Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: xm9oqkJxc682EjZ5XgmUbTzf2cfCZ6V6kouC7S3ThnQ=
Subject key identifier: FF:5D:51:64:6E:33:93:9B:CA:5E:94:94:A6:1B:E4:6F:24:95:FE:9A
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 01984AE6001DC961D49023E7BDF6D85E7A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: 0288
Signing time: Sun 27 Jul 2025 08:00:43 +0000
Manifest this update: Sun 27 Jul 2025 08:00:43 +0000
Manifest next update: Mon 28 Jul 2025 08:00:43 +0000
Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: T8VI4VthrVDoeDSu0STYO10DmFVkKJu50fqkoElgAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:00:1d:c9:61:d4:90:23:e7:bd:f6:d8:5e:7a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Jul 27 08:00:43 2025 GMT
Not After : Jul 28 08:00:43 2025 GMT
Subject: CN=ff5d51646e33939bca5e9494a61be46f2495fe9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:61:e1:52:57:af:03:b3:6a:c1:96:1c:7b:
5e:08:6c:27:74:ad:5e:9b:06:dc:2b:1b:31:44:37:
4f:5c:76:b1:4c:28:52:d6:38:77:52:aa:63:39:09:
ea:e1:94:87:b2:f7:e8:25:9d:15:3a:29:7a:dd:01:
8d:6f:a6:6c:d7:97:b5:28:98:08:73:4a:ea:99:89:
27:e2:b2:7c:1d:16:5a:7b:7a:7a:7e:f1:8e:7a:66:
3c:53:c6:34:af:99:b0:87:f2:42:21:e6:3a:9d:22:
3e:db:a8:eb:df:72:14:d1:20:2d:f8:46:88:b3:48:
e5:ea:b5:0a:43:e4:84:4a:81:2c:62:ca:42:50:40:
56:c1:c6:ec:b5:9a:4b:f9:1a:4a:ea:1e:ec:d6:66:
a1:85:38:bb:04:f0:00:ac:90:81:45:3b:10:e7:81:
23:d2:2f:3d:89:23:26:af:79:2f:4b:97:5e:08:85:
e8:f7:46:b5:8d:28:d2:9e:b7:42:5a:5c:f1:98:a3:
35:06:15:53:3f:2b:8d:fe:7f:41:d1:0b:99:8b:16:
55:de:38:13:6e:8e:4d:75:e4:98:0d:0a:0e:81:2c:
ee:97:c5:11:a9:2f:7a:2c:20:f9:ba:3f:61:28:54:
18:83:96:d7:bf:93:81:50:c5:3a:a7:02:26:99:ad:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5D:51:64:6E:33:93:9B:CA:5E:94:94:A6:1B:E4:6F:24:95:FE:9A
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1b:57:cb:3a:d6:72:c0:e9:5a:0f:14:83:7f:bc:34:3e:8e:
0d:b0:41:a2:1c:c6:ab:97:bd:76:aa:40:da:ce:24:14:b3:07:
ca:f9:68:e4:9c:13:00:72:c5:a6:ba:b6:06:4a:dd:26:8e:72:
d3:8f:18:06:b0:33:70:6b:ae:29:51:7a:e8:fb:06:ad:2a:4e:
c3:af:9b:96:75:5c:5d:6e:15:96:ef:73:08:a8:18:3f:50:fd:
b1:52:b8:ae:51:d8:83:12:f7:25:ea:dd:62:70:0d:db:f0:41:
e6:3d:1e:67:8d:11:15:45:05:09:87:25:c6:5e:53:2e:68:83:
86:6c:4d:6c:e7:3f:45:e5:a3:8c:6e:d2:df:e8:90:f3:f9:f2:
df:f6:2d:db:b7:88:87:0f:f3:b7:5b:31:35:0f:01:ac:44:c1:
b7:e5:53:8e:0e:3b:cd:65:39:7a:cd:0f:00:29:5d:8d:52:34:
4d:78:d6:b8:e7:a6:bb:25:82:a8:1a:27:70:85:83:77:57:c6:
66:9f:da:54:ce:b3:90:3d:9c:ce:6e:0b:7b:9e:da:23:4f:c3:
28:10:a9:0f:33:c9:b1:d6:7d:e0:f9:d8:11:b5:81:31:d8:a4:
88:8f:7f:67:61:78:8f:20:ac:7f:79:82:8c:22:de:93:a2:78:
80:dc:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:53 2025 by rpki-client