Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier: a5uyB0mzeU1ojRzkp6rsl/waPAZBruCuenbqlXVSnYc=
Subject key identifier: F8:BF:DD:B1:74:FE:10:3E:64:FF:92:AB:85:79:42:19:5A:10:37:8D
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 0198D73B442E398129A79947A84668CFE51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number: 0C3A
Signing time: Sat 23 Aug 2025 14:00:42 +0000
Manifest this update: Sat 23 Aug 2025 14:00:42 +0000
Manifest next update: Sun 24 Aug 2025 14:00:42 +0000
Files and hashes: 1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: mKx4HBKpQxv5C2sKHE/oBvah5OODpnxdQPK1bOTVpNo=)
3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:44:2e:39:81:29:a7:99:47:a8:46:68:cf:e5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Aug 23 14:00:42 2025 GMT
Not After : Aug 24 14:00:42 2025 GMT
Subject: CN=f8bfddb174fe103e64ff92ab857942195a10378d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:a6:c4:09:63:c7:1c:50:e8:88:da:d5:f7:
4c:b4:fa:7d:99:f8:36:3f:47:e0:56:44:58:89:e6:
f2:29:36:01:5d:e0:5f:08:d8:56:74:9b:d0:56:f7:
ff:c8:9d:bd:dd:1a:0c:41:93:1e:14:14:90:d0:fc:
6d:c3:17:0e:10:68:a8:52:ee:3c:26:9e:f2:76:c4:
07:dc:eb:36:1e:d4:5e:cd:79:e6:91:26:ce:32:88:
db:a7:31:6e:8f:70:fe:f3:85:96:6c:0f:46:e0:ee:
6e:60:1b:84:8e:dc:5f:4c:5f:11:c5:96:91:90:55:
fb:ae:fa:46:e2:2f:27:4a:4c:06:1b:c1:67:f4:e4:
b6:1e:db:78:20:da:31:af:be:09:8e:34:a8:e1:19:
d0:e3:c9:95:99:ef:af:e1:7c:c1:6b:b5:a3:52:dd:
f0:56:02:bd:aa:fb:32:18:ba:38:dc:9d:2e:4c:1d:
7c:be:91:39:62:26:15:03:43:6a:b1:cd:15:fa:bd:
b1:c8:3a:e3:76:1f:8c:34:d6:ad:d0:8b:b9:85:9f:
2f:4d:95:8a:01:b6:04:08:ac:f6:ea:00:a8:07:76:
37:f0:49:92:b6:d6:0e:8c:02:b3:3e:4c:60:88:3c:
4d:f0:00:fb:72:23:da:5a:ed:4c:19:57:b0:4b:b0:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:DD:B1:74:FE:10:3E:64:FF:92:AB:85:79:42:19:5A:10:37:8D
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6e:ba:8b:9f:b9:26:e3:c8:8a:61:9a:fd:8b:55:73:d9:63:
4a:f7:c0:5a:af:c1:0d:b6:a0:5d:6a:9f:69:61:1a:ee:e0:7e:
af:9a:ef:f8:35:11:9e:ef:f6:20:fe:26:20:83:9a:29:a0:67:
13:2d:57:0d:d6:cc:0c:d5:96:54:4b:cb:c9:62:f4:f4:26:c4:
cb:1a:21:6a:87:d8:6b:79:a8:28:8c:1b:9d:1d:c1:3e:08:bd:
ad:e4:67:2f:4f:39:50:5a:33:72:6b:a8:93:89:09:1f:0a:b5:
4b:5f:68:16:36:4b:ce:38:ae:42:fe:1e:06:5e:14:e4:af:ea:
59:75:75:7f:1a:4f:2a:36:b4:17:40:8e:ad:54:4c:36:b6:2e:
65:f7:9e:47:58:4b:37:06:7c:6b:44:08:1e:9c:1f:61:97:ae:
73:d8:98:1c:27:58:60:65:67:c2:2f:06:8e:68:3c:e0:40:6d:
c6:0e:b1:84:98:71:d8:f2:6c:a2:ad:b6:e8:3b:3d:f2:68:1e:
2a:cd:37:e9:f7:d2:ba:e3:b8:79:e3:68:61:89:bc:25:19:79:
ff:6a:ba:39:be:c1:39:f7:81:2d:15:f8:1a:00:9a:cd:17:f3:
56:18:23:f3:b1:e6:12:2a:14:bb:de:11:17:2c:fe:53:c0:18:
80:51:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:44 2025 by rpki-client