Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: 5UAlp3DE4xK1p2ds7a0sUmppJdi1jfhb9PFEwiVWf+c=
Subject key identifier: 09:BB:ED:2A:D5:38:3B:D2:18:71:DC:DE:68:5F:E0:2B:F5:3D:4B:F5
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 01988A3359E8943167CD6180DB0D69A4DCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 1557
Signing time: Fri 08 Aug 2025 15:01:17 +0000
Manifest this update: Fri 08 Aug 2025 15:01:17 +0000
Manifest next update: Sat 09 Aug 2025 15:01:17 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: n+fB9EKVOV11t78BR6NGSUwDar2v73PVHkpov1f/yJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:59:e8:94:31:67:cd:61:80:db:0d:69:a4:dc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Aug 8 15:01:17 2025 GMT
Not After : Aug 9 15:01:17 2025 GMT
Subject: CN=09bbed2ad5383bd21871dcde685fe02bf53d4bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:30:01:1e:e5:f8:50:e2:f3:18:4f:d6:cc:
1c:64:97:3f:a3:53:fe:75:ec:92:f6:d7:34:bf:31:
39:d8:4c:83:01:85:36:5d:16:bd:ca:f1:cd:3b:33:
41:2f:6c:89:65:6a:8e:d6:15:92:e6:78:dc:69:21:
76:db:d0:20:40:6b:0c:0a:a9:b9:e5:96:f5:fb:3d:
60:dc:96:91:fd:0c:b9:01:b4:ad:97:a9:56:04:b8:
94:35:ab:68:6d:4d:dc:4c:0e:a3:79:8a:3f:79:13:
2c:78:28:ca:1f:55:e0:ce:9e:b8:4a:d2:65:8b:3a:
af:10:81:d0:61:21:54:18:2a:48:a1:9f:dc:b6:62:
a8:8f:a8:9d:a5:a4:59:ed:ba:d5:7c:6c:f5:90:38:
c7:2e:41:e3:58:c6:39:91:56:08:cb:97:5f:e7:0c:
60:cb:fd:c6:4d:4a:6d:a2:32:89:16:4d:ad:ad:78:
8b:41:a2:2e:5a:96:a7:10:cc:ef:8b:17:06:b1:fc:
f0:7e:ca:66:a9:e8:56:68:5a:70:f5:7a:53:b3:74:
07:40:a9:b6:a8:70:1e:e1:d6:3c:32:fe:73:5e:1d:
db:68:d7:e7:83:41:64:00:f4:80:1e:2c:20:ea:f5:
20:cd:8a:7f:30:63:09:66:57:42:21:af:b7:00:20:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BB:ED:2A:D5:38:3B:D2:18:71:DC:DE:68:5F:E0:2B:F5:3D:4B:F5
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3b:75:a7:ae:4c:c4:31:cd:fd:d3:b1:f4:2f:74:f1:e9:64:
3b:06:43:60:cf:8d:c9:b6:b3:e8:f8:dc:0c:35:c7:8d:55:8d:
26:89:18:2e:3f:77:3e:a3:d2:a8:94:0f:3d:b1:d8:78:ef:85:
d7:d2:9a:7b:8e:24:81:ff:58:56:52:5f:a5:13:b6:8d:76:60:
4f:ed:9c:fe:7f:84:aa:87:cc:84:d0:00:cd:bc:62:25:b8:eb:
98:eb:1a:3b:1d:8a:27:c3:40:ce:16:12:ca:0f:e5:1e:ae:a2:
ce:cd:4a:cd:0e:13:dd:39:03:47:36:0c:1b:71:af:18:71:b0:
6b:7c:3d:24:44:53:b4:ae:1c:3f:76:77:41:f1:ef:98:b1:2e:
5a:97:19:a1:c1:c7:b3:f6:cd:8d:91:2c:ed:30:4d:03:45:45:
b3:05:9e:45:65:68:da:7b:91:b7:e0:49:a1:56:c0:df:c7:70:
f7:ba:8e:6c:2d:76:d6:16:e6:b4:f3:29:d1:af:cd:23:67:eb:
26:18:1e:08:61:15:2e:92:ec:e4:f7:cc:bb:65:08:a6:92:c8:
ac:b8:00:59:5d:47:d1:0e:1b:9e:d4:e4:1a:4d:6f:af:30:55:
53:d2:38:43:b7:2a:28:07:f6:b3:84:98:a3:ab:0b:34:31:96:
ed:4b:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:18 2025 by rpki-client