Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: eOB/DjuaxNab6GfqGZn8/w8zKYQqvgcFqixIJZDt970=
Subject key identifier: 74:E7:69:09:98:3A:0D:F9:0E:C5:5E:12:D3:0D:06:00:07:FE:34:5C
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 0198D473242B91B9D79FAE969A8D7D247D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 03B4
Signing time: Sat 23 Aug 2025 01:02:52 +0000
Manifest this update: Sat 23 Aug 2025 01:02:52 +0000
Manifest next update: Sun 24 Aug 2025 01:02:52 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: jYjeh3rdEqLgIUjw81o1p/UQffUDB1DezblId76E6Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:24:2b:91:b9:d7:9f:ae:96:9a:8d:7d:24:7d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Aug 23 01:02:52 2025 GMT
Not After : Aug 24 01:02:52 2025 GMT
Subject: CN=74e76909983a0df90ec55e12d30d060007fe345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:bd:4d:ac:b6:81:2f:6b:79:ab:e2:f5:53:
8d:9e:df:b2:d4:49:40:53:da:d9:25:ae:ab:6f:53:
c9:67:f0:3d:7b:e3:9c:a7:08:e5:f2:bf:a4:dd:d4:
56:8e:43:3f:40:6c:be:b4:13:3b:60:ca:1d:ff:8e:
9c:c1:78:2c:24:f7:19:bf:02:89:5a:91:22:9d:ce:
e4:81:30:2b:40:7a:19:3e:ec:43:17:73:10:b6:13:
d5:14:a2:6b:e0:81:d5:4c:18:24:eb:36:30:b7:dc:
a8:f6:64:6f:ec:7e:38:5a:56:3a:e9:51:27:94:a4:
39:bc:3b:10:06:b0:67:e6:57:05:c0:61:46:de:c8:
87:62:50:9f:a0:94:f6:98:6e:e0:6f:86:57:57:85:
bd:90:ba:2a:2a:14:b6:d8:35:49:bd:ee:d0:34:c2:
f1:a1:ef:35:e4:66:7d:40:78:ad:70:e8:78:1f:c4:
42:66:f2:34:41:a9:a0:29:e0:7e:be:20:1d:16:05:
74:14:18:34:75:c6:b3:43:2a:0d:65:da:57:01:03:
70:19:2c:07:21:96:f8:94:8b:e9:63:19:c3:85:cc:
33:03:d5:26:33:d8:50:8d:b4:20:6b:bf:52:8f:71:
b1:e1:79:7b:4e:fe:b0:c3:04:ca:e2:be:a9:6a:39:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:69:09:98:3A:0D:F9:0E:C5:5E:12:D3:0D:06:00:07:FE:34:5C
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:16:59:f2:09:ac:93:9e:7a:24:12:30:23:b6:4c:ca:0a:
dc:d5:4f:c6:99:20:7d:88:45:e6:41:91:80:f8:c0:a0:f2:65:
59:b0:8e:b7:76:af:f6:60:1c:79:43:a1:d0:c0:04:23:3b:bb:
06:79:71:ed:2b:2b:fb:6f:7f:49:1c:50:ac:cf:f1:94:b3:b0:
15:32:de:be:09:87:ea:0b:93:02:b5:ae:36:db:3f:20:7a:11:
ca:d7:df:78:03:21:d0:ac:1d:9e:73:23:23:e4:a3:ca:88:c9:
a7:93:4d:b8:ba:46:cf:27:da:ef:e7:57:40:ff:80:45:7e:87:
68:98:7e:e5:89:49:54:3a:87:77:46:7c:23:03:4f:43:a3:8a:
f5:4a:65:12:12:95:10:db:52:28:9d:e0:dc:43:ea:a7:cc:09:
f1:da:a4:5f:3e:77:60:60:19:5d:4c:01:aa:e9:35:87:66:53:
c9:69:a6:d7:18:6f:05:92:2c:0f:c6:14:94:b6:85:8f:aa:74:
9e:71:88:4a:e1:1d:13:15:d3:63:87:09:51:b5:6a:f8:23:97:
3f:cc:43:72:5c:f8:98:16:02:b7:d8:41:0b:9f:9c:d0:6e:0f:
0f:8d:36:51:7f:d6:ee:72:66:36:a8:7d:66:dd:99:0a:31:95:
44:b4:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:08 2025 by rpki-client