Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: nVaDPN/O6mf/x+Qn0IDQpFdI1Q0vOMSLT+I4K3XpOJk=
Subject key identifier: 4E:EF:EE:F1:68:2A:36:FB:ED:94:0C:4F:77:C0:D9:9F:05:85:95:AC
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 0198D4A80723583692C5E151CCD170FD82A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0C37
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: GeT+1C/y4NmZkyciupwE3j0d4Qkzyd70giAjF0uKONI=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:07:23:58:36:92:c5:e1:51:cc:d1:70:fd:82:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=4eefeef1682a36fbed940c4f77c0d99f058595ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:40:42:91:fd:5e:69:65:d4:b6:cc:03:28:
96:b7:89:15:08:4e:9b:24:1a:47:66:ee:73:c4:18:
55:c2:f2:9e:2a:dd:4f:67:df:89:36:a2:b4:ea:55:
bb:fd:d9:9d:c2:e6:2d:30:dc:15:ae:07:60:57:9c:
68:c3:cb:b6:2c:62:c2:13:92:62:9e:e1:3b:a9:e9:
d3:23:a3:04:63:db:b1:da:af:25:95:fe:3a:4a:75:
1b:0c:bc:96:fc:fd:06:e0:ed:38:d7:18:dc:d2:4a:
bd:2d:95:f1:74:ad:85:d8:71:1e:3b:90:6a:58:91:
14:6c:01:9d:86:91:4d:ee:85:23:fd:36:8e:f9:d7:
84:0b:e2:41:d9:28:8c:fe:e0:e1:8d:76:49:79:f0:
77:ca:e2:4d:26:e7:6a:b6:34:13:ec:ac:72:c2:f9:
62:93:bb:e9:37:b3:46:97:5f:83:fd:9b:15:76:ae:
75:35:07:26:83:aa:0a:ce:88:3c:67:f9:5b:9c:e8:
23:86:d9:b8:ab:14:97:4d:a3:cd:d4:d0:57:11:c4:
47:4f:af:c7:c4:ae:17:0a:23:af:cb:ec:17:6e:e8:
4e:5a:da:31:07:18:ae:6b:a9:46:13:7c:6d:d0:c0:
af:1a:4a:61:85:42:3c:ea:c7:49:6f:30:f0:d3:5d:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EF:EE:F1:68:2A:36:FB:ED:94:0C:4F:77:C0:D9:9F:05:85:95:AC
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6e:24:66:2f:12:2e:5f:47:04:4e:38:e0:a2:b9:d0:74:c9:
d9:8a:b1:68:c1:b2:b6:15:3e:f9:36:9f:f4:60:2e:5a:49:e0:
64:07:a4:02:d0:d0:6a:b1:38:d4:16:17:45:1d:aa:0a:e2:5d:
5c:8a:4f:e8:64:fa:bc:8e:23:07:ed:3a:82:01:04:71:93:5d:
d2:05:bd:c8:ca:31:97:02:41:dc:4e:44:eb:3a:f2:d2:b0:fe:
58:06:4c:98:e6:2d:c4:ea:b3:f0:10:79:cf:be:36:c9:8d:dc:
05:fa:65:c4:38:f3:49:6c:47:a5:37:3c:ae:48:34:3c:0d:f6:
a2:30:04:51:8a:a7:ad:ad:50:c8:c9:78:10:06:55:36:91:39:
97:95:f8:ba:ad:8c:59:1f:34:3e:c3:d1:f8:e4:b5:1a:e1:2a:
f1:32:64:3a:76:ba:b5:62:d8:dc:46:b2:46:fb:fc:89:d5:43:
f1:14:7d:cc:44:c3:aa:e2:3d:6a:12:bc:86:51:c6:e9:f7:46:
86:0d:bd:63:ce:e5:39:6f:bb:cd:f3:70:d9:aa:f5:e5:a6:1e:
06:49:4e:ec:6d:6d:c0:f8:ef:19:a7:de:34:cf:2c:fd:24:ad:
a7:14:fa:a6:1c:cc:1b:6b:0f:bb:16:71:9a:f6:da:c0:6c:8c:
e6:89:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:52 2025 by rpki-client