Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: Eryg8EXf6qKJSVJz8caf4lIl+YzRPJ0SbEtDMS2xUAY=
Subject key identifier: 12:CD:CC:2C:EC:BA:E0:76:E8:F4:67:6F:66:0F:E9:77:59:A0:72:E7
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 01984964F8BAE538AC4C5BE0741782E37336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 042F
Signing time: Sun 27 Jul 2025 01:00:10 +0000
Manifest this update: Sun 27 Jul 2025 01:00:10 +0000
Manifest next update: Mon 28 Jul 2025 01:00:10 +0000
Files and hashes: 1: R0bDzTZMsFHuXIVscoarjoJ_wTM.roa (hash: 9HD9aEc03IRoCnCCjg3LQXd12HLkqdNv34Xu2fVDTFY=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: aJGZDqBDCVIiecs5w0Xf6UguL19wLz+s1m6IhC/oI6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f8:ba:e5:38:ac:4c:5b:e0:74:17:82:e3:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Jul 27 01:00:10 2025 GMT
Not After : Jul 28 01:00:10 2025 GMT
Subject: CN=12cdcc2cecbae076e8f4676f660fe97759a072e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:db:84:e0:66:62:30:22:10:35:84:d0:d0:34:
37:44:ca:e9:ad:23:26:23:f2:b7:2b:d0:3d:60:cd:
b3:7e:01:17:5c:49:6e:6d:db:7d:fc:f6:0c:d1:e9:
ce:a1:96:2f:f1:5e:03:73:d6:88:4a:51:7a:c0:e8:
85:1b:4d:b5:7b:4e:df:08:3a:64:1e:5e:8c:f6:33:
38:b1:59:f5:c5:88:d5:71:c6:74:e9:47:dc:66:93:
19:3a:f8:5a:d4:ef:45:90:57:01:38:4a:0e:de:8a:
3b:d2:32:b9:44:1a:6b:53:3f:5d:eb:01:b3:a1:d4:
7f:a7:6b:97:8c:af:fe:57:61:b9:da:18:80:69:3b:
ff:1d:91:65:2a:43:3c:91:72:0f:16:c8:28:49:ea:
e9:af:36:05:d6:d7:8b:4d:84:13:96:02:5d:b1:34:
4c:00:f2:ba:e7:79:b2:6a:04:4f:3d:e2:14:ad:3c:
11:a5:28:de:1b:e9:13:dd:26:01:0b:e2:d2:05:37:
bb:66:b2:2e:31:7b:18:43:a6:d9:65:6a:47:78:66:
62:6b:e6:ab:d0:f1:fa:49:2f:4f:04:32:b4:38:66:
56:4c:27:4c:74:50:ff:2e:04:6b:bc:6d:74:41:12:
bc:dd:b6:f7:6e:69:f2:68:c0:d3:76:c2:f8:bf:ea:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CD:CC:2C:EC:BA:E0:76:E8:F4:67:6F:66:0F:E9:77:59:A0:72:E7
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:9d:18:4c:3d:d5:3f:6a:bf:47:65:62:f3:59:0a:8f:99:
f1:3d:a0:ca:6e:9d:4c:71:7e:12:06:f0:06:b8:9b:fd:f2:81:
c9:7f:fb:2d:46:41:a9:34:d4:d6:ec:05:17:36:f6:09:04:2d:
dc:72:9e:18:b1:a9:4a:76:d0:2d:53:ae:46:27:b2:8f:4e:ad:
69:55:74:60:6e:72:aa:fa:a8:98:ee:10:ed:08:81:fe:ff:b0:
52:55:ca:e0:23:fc:91:78:6f:dd:68:dd:92:36:23:c2:78:f9:
0d:89:e3:71:b2:9d:29:4b:7b:2b:9f:d2:16:fc:27:92:b7:cb:
61:b9:62:e0:b2:a1:68:39:c0:0a:33:e2:15:1a:95:9a:67:36:
89:d7:bc:45:48:9a:46:b4:f1:b5:c8:9f:f8:02:4c:da:3a:e4:
2e:71:e2:01:a8:20:ec:14:56:ac:db:20:9a:87:4c:bc:cc:74:
1c:01:4c:4e:cd:9f:e6:54:d6:9b:13:d8:31:90:dc:5b:f1:be:
56:b4:54:45:6b:be:5f:08:7f:cd:49:e4:e2:c3:37:6d:69:a2:
a5:d8:c7:b3:5a:f3:66:7d:d4:6f:73:bc:ef:54:78:ec:bc:b6:
73:8c:89:e7:4f:f3:a9:0f:93:dc:13:28:32:e3:a1:af:64:68:
2a:5f:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:42 2025 by rpki-client