b3fc2075c91a4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:58:ba:06:39:b0:7e:fd:d7:67:30:44:76:
34:83:cc:a7:65:72:3e:0a:25:18:e6:21:82:fb:ec:
b3:71:e6:02:29:06:05:38:cb:4e:94:4f:7c:b9:d9:
fc:fc:cf:e2:77:25:d3:a4:b5:a0:27:88:fa:6b:fb:
6c:20:17:6b:7f:ba:b1:d7:64:99:ea:ba:91:d8:d5:
92:48:49:b3:1c:d0:42:d9:08:1a:f0:a4:94:29:b8:
ac:06:58:ce:db:33:d9:be:ef:ff:19:1b:76:53:93:
bc:5b:fb:74:7a:b6:73:51:a4:b1:12:32:e5:3a:57:
f5:65:ae:c6:3f:85:f7:8f:d4:52:9a:a4:d7:61:8f:
cb:dd:dc:46:5b:6c:11:7c:79:5a:0b:f9:26:4d:c0:
c1:72:8d:90:bd:4e:68:9b:04:96:69:4d:30:09:6c:
9f:d2:2e:96:51:62:7a:28:f7:33:ba:99:5d:e4:3f:
44:73:19:ef:10:f3:95:cd:0d:15:ae:7c:60:8c:22:
40:ad:ef:fa:15:b7:c8:e8:53:cd:dc:31:4a:e0:ea:
75:57:72:75:4e:0a:44:82:58:17:13:4c:eb:06:42:
78:87:6e:7e:03:36:ec:06:07:e9:9d:b2:53:3c:63:
fa:73:9b:2b:2f:e5:32:90:92:31:5a:c3:1a:63:7b:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1D:B7:5E:84:6F:DE:A7:FC:9A:AF:47:7B:3F:C2:07:5C:91:A4:DB
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ed:ca:c4:3a:d8:a7:ee:5e:74:0f:50:a1:12:43:9d:b6:73:
45:0e:89:e1:f9:e8:d2:2e:54:17:99:1c:6d:7b:b2:3b:8e:68:
82:67:7f:a5:d6:6b:24:e9:6d:ac:01:a1:99:17:38:4d:92:9e:
a0:ac:43:0d:67:ad:76:99:45:76:3b:95:df:c7:98:17:b5:31:
f4:34:04:4a:7d:32:55:85:94:d2:53:da:cc:cf:1a:2e:bc:44:
71:db:73:d9:93:03:e2:51:aa:8d:9a:e4:56:0e:38:61:8c:56:
89:ab:50:36:fa:76:ba:4b:88:4e:7d:84:53:a0:22:80:a7:8c:
59:10:0c:45:f9:ea:ec:97:28:2f:a6:af:7a:55:90:f9:03:67:
2d:4c:6e:fc:11:b6:ac:06:b8:6f:bd:b5:a3:74:fe:84:dd:72:
01:8c:99:31:0c:87:2d:8a:9f:73:3c:aa:6a:35:7f:20:99:9b:
a2:d8:63:19:a8:46:03:2e:4e:2f:78:44:8d:d7:48:7f:71:6f:
4e:dc:a5:a4:9a:81:a9:c6:a5:a8:a0:27:73:0d:f1:6b:34:52:
a4:7e:c5:f0:5f:4f:e0:4b:fa:08:e9:be:a5:68:9d:ef:6e:e5:
9b:c4:b7:6b:52:ef:ea:49:7c:00:c4:28:a0:98:97:8f:e5:4a:
1f:33:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:05 2025 by rpki-client