Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: 7kFxOzXhQmKuRXXyG8y0CPTLq+sN+fvXJI3S4kV0JHQ=
Subject key identifier: 23:0F:46:31:54:AB:2A:34:A3:4C:B7:D7:CD:31:C5:4E:36:15:07:12
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0198D583EAE77BDB67000661FB752B1FDA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 157E
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: JyMqkHQENmKTI659nuHruWBoUFxKx8qtK455huXrWHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ea:e7:7b:db:67:00:06:61:fb:75:2b:1f:da:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=230f463154ab2a34a34cb7d7cd31c54e36150712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:cb:96:8c:36:df:a8:8e:1c:5b:33:fb:a3:
40:3e:89:7f:17:30:d4:a4:11:a2:36:16:b4:d1:06:
ae:8c:ab:19:b3:82:80:66:c9:65:8f:1a:e7:f4:92:
26:ea:91:9b:7e:cb:86:13:bc:13:0e:be:88:3e:da:
0e:3b:cc:24:16:b5:91:4c:1f:14:d8:02:b1:32:cb:
d8:ea:ac:e0:da:32:59:93:0e:02:95:6c:f3:28:10:
91:3e:7a:af:c2:24:1c:6c:c1:37:ad:b8:5e:9b:1b:
8d:ce:14:a7:fb:3f:97:47:e5:a5:73:6a:52:9b:b2:
f2:f5:89:ab:72:e4:02:99:d8:60:ec:62:8f:25:b1:
10:5e:47:25:85:1e:0a:92:cf:e3:0a:c2:bb:f8:cb:
48:eb:47:79:5e:ed:14:5f:59:b9:48:92:6d:8d:d4:
ab:28:03:d3:61:f8:19:eb:9f:d6:6d:c3:18:98:1a:
18:c5:99:d7:11:8c:5a:2c:bf:da:f1:1c:cf:79:04:
14:a2:a8:6c:35:42:14:73:96:54:21:07:dc:e7:ec:
40:25:4a:dd:22:fc:ad:4a:90:2d:ae:2d:5f:bb:5c:
75:97:10:73:3b:34:52:a3:03:d7:3e:74:e0:af:ee:
24:44:07:12:1c:44:8e:80:18:a3:33:c7:1d:39:64:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0F:46:31:54:AB:2A:34:A3:4C:B7:D7:CD:31:C5:4E:36:15:07:12
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:85:1f:01:8d:ac:77:fa:9a:a1:ad:55:d4:64:07:be:4b:ba:
be:21:cc:14:1f:6a:0e:05:46:ca:33:af:c1:d3:e4:1d:dc:c4:
53:ea:f2:d3:30:d4:ed:d4:4f:f7:1d:48:b2:f2:c4:ff:8e:f1:
a1:ef:58:23:af:5a:5c:78:c8:76:2a:b0:8e:ae:9d:ed:c4:25:
13:e9:b5:ff:66:f5:d1:3c:f3:87:93:0b:fd:ae:3b:d7:ab:80:
9f:4e:fc:7b:52:39:e8:57:4c:19:70:6e:c1:f2:ea:57:ca:87:
68:9d:90:c9:05:68:c4:31:9a:84:e1:d2:eb:d1:74:9b:e6:13:
be:27:99:4d:ff:be:a0:7d:8f:f5:14:37:23:1d:99:a6:61:ba:
0e:5c:01:04:90:c5:e7:7e:19:d5:8a:4d:e6:6c:ab:7f:86:21:
f9:35:6a:ab:ac:c9:07:55:9c:b1:31:ee:55:22:0d:8a:bd:de:
82:0b:18:14:54:f5:eb:2e:39:60:1f:ad:d8:5f:e6:29:32:ab:
6b:12:9b:7d:72:d8:a0:9a:7f:76:bb:36:c8:97:aa:73:b3:08:
95:ad:aa:98:c6:c1:1e:b6:7f:e1:92:39:d2:92:70:97:76:78:
bc:81:b3:5c:3b:2e:1d:32:9f:dd:e0:e5:bd:46:05:c6:6a:ab:
bf:9b:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:33:14 2025 by rpki-client