Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: JOGTu0llvxwMvzihdKorooeTu3yTHcRYSCe1Xcbg0E0=
Subject key identifier: B7:BE:5B:3C:7C:A2:81:1C:68:87:44:1E:FC:BA:61:EA:9F:10:4E:A3
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 0198D5BC1B28C04E464AB6EA0E8F25355B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0B2B
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: wQ5ywvof2lwYKYHD77E0SnBzWwBAW2WNZZ5VQWqwX7A=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1b:28:c0:4e:46:4a:b6:ea:0e:8f:25:35:5b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=b7be5b3c7ca2811c6887441efcba61ea9f104ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:47:1f:c7:05:49:60:61:cb:2e:cd:47:ee:
ce:4f:2a:cd:56:f3:0f:01:be:97:03:c2:e7:37:09:
a8:e5:34:e0:2c:ff:b0:05:22:4b:ef:82:40:df:c9:
a3:d5:ff:42:53:4f:ff:ca:b7:69:42:81:c4:e5:d6:
a2:d2:9f:87:db:42:b3:e7:76:16:9a:6b:f0:a8:6d:
56:15:be:7a:2b:2c:8f:56:93:26:51:5d:f9:92:52:
14:d5:18:7f:3b:f2:56:88:dd:cf:ef:e0:19:e8:5b:
4d:68:d8:05:15:54:67:0c:c3:ff:6e:d5:51:e5:ed:
0e:ce:47:7e:ce:02:9e:50:86:1d:c1:f3:ea:ed:8f:
7c:38:85:72:30:89:49:ce:39:07:96:f7:09:d8:5d:
96:44:bb:ee:86:ef:1b:83:74:4f:22:6a:9c:58:b3:
64:ef:54:6b:fa:0f:85:39:e0:56:38:59:86:df:2f:
fa:6f:f0:c2:18:4f:a4:46:df:89:aa:cc:a1:9a:e2:
f9:66:5d:93:25:c8:6e:74:c2:11:34:73:5e:f1:fd:
a7:00:be:2b:b8:16:a4:9b:0c:cc:98:c0:4a:e9:d6:
1f:52:44:eb:56:96:28:33:79:dd:2f:e1:86:fd:df:
93:1b:51:6b:61:8f:09:05:a8:2d:8e:73:0f:37:7a:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:5B:3C:7C:A2:81:1C:68:87:44:1E:FC:BA:61:EA:9F:10:4E:A3
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f4:f3:09:2f:ad:25:b0:f2:60:06:15:e4:45:b4:58:75:77:
74:37:fe:f4:57:4d:4d:a4:36:51:4f:85:c6:f3:53:dc:d0:92:
a4:fc:d3:18:a8:77:8c:0f:6d:78:0d:e4:76:5f:06:a7:70:8d:
d8:e5:54:24:ad:c8:7c:fa:7b:da:06:a3:3f:16:63:24:3f:63:
90:1d:07:2c:db:a2:d3:a2:ed:e8:dd:ba:e4:df:45:17:42:79:
58:4a:d1:9c:58:ed:1f:e6:f8:5a:2a:fe:1d:b2:67:66:c7:7c:
f1:43:e2:f5:12:ec:fc:6e:88:14:2a:af:80:04:da:24:75:83:
27:2a:22:92:4d:42:f4:bc:0e:8c:8b:80:91:71:dc:53:0c:be:
82:15:9f:31:9b:bf:3d:04:de:be:a2:7d:b4:08:64:2e:09:5f:
99:ae:c1:0f:ae:ce:52:9a:22:ba:f6:af:14:da:8b:1c:9d:12:
a0:98:6c:a0:f3:f4:78:5e:9f:12:d3:2c:f1:ea:ca:d2:62:ea:
d6:04:f4:f4:59:e4:62:1c:2b:eb:5d:88:6e:32:86:69:3b:d4:
79:98:60:97:8d:e9:2f:81:26:e5:8b:3a:ed:ba:f9:1f:c9:74:
9f:96:73:68:7e:6d:aa:b8:2a:1a:33:80:6f:3c:ac:14:43:8b:
a8:5f:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:48 2025 by rpki-client