Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: fXtiD9c7yc2FJuslHQKx942kUbvt8RVZMAavf9SqQH4=
Subject key identifier: EB:7A:F7:DB:58:90:28:A5:20:CF:F2:DE:C4:3E:CE:CD:90:89:1A:F3
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 0198D5BB9B7F176E89D95A082363481F7230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 0336
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: bLEcNqWUbja7N+YG8kHBIGrq/OgfrmuKolO5rhGyhZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9b:7f:17:6e:89:d9:5a:08:23:63:48:1f:72:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=eb7af7db589028a520cff2dec43ececd90891af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:10:c2:57:66:9a:ea:62:c8:81:0c:0c:32:
e5:a3:29:bf:2c:d7:00:2c:58:cf:5e:fa:2d:08:57:
5c:b9:a9:81:d4:88:72:5e:d8:13:a6:cb:0a:4b:bd:
a1:41:f9:3c:29:b6:58:61:2a:8e:3d:0f:af:e7:e8:
3d:97:65:26:4d:c8:de:80:f0:ec:fd:bb:9e:ea:3e:
30:19:8e:17:16:e5:27:9b:06:63:fc:95:1c:dc:de:
90:dc:c2:28:4c:c8:56:b9:da:35:b8:47:4a:06:88:
b4:41:e8:c0:d6:bb:45:3a:89:94:95:a2:c8:2e:d0:
cc:d9:2e:45:62:e6:5a:e0:f1:46:6d:79:fc:20:0e:
f6:7d:ec:f7:1b:f3:0a:56:ba:70:bd:b6:db:22:05:
cc:c3:c4:11:0d:f9:f8:e8:35:ba:b4:63:d9:7c:10:
31:b0:b7:3f:cc:06:1c:2b:46:d0:b3:88:54:6b:22:
ed:86:f7:a6:17:b0:dd:dc:4e:6f:f1:94:2d:0b:44:
b0:40:cf:73:34:d0:97:8d:06:3b:c0:0f:87:83:c9:
88:4b:ae:97:5e:22:4d:bd:4b:47:f7:bb:97:1e:84:
14:91:73:6c:36:56:70:1a:b1:71:8d:6b:bc:77:fd:
33:10:1b:0f:c9:f6:79:2e:53:08:c8:dc:54:d4:bf:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:F7:DB:58:90:28:A5:20:CF:F2:DE:C4:3E:CE:CD:90:89:1A:F3
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ba:21:d5:b9:06:46:ef:b2:70:28:eb:d8:eb:54:ee:85:32:
4e:e1:35:15:8d:14:75:d1:51:ee:28:f0:c3:c4:4f:28:7e:2f:
3b:c4:b4:98:8c:c3:45:4f:c6:aa:d6:b0:0e:d9:f7:4d:ff:2c:
e1:46:ed:aa:34:53:1b:68:50:c9:9e:9e:ea:65:f6:b8:c0:f4:
f0:31:81:4e:01:96:5d:9a:41:6e:f3:29:25:85:7d:59:0c:72:
a6:59:b7:e3:50:b9:ab:12:fa:5e:9f:b0:3b:b4:c7:56:55:00:
2a:86:f2:f1:6e:8b:7f:a3:32:13:8d:d7:f2:a9:83:85:72:a0:
43:ca:6c:8e:d3:dc:23:ac:5f:14:f8:1e:8a:2a:ad:10:c5:45:
75:c0:08:68:d5:61:c1:09:60:71:72:58:0b:96:01:58:3c:6f:
bc:46:ef:b3:ba:ab:ac:d7:92:78:68:93:af:06:b9:20:c0:2c:
2d:9a:a4:e8:bc:b2:1e:3f:c6:47:8a:8f:e2:dc:59:89:2f:de:
e5:46:7c:21:04:6f:22:28:05:fb:a5:7d:51:05:a9:90:f1:40:
9d:7f:2f:0b:2f:f4:fe:5e:9b:f6:48:92:e4:0a:a5:5b:e0:bd:
ba:d5:49:09:67:78:9d:83:10:d3:2e:a6:43:6b:14:9e:e4:99:
bf:3e:1f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:52 2025 by rpki-client