Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: efXfs4ZNha6B/FdTDnGgxqm4a4IQZ5CaOOVMZVHtEZk=
Subject key identifier: 99:17:01:0D:96:0E:A4:FE:30:0D:45:B2:F6:1E:E3:A3:B2:AC:32:83
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019827B542332B21BBCCEFAC8F1190F83C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1593
Signing time: Sun 20 Jul 2025 12:00:46 +0000
Manifest this update: Sun 20 Jul 2025 12:00:46 +0000
Manifest next update: Mon 21 Jul 2025 12:00:46 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: bOMi8zjWi8zg6/ab81dvGuiScvxfgkyyqIgxEG8refo=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:42:33:2b:21:bb:cc:ef:ac:8f:11:90:f8:3c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jul 20 12:00:46 2025 GMT
Not After : Jul 21 12:00:46 2025 GMT
Subject: CN=9917010d960ea4fe300d45b2f61ee3a3b2ac3283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:db:a1:03:bb:74:c4:ee:32:1c:ff:0f:09:
a4:a6:5d:fa:1f:0c:1f:3d:22:44:6a:51:f8:25:7d:
19:ae:ea:f3:a0:c0:0d:71:0c:8d:8d:25:9e:af:76:
ac:a3:a3:f2:37:b1:58:f6:f0:aa:52:c6:dd:88:5a:
d6:1b:a2:89:d2:b0:76:c6:86:b5:0b:4a:c4:7e:98:
67:46:f5:37:05:55:bd:d0:bd:6e:69:0f:8c:f7:0a:
c7:74:5f:c1:9a:d9:10:9d:18:85:0e:1e:83:7f:59:
d6:1a:6b:19:56:8d:93:7f:9c:c4:51:20:d4:fe:3a:
87:b3:af:85:52:cc:fb:15:48:6f:66:a1:4e:98:f6:
4e:c9:bf:4d:10:c0:fe:ac:97:c2:b3:d4:93:bc:2d:
95:65:a2:5d:f7:83:a2:a9:57:19:17:aa:28:80:23:
a8:83:47:ab:fe:e0:ae:54:36:ae:16:91:f1:ed:67:
65:5d:c7:48:51:92:d1:02:70:dd:cf:b7:cf:d1:f0:
e6:86:ac:d8:27:1a:b3:35:93:73:1d:ee:c2:60:17:
e6:c5:90:94:ba:3a:80:54:63:c0:2f:bc:ea:a6:33:
db:c7:8d:0a:2c:17:3a:3e:e8:66:3d:65:bd:7b:df:
2b:2e:e1:4a:0f:bf:9b:ca:85:da:51:d7:20:24:83:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:01:0D:96:0E:A4:FE:30:0D:45:B2:F6:1E:E3:A3:B2:AC:32:83
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:26:e9:a7:71:ed:53:84:be:03:80:ea:de:89:48:16:01:dc:
3d:70:61:c4:68:71:71:bd:bd:2b:fb:d8:4e:e5:33:3e:c1:9b:
1b:ae:40:a0:31:02:95:ee:a0:a8:9c:2e:e6:13:c9:37:bd:32:
3c:d5:18:4e:fa:54:58:75:a4:d6:5b:8f:ee:57:b5:a6:c9:a3:
f8:bd:88:6b:d9:97:4b:c9:16:56:48:7b:8e:a8:b6:28:66:86:
a5:70:e5:8e:74:5f:f1:33:ba:9b:14:5d:fd:f3:ee:ee:e6:23:
15:91:3e:cb:67:db:3d:a7:5f:d9:a3:39:4f:d3:d7:be:a4:14:
ec:5a:9e:56:52:37:96:08:c9:f2:b3:fb:03:d1:8a:b4:47:96:
a1:bf:5d:0c:a2:ac:85:ec:3a:09:39:4f:47:8d:1f:28:89:68:
a9:bf:80:cd:22:61:1e:b5:6d:84:84:de:a0:b0:e2:dd:95:d9:
4e:2f:d1:c0:e9:f1:7c:ec:de:05:4d:21:3c:e2:7e:ba:2a:14:
4b:3b:72:a6:4e:e0:7d:7e:6b:80:89:ba:d4:3a:67:77:45:f3:
9c:d2:6c:6f:d7:42:30:c8:25:2b:17:1e:95:d0:d0:90:5a:95:
87:a3:bb:0e:f3:bb:0a:8d:67:68:b3:24:03:9b:cb:21:ed:97:
62:42:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:31:52 2025 by rpki-client