Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: csUDj+YLVHEONL9dR5UKKkYlG6cNk8T1xJDZysoHmBU=
Subject key identifier: DE:E3:30:77:E3:90:8A:BE:31:3D:3A:0A:83:0C:2D:19:26:26:C0:51
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 0198D472492AF3E5753F726E1E564895E95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0D7F
Signing time: Sat 23 Aug 2025 01:01:56 +0000
Manifest this update: Sat 23 Aug 2025 01:01:56 +0000
Manifest next update: Sun 24 Aug 2025 01:01:56 +0000
Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=)
2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: w7nYn5pi40utiVe6nT6t5C0l/R+9NbYH8iET8E+SJSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:49:2a:f3:e5:75:3f:72:6e:1e:56:48:95:e9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Aug 23 01:01:56 2025 GMT
Not After : Aug 24 01:01:56 2025 GMT
Subject: CN=dee33077e3908abe313d3a0a830c2d192626c051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:be:bb:2c:a9:83:d7:32:4f:34:90:7f:8c:
2b:47:66:bb:8a:5d:af:75:69:cb:b4:62:63:b1:8c:
ee:7b:84:f5:ee:ea:d5:4d:c7:5c:8a:fa:fa:0d:ba:
b7:6a:54:72:7b:52:08:55:1d:34:bd:d3:59:82:73:
74:ee:24:12:c3:32:25:57:6d:4b:93:e7:fb:7a:5c:
39:56:00:5e:4b:c1:87:96:08:a8:d3:aa:4e:ea:b4:
c0:64:12:aa:46:39:22:2c:22:fe:3c:6f:5e:54:27:
dc:13:9c:d3:c1:f8:17:9a:ad:11:8a:5e:35:7f:f7:
12:e1:54:6c:c7:ff:e7:5c:4e:b4:59:2a:9d:49:0a:
8b:b3:bc:29:b4:9d:48:ab:fd:31:43:c6:bc:cc:3e:
06:2f:7c:49:a1:85:98:25:c4:d3:eb:2c:31:89:64:
44:8b:7f:04:1b:d5:7e:81:61:c3:73:78:a9:e8:d6:
be:b3:53:a6:03:43:cc:c4:4b:c5:06:2e:6f:6c:a4:
a2:56:8e:fc:40:83:c6:02:f0:58:06:57:e1:8f:51:
9b:5b:ae:ab:c9:f0:3e:5c:bb:20:16:8e:91:cd:4d:
37:c8:51:a3:93:25:a6:ee:8a:b2:fc:51:ea:19:cd:
7f:b0:9b:68:a8:95:42:20:59:8d:c3:75:a5:42:ee:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:30:77:E3:90:8A:BE:31:3D:3A:0A:83:0C:2D:19:26:26:C0:51
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:31:5c:31:6b:70:32:86:6d:c1:d8:f3:4c:09:f8:48:3a:88:
d4:de:51:8e:e0:12:27:02:bd:e7:c7:56:53:05:6f:a4:d5:27:
08:6e:ba:56:84:2d:00:d4:b0:05:cb:d8:6a:84:cb:96:99:32:
79:a7:f8:26:6e:df:ee:89:24:79:99:09:8f:e3:df:84:af:c8:
13:c1:e3:54:0f:a2:71:8d:69:6a:cf:f6:a3:f7:bf:fb:95:89:
bb:33:fd:45:07:65:8f:3a:83:92:9a:e9:17:1c:4a:8b:70:1b:
df:ec:96:90:41:65:7f:91:a8:8c:07:b1:64:e5:a0:f2:48:1e:
99:c6:17:2a:29:4f:0d:b5:4a:78:3d:99:bd:a9:eb:77:81:66:
69:fb:5c:69:fb:c8:37:ac:8d:a4:c1:bc:db:f1:4d:1d:99:9d:
33:41:5f:56:83:32:f3:25:dd:39:f4:49:ea:86:19:58:25:c4:
ee:e4:ea:96:49:d3:18:c8:f5:48:51:37:94:c9:63:d9:f8:30:
e2:24:3a:96:51:dd:05:3b:7e:77:b1:53:f8:45:2a:f7:a1:60:
ae:e8:f1:3d:b1:da:8c:30:aa:e4:b0:fc:39:82:dd:34:a2:a1:
63:c2:ad:aa:b5:7b:c6:ee:07:b3:c0:45:4d:57:f7:7e:1d:5e:
66:46:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:43 2025 by rpki-client