Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: vkKBN0R31zGWpWyaHuTuocj3RUrt1SuTuux1IF3ubo8=
Subject key identifier: C6:B8:D3:FA:27:72:08:6C:A1:8C:A7:B8:0A:A6:B5:B9:2B:15:7E:92
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 01984C6684A4D582C9B93972C83BBFCF60B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 15:00:43 +0000
Manifest this update: Sun 27 Jul 2025 15:00:43 +0000
Manifest next update: Mon 28 Jul 2025 15:00:43 +0000
Files and hashes: 1: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (hash: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: jV9vTBv4W2Y1IMVXeoAwV6IFJhUAno5mv90h5Z3D8WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:84:a4:d5:82:c9:b9:39:72:c8:3b:bf:cf:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Jul 27 15:00:43 2025 GMT
Not After : Jul 28 15:00:43 2025 GMT
Subject: CN=c6b8d3fa2772086ca18ca7b80aa6b5b92b157e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:f4:f0:0a:43:2e:b7:1b:a8:74:90:3a:fb:
34:56:bc:e9:db:a4:5b:b0:c3:49:70:71:e8:de:bf:
e9:e3:93:df:5e:cd:93:1c:84:fc:3e:ea:54:1b:cf:
38:8a:62:94:3c:7d:45:ae:53:12:6a:c6:3e:4f:f8:
48:db:9c:a5:d6:6a:94:47:f7:3d:28:96:36:12:ba:
bf:af:c0:73:d2:bc:13:2b:c6:51:69:bb:61:e4:69:
db:4a:58:d9:f3:ab:d2:26:1d:13:a6:87:8a:2f:c6:
4e:22:84:a9:a8:c5:0c:e8:12:3e:bb:21:e0:71:2e:
92:db:41:0a:ef:d6:c9:80:47:2a:60:fb:f0:9c:cf:
04:03:5c:11:60:c9:e1:18:3d:30:e7:0d:cd:a4:75:
6a:1c:c4:7a:d6:88:37:ed:a7:12:70:06:a5:f1:e7:
1e:e8:f8:23:b4:86:70:c2:2b:75:67:3b:4d:fe:98:
a5:ad:91:ab:44:0f:e7:fa:5e:18:50:56:79:f1:3c:
ea:df:97:bf:e0:a6:a3:48:a5:37:b4:26:55:2c:4b:
22:7c:80:3d:46:32:f8:b2:4f:44:f8:f5:8d:a2:57:
b4:26:39:16:8b:20:a4:a5:7c:12:d5:30:b1:b9:99:
48:7f:66:f3:24:3d:61:ea:19:28:26:67:c9:95:5b:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B8:D3:FA:27:72:08:6C:A1:8C:A7:B8:0A:A6:B5:B9:2B:15:7E:92
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:58:c3:96:1b:42:2d:06:e1:cf:ab:3b:21:43:c6:e5:fc:d8:
f6:ab:f9:b7:4c:89:46:4e:e2:d8:da:f3:c2:6b:f2:5c:03:5e:
de:ea:12:93:7c:8f:fa:8a:71:da:67:fd:ad:39:8f:98:e4:17:
d8:ca:e2:82:ba:d1:1d:9f:7d:4e:1f:05:c7:ed:40:cb:4c:bd:
4f:ad:f5:50:6a:fd:ea:90:9a:ba:35:df:99:cb:8d:5a:9d:73:
f1:96:7d:76:ad:42:05:a9:c0:4e:0c:e0:79:af:24:65:58:c1:
56:60:c7:2c:d9:71:ff:6f:ac:f0:26:b3:8c:1b:c0:54:b7:a8:
f6:50:64:dd:b8:20:c3:98:2e:e7:ad:80:f1:73:cd:86:06:bd:
0f:63:4f:aa:98:18:d0:95:9f:ca:b7:fd:69:63:d5:a8:24:ef:
d7:96:76:79:67:39:72:a1:44:78:e3:62:b0:51:e5:70:98:18:
00:03:86:c9:99:03:26:6c:6e:c9:d7:52:df:90:27:ae:0e:01:
17:9a:e3:fc:f7:db:12:5b:86:89:f1:8c:ba:41:8f:0a:11:5b:
55:c0:e6:31:94:6f:1c:de:9b:3c:c1:a3:92:a9:8d:b7:91:e2:
2c:ad:80:54:60:16:9d:9c:11:d8:51:6c:50:07:35:7a:9f:a0:
b1:34:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:29:11 2025 by rpki-client