Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: iCAIDIYzXIGCcPRwta9w+me1+zIm0Dtbbvf/uUZPmR0=
Subject key identifier: 78:65:C5:9A:21:53:10:DF:F8:13:BB:36:44:BB:51:F7:5C:48:26:78
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 0198D4A81D23F67E43846B9F1584A6A856DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (hash: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: tCt9sx4MWq1uk38leg+0myv2b6nzDJiAvjPwKAdDlRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1d:23:f6:7e:43:84:6b:9f:15:84:a6:a8:56:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=7865c59a215310dff813bb3644bb51f75c482678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:16:93:13:b7:75:4f:18:95:39:00:18:59:
bd:0b:e9:41:16:51:5d:a0:ed:5d:77:a3:bc:35:ac:
f5:62:64:13:32:12:46:6c:d6:81:b2:73:db:ce:38:
d8:ee:87:08:d0:84:9d:47:69:ae:ce:df:b4:01:7e:
51:44:fd:c5:01:21:85:85:69:09:3c:75:c5:8d:68:
c5:00:c5:3e:b4:78:8f:df:33:b2:89:af:83:c2:80:
52:f1:08:65:90:0c:83:cb:b9:f3:ad:6e:6f:2f:89:
3d:12:be:e2:f3:c8:e0:a2:36:c0:ca:5b:9d:13:fd:
bb:3c:e9:b0:06:7f:0c:1a:5e:aa:0f:96:73:c5:bd:
89:d7:47:e6:cb:0c:7f:37:e4:c3:62:60:84:a6:e7:
af:9c:b4:71:0b:1c:8b:0a:f4:6a:ab:df:fa:78:4b:
65:0d:64:eb:5a:46:66:a3:14:40:6c:c8:f9:bd:ea:
6a:f4:d8:ba:e5:43:40:cf:c9:13:c0:df:93:3d:26:
dd:8a:0e:dd:3d:46:a9:57:47:e4:a2:75:cc:78:4b:
dd:7d:c2:21:8c:8c:22:9a:0c:4d:36:d0:5f:78:d4:
07:a3:96:38:f2:a5:79:8f:f6:5e:9a:bc:cd:6b:d0:
92:13:76:91:d8:a6:85:3a:17:3f:51:58:24:83:f6:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:65:C5:9A:21:53:10:DF:F8:13:BB:36:44:BB:51:F7:5C:48:26:78
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:12:d5:82:8f:fb:30:74:ac:ff:9b:65:cf:cf:c8:1e:19:e8:
db:f4:3c:72:8e:bf:9c:90:84:c0:bb:75:4c:e7:17:37:3d:79:
5a:b7:11:c5:bb:e0:06:35:54:71:25:b6:7c:ec:aa:d7:5e:c9:
ed:e6:09:0c:8e:f9:2e:e6:45:dc:eb:27:1b:da:0c:8a:41:d4:
15:f6:93:5c:a5:b5:83:2f:96:63:5a:07:80:d8:3a:c2:a9:a6:
3e:01:35:9a:b1:37:6a:ea:0d:1f:b2:7f:b1:84:94:2e:a0:e3:
b2:91:b1:d4:58:4e:22:d9:0c:07:d7:17:31:94:3f:cc:80:b6:
98:d6:d5:6a:21:12:82:5d:ec:2c:57:a4:f3:63:b4:1d:0a:a0:
4f:85:f6:28:d0:43:a5:58:cc:07:6e:ae:a7:21:17:9e:a3:b1:
b4:c1:32:17:6d:b1:c2:a2:8d:82:9e:28:b3:04:ce:a2:b3:6a:
e9:52:f0:5d:82:90:79:d5:19:bd:54:9a:c1:23:4b:dc:84:2c:
b9:d4:cb:ab:83:b8:b3:e3:d8:d4:ff:37:15:9b:c0:ce:fe:4d:
e7:f4:0e:66:50:ca:57:c1:db:58:78:fe:5a:93:1f:c9:e9:1b:
44:80:3a:e4:67:b0:b6:ed:0d:24:e1:c9:ee:18:bd:6b:2c:e1:
cc:4a:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:52 2025 by rpki-client