Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: 3ChaXmR/VL18MSjwdzR34NrR8cwnjW8uw4JnZX34T54=
Subject key identifier: E3:78:AC:E2:0A:BA:4F:4B:82:F1:F2:90:C7:B4:C4:A2:71:95:CD:E0
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 0198733DD4895014E6D5A01D547DD0FAA549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0B73
Signing time: Mon 04 Aug 2025 04:01:28 +0000
Manifest this update: Mon 04 Aug 2025 04:01:28 +0000
Manifest next update: Tue 05 Aug 2025 04:01:28 +0000
Files and hashes: 1: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: APVjC+tBdeVvJiU5s+lTMtZ0qfS2YbX7Hh8fXqg7fmQ=)
2: wqLf4HxTBxblmV7dYjywZ9LSO_g.roa (hash: xrazM8n3J2DoAIHJJglhb+L4RSIj7Z+1Mi/FtQpdckQ=)
3: yy37HnfCaW61gwGyu1dsgubo12s.roa (hash: iEoXay/v6I8F/MG3qHjPe1FvicHR4Thx5PSijnoSoog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:d4:89:50:14:e6:d5:a0:1d:54:7d:d0:fa:a5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Aug 4 04:01:28 2025 GMT
Not After : Aug 5 04:01:28 2025 GMT
Subject: CN=e378ace20aba4f4b82f1f290c7b4c4a27195cde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:df:fd:e8:f2:aa:30:ec:77:72:cf:7e:b8:
c6:6f:40:0b:61:b5:31:3d:0b:1c:ae:4f:6d:ba:04:
b7:60:e8:ee:69:a2:30:b4:c1:a7:7d:ae:37:2f:a9:
6d:0f:27:ca:de:bb:31:10:9b:db:d6:6b:9c:58:d2:
2c:a8:ec:a5:d9:0e:4f:c4:66:97:3b:0f:06:80:79:
e6:13:bc:21:13:3f:eb:ed:d1:e1:44:0e:82:00:44:
9f:38:9d:55:3a:9b:23:3c:6f:5d:76:28:f9:80:18:
26:fd:0c:ee:7d:ff:ba:05:49:c1:ba:bf:60:37:99:
70:8f:b0:ef:93:e5:93:b7:74:b1:5e:a6:0d:e1:5f:
f7:f8:97:87:92:6b:77:b3:10:35:54:b9:41:f0:f5:
65:b2:56:c6:09:0c:bd:32:6e:31:6b:3a:e8:34:b8:
23:5a:ff:76:17:58:1a:79:bb:32:8c:77:c9:17:77:
b3:17:a5:45:df:67:7e:03:fd:fb:63:30:cc:43:03:
53:18:06:e4:12:c5:dc:d2:12:db:e8:d6:0e:c8:97:
c0:98:5f:8c:d5:08:d0:b0:c7:c0:b4:86:42:d3:98:
17:2d:da:33:b2:7f:71:a0:9b:b1:92:77:3d:43:22:
23:77:54:c1:79:f3:b2:72:34:81:8c:09:3b:3b:ae:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:78:AC:E2:0A:BA:4F:4B:82:F1:F2:90:C7:B4:C4:A2:71:95:CD:E0
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:ec:74:52:e3:4e:42:92:e3:7c:2c:35:6d:63:9e:22:c4:
a8:19:53:c9:5d:46:28:9c:15:be:e5:21:40:39:e7:67:42:45:
5f:93:ca:d7:5d:e8:26:b8:e6:3e:f4:15:37:16:0a:d3:8a:37:
e4:c5:c5:30:53:1f:be:9e:4c:4b:9b:75:70:ca:3f:84:00:e8:
23:47:a4:b9:99:f9:18:1e:58:be:ab:6c:ee:38:b0:ad:c2:10:
9f:44:9b:b8:d0:e7:e3:f8:0a:3d:59:36:ec:db:86:22:c1:db:
a4:18:66:ce:75:fc:f8:94:d8:9a:54:0a:5e:91:a4:fa:c3:97:
ea:e7:44:f6:97:df:bc:e7:4e:37:5c:53:8c:30:34:ff:cb:44:
90:68:4d:a3:ac:b9:06:0a:e2:3d:02:1e:5e:1b:4d:51:0e:89:
b7:1c:71:8e:86:ac:1f:91:a2:1d:b5:2c:e9:60:8b:bb:b9:41:
06:b6:de:98:4b:d5:44:e0:96:4e:96:8e:23:63:f2:56:b2:3e:
2d:41:a3:39:86:ac:35:a2:e4:18:ef:9c:1e:0f:83:dd:80:64:
dc:9d:2a:be:3d:b2:14:fb:59:41:0d:e4:b4:e7:fa:1e:e3:f1:
ca:a9:d2:75:65:d1:32:ce:59:f6:aa:75:ca:02:31:9d:19:61:
7a:2b:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:08 2025 by rpki-client