
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: jbwlv0E6SKY0x2gtSMF8IMjDF4VhNjRn19HxBxFqGfU=
Subject key identifier: 69:9C:21:D6:DC:F1:DE:3B:C0:B2:08:D6:65:40:40:8D:22:4D:1F:5D
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 0198D5F16C6B5DA37B681AF59F9BE9549B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 114C
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: 2/w/pShGYWbB6kTgpwDirOGakgyfHVn6hSxmBs7XE48=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6c:6b:5d:a3:7b:68:1a:f5:9f:9b:e9:54:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=699c21d6dcf1de3bc0b208d66540408d224d1f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:bc:c3:e6:f8:2b:11:3f:8e:a1:5e:85:15:
c8:ab:66:d1:fb:05:d1:0a:e7:67:35:00:64:38:4a:
de:e2:db:06:2c:56:25:07:79:9e:97:44:05:89:29:
1e:d1:e2:08:a3:1c:bd:49:20:2e:4b:41:2f:4c:eb:
13:94:8a:18:8a:97:e2:fc:50:d1:b5:a7:75:9c:04:
a4:02:76:4d:52:fc:cd:12:fe:fd:fb:6d:bb:27:cc:
c0:8a:3b:32:35:76:56:07:c5:21:24:cd:5d:c3:58:
8d:f9:01:db:28:90:5b:2a:63:d8:9b:b3:90:88:56:
04:98:ea:87:fc:e7:05:ef:f2:ca:a3:4b:03:9b:45:
e1:da:2c:a6:b5:09:83:97:dd:df:a6:46:47:73:fb:
13:ad:d1:d1:26:0e:04:79:1e:ae:28:74:79:28:66:
90:ed:14:38:b6:b4:35:4e:2a:dc:5a:8c:4a:41:fb:
4a:d1:49:43:de:f4:95:31:df:ca:44:e2:5d:3e:88:
35:78:03:5a:ec:d3:17:9c:72:98:40:53:07:ef:90:
06:b4:dd:94:94:2f:ab:52:d0:9e:60:93:45:42:84:
9b:76:d6:4f:54:15:25:c0:1c:33:e8:4c:7e:d9:19:
88:28:2d:6e:22:6b:6e:71:7e:c3:3d:8b:77:85:b4:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9C:21:D6:DC:F1:DE:3B:C0:B2:08:D6:65:40:40:8D:22:4D:1F:5D
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3d:ed:56:15:da:20:b7:41:d7:16:5e:f2:94:0b:c1:94:3d:
a3:b5:ae:80:b3:a6:0f:90:6e:4a:a9:d6:a7:3e:19:a0:1d:c5:
b6:85:41:00:84:8d:f7:9e:31:40:ee:6a:1d:4b:1f:61:60:11:
9b:2f:db:88:14:0b:3f:d5:46:bb:97:19:ec:9b:a7:0f:37:27:
65:28:c6:3f:cf:18:59:17:9c:8e:1e:a8:c1:a0:1c:fa:f0:7c:
aa:c5:76:94:e8:97:e2:19:83:d6:44:5d:47:c5:b4:f2:8e:f2:
ad:08:40:e4:b1:a9:b3:9a:89:2e:4a:9d:46:7a:b4:06:29:17:
46:db:bf:91:f5:ee:dd:92:b0:ee:c0:f0:2c:94:45:75:b2:4c:
66:78:eb:06:5f:a0:b6:45:ba:27:67:c7:29:5f:73:33:fc:c7:
3c:4a:17:0b:c9:f5:ce:0a:ab:82:99:6b:39:52:78:f1:78:00:
de:fe:b8:da:3a:c8:0e:cf:a2:ce:fa:c5:89:00:9a:61:64:9f:
88:ce:3e:9e:4d:aa:2b:01:47:fd:68:d8:e2:54:f5:d0:a5:86:
98:de:75:13:05:fe:70:af:d1:8d:75:80:07:e6:d5:41:52:3a:
2e:9d:e9:51:ce:b1:08:72:2e:58:24:5a:54:4a:a2:e6:b9:35:
51:26:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:33 2025 by rpki-client