Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier: qelPzs/5AxTUcUBN/tGHH3SCVR3q8a5ANXBT8bR2nag=
Subject key identifier: 70:4C:1A:7B:62:73:03:82:64:52:5E:AF:24:30:72:F9:B6:AD:39:2A
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 0198D54E6D28A632479BAE23DEC44D16AA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number: 030C
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: idAQ5ZaP/0XAM6kRAK6Q83bHTrnNm+5CqgdOK/7c8Ao=)
2: tTBKVFQWZufXMYyq5fxW8fRNH90.roa (hash: YC4oYFYBwZQuGV+b+L7LVxd1pwxsZMobv4J4wury7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6d:28:a6:32:47:9b:ae:23:de:c4:4d:16:aa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=704c1a7b6273038264525eaf243072f9b6ad392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:0e:f6:71:a3:dd:b2:59:07:9e:77:89:e3:
b8:70:af:9d:bf:37:0d:f8:f7:b2:31:f3:95:e8:42:
0c:0e:59:e8:ea:87:24:72:ad:46:5c:34:db:c9:71:
d1:0a:4b:81:b3:e9:a7:55:e4:a3:ac:35:c7:d6:40:
20:3c:4e:57:39:a4:e5:a0:32:4e:d7:73:58:2e:fb:
9b:29:8e:8b:ec:4f:fc:35:a1:40:1e:70:1f:c0:5e:
fc:1a:03:bc:b8:20:d8:39:fc:ba:1b:e1:22:57:c5:
06:11:60:02:50:c8:80:30:39:01:1a:31:61:f9:3f:
ef:18:2a:6c:be:96:27:ba:68:c6:a3:2c:53:ea:82:
99:61:d5:a6:06:1e:b5:4b:1b:22:d6:3a:c6:59:34:
f5:b5:54:91:b0:09:06:0d:37:04:55:3f:de:7b:34:
3d:28:76:87:ad:0a:6d:e6:43:ae:9f:17:bb:c9:17:
d3:5e:7a:23:eb:8b:66:ce:be:bc:22:34:d6:fc:18:
fe:4b:ef:14:12:5a:16:9b:75:46:0c:88:97:30:27:
4b:9f:b0:7b:67:0b:0a:73:96:f8:1b:13:a1:23:f1:
ab:16:01:fe:a8:f7:00:55:ed:57:21:8e:e6:59:64:
13:bc:99:87:24:08:3b:0c:cd:70:b3:30:7d:96:84:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4C:1A:7B:62:73:03:82:64:52:5E:AF:24:30:72:F9:B6:AD:39:2A
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9f:0e:a3:f5:34:05:73:70:8a:76:b4:3e:e3:7c:7e:6c:75:
4a:41:5f:9f:af:6f:b6:ce:e7:96:0c:81:f3:4c:6c:6d:be:c8:
ca:c0:d8:e7:12:c3:31:87:e9:de:fa:ce:47:71:10:3a:6a:8a:
03:f4:c1:9e:ce:be:ce:08:78:80:49:98:81:51:26:e9:b3:cc:
98:ab:b1:8f:14:df:f6:98:84:85:7c:f4:ef:4d:58:96:35:c0:
7e:b3:f5:2a:73:30:6a:61:f0:22:cc:9a:65:ba:dc:67:db:6a:
6e:e2:c2:91:be:6b:5c:f8:37:c3:cc:6e:c7:74:33:ff:2d:8d:
d9:f4:c7:0b:4a:9d:59:ad:ae:3e:a4:3c:76:5a:33:64:9f:80:
aa:74:e7:22:18:6b:c1:c7:b8:ef:47:fa:c9:aa:2f:11:7b:b6:
66:d0:3b:62:8d:58:12:e6:3c:19:6e:34:30:89:71:d5:95:1d:
54:45:3b:97:df:c6:44:d4:44:5d:33:59:42:f4:e0:d0:19:85:
5c:13:df:b2:81:68:9d:c5:33:52:04:80:9d:4f:e1:ee:3b:78:
52:a6:cb:58:59:ba:df:43:a2:21:ef:28:e1:56:a6:0a:11:57:
e3:e4:03:bc:aa:3e:22:8b:63:34:5f:9a:cd:60:4f:aa:2b:ef:
e1:45:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:38 2025 by rpki-client