Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier: 8edNzI/by9Aiz4C6jM0r0ZqBE2nNyxuXH/Te6QkxeJ4=
Subject key identifier: 1D:79:3B:BE:C3:36:69:B1:51:68:B1:5C:78:60:FF:06:BF:60:AC:86
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 0198D54DE2341912EE5AD769C4ADB783FDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number: 0E76
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: NPkIYUJnxhCtspruqkuc+B72WDVcNJvtlSe9N0yk8yo=)
2: q8epYF3ITJmcTk7KzU9-ybVTiI8.roa (hash: ynf0gvvVwgf87WpAamEBJq2+/MA1NpfszumEHpnlxfU=)
3: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (hash: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e2:34:19:12:ee:5a:d7:69:c4:ad:b7:83:fd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=1d793bbec33669b15168b15c7860ff06bf60ac86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6a:a5:8a:2a:ee:31:d8:48:3f:57:64:6d:52:
5c:a9:c8:19:36:ba:30:ac:bd:27:b8:6f:86:25:8c:
42:44:ce:a6:6b:9e:52:7a:c7:5c:c2:83:3f:37:f8:
df:d2:58:64:e0:d7:91:de:5d:ce:0d:a0:8e:f4:32:
9f:d3:ee:05:73:10:93:bd:07:bb:09:84:3a:a9:2b:
aa:56:2c:78:35:38:ae:ca:e6:e3:7e:0f:67:3e:67:
56:43:78:fe:5f:32:7c:fb:7e:31:fb:0f:59:b0:29:
a6:cf:4e:f1:d2:9d:05:53:97:47:da:20:e9:a0:73:
80:9d:a8:21:d1:85:8f:37:de:4a:f1:69:cd:ef:2e:
14:41:b1:83:03:54:34:2d:9b:6b:1e:7f:c1:ac:0e:
86:6a:42:54:75:53:9b:80:80:17:27:8d:91:21:fd:
b3:78:56:38:b9:64:19:21:06:35:74:ef:19:b1:cf:
3d:bc:15:a0:76:fb:f3:2c:5f:cd:a1:c9:fb:71:e8:
fd:47:c0:ee:ed:fd:9a:55:10:31:1e:a9:23:dc:da:
b8:df:5a:98:63:bc:31:c3:c0:d1:59:8a:bc:19:1f:
45:ae:f3:40:cf:09:c0:36:e0:e5:0f:e6:4b:71:90:
97:30:67:e0:49:19:53:61:5c:25:c3:f2:6c:ca:fb:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:79:3B:BE:C3:36:69:B1:51:68:B1:5C:78:60:FF:06:BF:60:AC:86
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:15:3b:98:87:95:81:c7:cc:53:e5:9b:35:ac:cb:d1:fc:25:
15:f9:90:92:e0:f8:a2:ed:0c:cd:86:ab:57:84:2e:f8:23:1d:
24:70:de:cc:8c:eb:98:22:75:93:d7:77:f8:20:b4:5f:87:b6:
ce:25:c3:58:08:f5:91:1a:16:97:6c:0d:00:88:4b:67:60:a2:
aa:9c:ca:a7:97:b6:21:f0:79:0b:23:37:fb:21:18:50:41:11:
f8:0d:0d:64:4f:a9:f5:a8:f8:8c:50:fe:e3:25:3e:c5:85:5f:
77:63:b2:b2:f0:2f:03:2e:89:ac:f2:16:8b:1c:fb:4d:4e:dc:
87:ed:ab:5b:f1:82:ef:29:d6:95:69:89:87:b2:5a:25:da:29:
da:fa:0d:92:7d:d9:22:c2:e1:1e:74:1a:d8:bd:8f:6b:e6:9c:
47:de:a8:17:b4:ee:76:56:fb:7f:89:d4:aa:2b:a4:49:7d:29:
69:78:f1:51:af:5a:81:03:a0:c2:86:0f:0f:db:c1:a3:31:7e:
63:e5:8a:40:6f:12:d1:96:cf:9b:fa:13:92:41:64:59:14:e9:
5a:02:66:14:a0:3f:c6:f0:e3:a1:e3:51:8a:7e:3d:19:60:b4:
33:43:1e:33:d8:c9:42:9d:81:d7:b6:a0:0f:ba:58:cd:fe:36:
23:c0:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:46 2025 by rpki-client