Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: xb7E9g8wkNrIGoeHRoqwE94+h2BN/2PFNbfcSuDNLcI=
Subject key identifier: B5:AB:F9:39:44:2D:1E:05:E2:98:B5:4D:E9:2E:C8:06:94:37:FA:13
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 01987D8ABFF1FF37F0FD01C80321013EC771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 1570
Signing time: Wed 06 Aug 2025 04:01:41 +0000
Manifest this update: Wed 06 Aug 2025 04:01:41 +0000
Manifest next update: Thu 07 Aug 2025 04:01:41 +0000
Files and hashes: 1: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: Zmf7duatCZcI7Ns3VAN0TSyfSogXFYTD7E8cNBiBDcE=)
2: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (hash: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:bf:f1:ff:37:f0:fd:01:c8:03:21:01:3e:c7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Aug 6 04:01:41 2025 GMT
Not After : Aug 7 04:01:41 2025 GMT
Subject: CN=b5abf939442d1e05e298b54de92ec8069437fa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:7f:44:f7:01:c6:d5:c0:af:2c:b7:8f:df:
b3:6c:f4:fd:1b:33:68:9a:58:bb:3f:2d:80:ce:a6:
e3:6b:70:32:1c:2a:bf:bf:f2:79:c1:43:92:a5:4d:
50:2f:3b:fd:7c:e9:8b:21:27:3e:26:bd:7a:7c:50:
b3:f6:70:0e:11:1b:4a:1e:a0:30:3f:e0:55:02:2c:
58:4b:fc:0f:bf:75:77:10:da:b1:64:1b:cb:d8:c5:
c9:51:de:d6:37:ed:65:e1:3b:b1:0f:12:82:cd:1b:
82:4f:b0:45:ec:8e:d5:73:46:cd:4e:04:7e:8f:ad:
dc:7e:94:6f:38:71:83:da:ca:0e:03:32:90:af:e8:
db:e7:1c:e0:52:2b:08:91:54:ea:ae:7c:cd:05:7e:
25:bd:04:59:5a:96:6e:0a:49:7c:29:d6:e9:78:60:
ff:f0:9e:60:be:eb:11:e9:c0:01:0b:4c:db:fa:3a:
e3:43:79:0d:20:55:1d:a8:e6:52:f3:dc:77:8c:ba:
46:86:b1:db:bc:5f:05:62:1d:a2:c5:69:33:e2:bf:
c6:d3:c6:32:af:63:a0:f2:be:f5:7b:f9:cd:84:fb:
8e:79:f3:7a:60:5b:8c:df:e2:a2:bd:db:2b:4d:07:
85:c0:93:cb:27:cb:e9:30:1b:61:33:2b:37:e9:fb:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:F9:39:44:2D:1E:05:E2:98:B5:4D:E9:2E:C8:06:94:37:FA:13
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f0:6d:cf:6c:9b:8e:10:85:ec:20:b5:59:e3:fd:e0:da:db:
c6:cb:2b:02:34:5e:a7:a9:c5:34:06:3f:c9:e1:fa:69:26:da:
25:c6:3d:68:e7:de:c6:59:d6:7e:75:29:30:32:a9:72:33:ba:
e6:f1:73:e4:47:42:a9:0c:1e:05:ee:b4:6a:39:01:bb:43:0d:
09:dd:3b:ca:d8:7c:a8:ec:44:4b:7a:be:b8:bb:6d:81:5a:39:
4c:a0:87:28:ea:91:5f:20:e5:f8:21:0a:91:bb:f1:6a:fa:03:
3b:51:41:50:b8:b0:2f:09:ec:54:6e:80:40:7f:d5:89:03:fe:
cf:10:96:34:5f:5a:68:de:59:14:4f:59:51:d2:e0:e4:f8:dc:
57:4a:37:e0:f1:fe:30:71:8a:b3:2c:b0:2c:70:8f:86:56:41:
6e:53:97:20:f1:01:97:88:53:82:ab:22:57:5d:68:56:a9:ad:
e6:02:64:2c:8b:06:3e:3e:55:cc:4e:6e:80:60:3f:5c:1d:09:
7d:95:8c:91:c1:0c:54:bf:f1:85:dd:7e:c8:7d:8b:aa:bf:19:
fe:25:50:57:95:f7:a2:f3:e3:90:71:06:14:93:7c:39:d8:b3:
51:9c:7a:3c:f6:1f:4c:38:fc:d9:59:aa:80:00:0d:a9:2f:eb:
36:24:33:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:36 2025 by rpki-client