Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: 7gZiFZmMyBY34bby8SRxQqvROpyoooyZJrIpGP8kjt4=
Subject key identifier: D7:22:C7:6E:FD:1B:DD:B0:77:4D:0F:43:90:AE:90:B4:03:7E:B2:C5
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 0198D515C6B3F830D430923EDABD50A587E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 06D5
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: NUpw4oO3O4eM33wQhDcEuqWjv/DuFqrTeF76aoLal9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c6:b3:f8:30:d4:30:92:3e:da:bd:50:a5:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=d722c76efd1bddb0774d0f4390ae90b4037eb2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:46:90:d9:56:1c:4e:26:a8:73:93:46:ce:
bc:a2:66:b1:4e:e2:8b:e8:93:58:a4:db:64:d0:37:
df:b9:e6:4a:38:d2:0b:63:71:12:3f:24:61:d7:b4:
8d:24:27:66:8c:32:a9:71:b9:e5:d2:ec:38:b8:f3:
29:05:52:fe:ac:78:16:d0:3f:31:ad:a8:7c:d9:37:
22:3a:fe:9a:93:6c:09:22:fa:48:f2:25:27:84:68:
8b:09:26:c9:cb:0f:83:da:ef:f6:2a:8e:33:36:d5:
80:20:1c:bc:59:03:4f:9d:0a:f0:d6:0e:c6:aa:6e:
4e:41:d4:2e:ff:33:2d:0a:ca:bd:2b:e0:d6:70:82:
f2:7c:db:06:8a:84:fc:21:53:5b:af:06:b4:4a:e5:
d1:55:6c:ec:49:71:24:57:33:e4:60:2f:b0:3c:95:
b6:55:4e:76:3d:bd:7d:24:8b:4d:1e:b7:9b:0a:da:
66:f2:e9:0b:e9:c4:07:59:66:e9:86:f0:03:a7:60:
61:9f:22:d1:33:67:e1:eb:14:f7:dc:fa:cc:c0:1d:
e4:02:f2:fb:97:49:91:ba:68:88:05:e4:40:12:83:
36:df:19:0d:b6:37:64:83:3b:10:e8:40:b5:1b:e0:
af:32:25:e1:d6:ae:85:9f:82:e1:5c:fd:93:f0:68:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:C7:6E:FD:1B:DD:B0:77:4D:0F:43:90:AE:90:B4:03:7E:B2:C5
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:87:ba:4e:45:fb:77:c3:0b:2a:28:52:e8:27:5a:1d:1b:
bd:c4:b7:75:9c:16:a4:08:6d:70:70:6e:6c:ab:68:a2:4b:69:
e9:34:7c:71:83:c0:f4:21:c4:77:c1:58:27:cb:e7:16:3c:02:
66:a7:dd:00:af:1a:dc:09:a2:be:25:d8:99:70:cc:e0:30:9e:
06:c9:95:86:9b:e1:21:59:01:02:d1:7b:15:0a:f5:51:10:05:
84:81:5f:1a:c7:0e:98:41:c9:76:ce:05:e8:ea:18:b6:8a:81:
dc:d0:02:61:ff:21:3f:b6:52:32:a0:24:07:e7:cc:3d:c1:74:
6d:7c:97:bf:71:d1:13:f1:15:ad:97:53:09:af:c4:46:f7:fd:
c3:cf:3c:4d:95:73:f3:58:aa:d0:3a:c5:e6:7a:84:73:48:29:
82:59:10:ed:9f:97:e1:43:7d:a8:f3:cc:f5:0e:33:a2:eb:c8:
07:d1:79:14:12:22:4e:5f:5f:ac:7a:f1:0d:17:9f:e5:87:ef:
4b:67:f9:97:5b:ed:02:a7:d9:f0:8e:46:eb:4f:c8:92:c3:86:
6c:cf:d4:97:1e:b0:48:4d:86:0b:81:54:55:21:b8:39:e0:0b:
ab:13:b4:c8:3b:8d:a7:50:dc:d6:1b:3c:77:78:b1:7f:4d:cd:
21:c6:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:21 2025 by rpki-client