Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: e4HiYa76WrGtO5uM18UN8ExdwXxc2VVUWa0e6pCd2dU=
Subject key identifier: C8:4B:BA:E8:94:C7:43:CE:FC:A5:CF:9D:9F:F2:26:F1:D7:5F:75:12
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 019873E3DF37519EA539600ACD28FE1BBEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 075A
Signing time: Mon 04 Aug 2025 07:02:50 +0000
Manifest this update: Mon 04 Aug 2025 07:02:50 +0000
Manifest next update: Tue 05 Aug 2025 07:02:50 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: mUS5wdd4P+PCr4j2R6PU8rskByBP7SdXquLDiomg75o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:df:37:51:9e:a5:39:60:0a:cd:28:fe:1b:be:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Aug 4 07:02:50 2025 GMT
Not After : Aug 5 07:02:50 2025 GMT
Subject: CN=c84bbae894c743cefca5cf9d9ff226f1d75f7512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:bc:22:5a:95:d6:23:c6:4a:42:a3:13:a4:
75:56:0a:15:31:6f:17:f3:eb:64:3c:b9:48:f3:f7:
0e:3c:19:1a:ff:e6:5f:0b:13:32:5a:35:ff:da:2a:
ae:ef:bd:a2:36:5a:57:e1:52:8c:15:b5:13:bd:8f:
d5:26:5d:ae:f6:e7:5e:2f:c4:7a:ea:cd:bf:13:16:
76:b3:89:6d:a1:ca:a9:06:d5:f1:20:df:72:f8:c3:
ff:53:87:f6:53:59:97:46:af:a6:0b:6c:a6:1d:3e:
57:39:52:9c:94:93:ab:08:31:1e:9e:a1:b9:95:26:
f6:c3:ae:c7:f0:2a:c7:22:92:92:7c:2c:ee:4e:39:
92:5f:5d:32:4a:af:77:e6:eb:4f:4a:ab:e3:0d:26:
2e:1f:63:17:e0:e1:72:f9:9c:26:7e:84:c4:de:40:
e8:e8:be:90:bd:99:ef:08:fb:c1:37:fe:63:31:a9:
21:df:55:dc:2e:aa:d4:fe:63:7e:b5:12:20:66:3a:
6f:be:4c:40:96:b4:13:32:36:48:5a:c7:42:ae:0f:
dc:a8:7d:8d:41:ad:33:43:49:ad:40:f1:76:10:7d:
43:d8:31:6f:a5:27:10:53:04:6b:67:b9:14:bf:58:
64:31:c1:1a:05:fe:e9:19:8a:86:9b:3b:4b:a4:78:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4B:BA:E8:94:C7:43:CE:FC:A5:CF:9D:9F:F2:26:F1:D7:5F:75:12
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:41:80:42:9d:ff:72:44:03:a3:58:8a:41:f4:44:83:1b:
60:5b:37:24:c9:a9:19:96:ae:86:44:33:2d:8b:3a:2a:48:d3:
4d:7b:70:b2:69:60:66:e3:4e:ad:76:b8:c2:8b:e9:b6:35:9a:
b2:6c:21:d6:eb:f3:79:f9:f7:5f:49:82:8c:17:fb:66:64:4d:
dd:a6:64:47:9d:ac:37:d1:b4:b7:9b:0a:9f:cc:1c:70:91:0a:
2a:de:43:55:01:16:e2:56:85:53:81:19:20:14:11:7f:e9:a1:
0a:0d:f3:ea:15:e9:c9:0f:3d:bb:ef:e1:00:0b:07:d1:41:1e:
c1:05:25:9d:1a:1d:da:c2:d6:6f:9a:97:51:70:bc:b6:02:a5:
43:28:f7:58:48:32:44:62:b2:18:a8:25:0e:99:35:8a:c3:40:
19:61:bf:43:2a:7f:62:2c:bc:fc:75:62:08:bd:d0:9d:95:00:
08:8a:8d:d3:87:70:3c:ee:3a:b9:4c:9a:ad:91:55:05:9b:ce:
f1:31:62:71:5a:0d:15:ea:10:88:fd:3c:4c:50:0b:55:64:23:
af:3a:96:87:d5:94:e4:61:db:87:6f:7f:72:1a:0d:11:e9:91:
65:e9:d1:9f:bd:9f:07:c5:dd:a9:ac:f8:2d:e4:bd:6f:b8:11:
51:8b:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:28 2025 by rpki-client