Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: Quf7G4QrghRtFCYEhLQ7uxoVO81OYd23PoqMIypf8LM=
Subject key identifier: 81:F4:EB:7C:01:05:B3:EF:7E:5F:2C:CA:67:AA:58:4F:78:62:D4:55
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 019846D23266ABD6516F5A2172C8A6494940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0C80
Signing time: Sat 26 Jul 2025 13:00:37 +0000
Manifest this update: Sat 26 Jul 2025 13:00:37 +0000
Manifest next update: Sun 27 Jul 2025 13:00:37 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: d7l+MsaBLXwWS/T9oOyG8tJqsrz44BEMGxHTZDUt99Y=)
2: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (hash: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:32:66:ab:d6:51:6f:5a:21:72:c8:a6:49:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Jul 26 13:00:37 2025 GMT
Not After : Jul 27 13:00:37 2025 GMT
Subject: CN=81f4eb7c0105b3ef7e5f2cca67aa584f7862d455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:d4:05:d1:1f:28:05:f1:4d:e9:d6:26:60:
e8:2f:bd:f2:c5:4b:e6:53:e9:80:c5:c6:eb:67:a8:
b2:00:15:a2:df:97:69:0e:dd:f9:f3:d8:67:8e:a8:
4e:b0:6f:70:6f:d1:5f:72:d4:b4:ba:d8:38:e9:16:
d2:a2:04:a4:22:21:46:54:4c:9e:e9:5e:3a:cf:49:
35:24:30:24:ce:f2:85:2f:c5:41:04:d2:5b:68:d6:
15:81:e7:e2:4e:dc:b0:92:c6:b0:4f:0a:5b:da:5b:
a6:dd:a3:0d:e8:6d:a0:44:e8:68:69:7a:a8:50:2c:
14:2a:70:46:1c:45:95:20:07:0a:49:58:15:7e:9a:
38:e6:57:1c:f2:1f:5e:a3:54:17:7f:70:59:17:ce:
8a:04:4b:1b:74:a1:14:3c:a9:51:9d:48:ae:00:c9:
e7:66:08:dc:c7:d7:b1:67:e6:82:39:5e:f5:28:7f:
a0:19:df:dc:85:fa:77:4c:d6:0c:ab:91:26:30:91:
b3:46:63:cb:37:1f:d4:c6:14:09:37:c4:db:b7:81:
35:0c:60:c6:32:48:ef:1d:fc:dc:34:93:83:e9:1a:
40:5e:77:cf:1e:fb:41:6f:01:2e:f7:7e:b4:39:1d:
d3:fa:e4:ee:4e:c1:fd:50:96:70:12:05:a2:9b:b5:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F4:EB:7C:01:05:B3:EF:7E:5F:2C:CA:67:AA:58:4F:78:62:D4:55
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8a:e4:50:ff:b8:80:e1:9c:81:46:80:39:99:3a:e3:90:25:
72:56:25:cc:6a:69:ed:28:02:b4:1a:2c:dd:3d:02:b6:da:d9:
a6:61:58:e7:8a:e5:f1:cd:24:d4:75:58:2a:56:0a:d3:a6:ef:
42:07:e7:ec:7d:9f:60:dc:09:24:0b:b3:3b:f6:0a:2b:4d:cf:
ec:f6:c2:94:3d:3e:be:0b:f7:0d:0d:7e:d7:6d:35:7a:55:3e:
60:6f:1a:2f:c8:f7:99:29:65:ed:14:6b:9f:06:f9:32:03:5f:
af:d9:6c:46:00:f2:a5:45:8b:28:60:43:94:b9:ba:06:9c:3f:
4a:46:39:0f:ca:a8:55:be:d8:aa:2f:c5:aa:66:7d:3a:6b:0f:
a5:df:f3:0d:3c:b0:83:cc:8d:2b:ca:a9:0f:12:bb:6a:b1:05:
4b:b8:1b:6f:0f:93:26:e4:b0:ab:f7:65:14:ae:c3:7a:af:dd:
45:30:05:f6:44:b4:f4:1e:bd:0a:cf:aa:2f:1f:a6:73:84:af:
26:ce:b0:c8:82:9b:fc:25:82:8f:1e:86:bb:df:1d:57:48:ef:
8f:18:de:dc:89:06:bf:cc:57:c1:6c:2e:b9:04:48:ff:76:1d:
ff:fc:db:b4:43:57:ad:74:df:31:e5:c2:0d:4c:23:6b:91:3e:
0e:75:4c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:40 2025 by rpki-client