Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: xec3+t5Wl+tEzBEdHHkMsxfDWHXkgDo7OKY1S1wVcVo=
Subject key identifier: 38:A5:19:37:CE:4F:BE:31:6D:D2:77:F7:CE:05:8B:B5:62:30:24:E4
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 0198D4E0C6798AF2C7736D8A782E72438867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 054C
Signing time: Sat 23 Aug 2025 03:02:37 +0000
Manifest this update: Sat 23 Aug 2025 03:02:37 +0000
Manifest next update: Sun 24 Aug 2025 03:02:37 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: gWcH+C3/3DJ5r4nMOuy4J7n78QgwvtMN4MKcHeCVtXE=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c6:79:8a:f2:c7:73:6d:8a:78:2e:72:43:88:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Aug 23 03:02:37 2025 GMT
Not After : Aug 24 03:02:37 2025 GMT
Subject: CN=38a51937ce4fbe316dd277f7ce058bb5623024e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:0c:87:ee:f1:bd:40:72:f9:81:69:4b:df:
c1:9b:cc:bb:4e:ae:ee:df:14:c6:02:d3:a4:17:e0:
91:c4:78:74:5b:77:ef:fa:cd:54:ff:1e:14:eb:ad:
06:ff:aa:0b:d9:12:12:9e:b3:8d:87:ed:fc:eb:b4:
45:3d:34:1f:b1:32:4b:c6:1e:25:70:a8:7e:a8:26:
ae:23:cd:6f:0e:4a:73:ce:64:30:14:5b:e1:f5:3a:
0d:80:78:77:27:85:ca:de:12:13:dd:e1:d1:ea:ff:
bf:39:9f:ab:24:c0:9f:87:b7:6a:b1:69:8b:fd:08:
4b:35:fc:67:b9:73:9a:55:41:9c:6b:f6:d3:b7:7d:
de:8c:fc:e3:bf:ef:af:5a:9e:bf:f6:4a:22:cf:d0:
c5:92:a1:ec:26:41:77:69:d9:1d:21:82:38:dc:6e:
68:00:2b:a2:a4:b4:c5:f0:b1:7c:aa:2a:21:51:ae:
f8:f2:2e:26:fb:67:0c:dc:08:65:40:3f:59:d2:a8:
50:0e:0f:41:39:87:e3:54:9e:2b:22:55:f0:3e:ce:
23:c3:30:b1:55:f6:a7:91:6b:82:cd:6c:53:4c:10:
4e:f0:28:1e:74:82:4c:83:a1:c3:7c:94:2a:85:af:
5d:2a:73:19:88:a9:ae:c5:2c:68:84:13:f4:f7:8a:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:19:37:CE:4F:BE:31:6D:D2:77:F7:CE:05:8B:B5:62:30:24:E4
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8d:a4:5a:a0:c2:10:2e:cc:df:fc:15:fa:cf:b3:f0:3a:14:
3c:28:1a:a4:0a:45:0b:4d:61:3e:c5:6d:76:98:1e:f3:33:38:
f9:f7:84:f9:19:c1:c6:ff:57:31:7b:a6:3b:a7:bf:13:bb:ba:
0d:ff:eb:b2:d4:d3:35:67:78:d8:0a:61:75:8b:c3:a4:24:99:
91:67:3f:a4:1d:56:f5:70:9d:38:a4:10:45:0d:a9:cc:15:44:
fb:c2:9c:d2:85:90:52:6d:d7:f9:20:9e:8d:d6:67:5f:d4:35:
04:03:4f:b6:ef:57:d2:b5:03:45:80:6d:3a:da:54:3a:09:a2:
7d:96:54:77:bc:7e:16:b2:57:c2:da:ac:b5:83:3f:4f:e8:1b:
29:0c:3a:f3:cb:d2:a4:c6:95:d1:0f:c0:a5:1b:e7:04:44:cf:
ce:fe:a6:86:32:c0:2b:f5:c4:f1:ae:b8:76:e6:de:be:4d:c2:
88:fc:af:20:3f:75:e6:05:9c:d9:eb:3c:8b:e8:a6:24:5c:1a:
8f:c4:1d:bc:c8:25:06:33:f0:59:a4:8b:54:62:c1:52:54:5a:
6f:0c:4e:09:24:b7:e1:d0:a7:db:82:4c:ef:50:00:22:88:47:
02:cc:da:af:f7:cd:d2:dc:3c:a6:6b:8b:d2:23:d4:bf:82:ec:
7a:d5:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:17 2025 by rpki-client