Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: pbaSSFE1tr0Ob9v0HjXUbxJDU2cV5hZ7J68UJDfUqrs=
Subject key identifier: 64:92:18:57:AF:F4:54:33:D1:D4:CB:D7:99:51:FD:40:8F:DD:9A:89
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 0198481B78172D5A2165ADEB7077695B0FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0CE7
Signing time: Sat 26 Jul 2025 19:00:16 +0000
Manifest this update: Sat 26 Jul 2025 19:00:16 +0000
Manifest next update: Sun 27 Jul 2025 19:00:16 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: kca/l0r+3Ti90numsTgyZk73S4rJhT9hEys0O3VIyhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:78:17:2d:5a:21:65:ad:eb:70:77:69:5b:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Jul 26 19:00:16 2025 GMT
Not After : Jul 27 19:00:16 2025 GMT
Subject: CN=64921857aff45433d1d4cbd79951fd408fdd9a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:1a:db:ef:00:0e:8d:10:c2:64:ea:83:0d:
f9:d5:01:fb:d7:39:19:0b:45:cc:9f:7c:d0:83:00:
ff:b5:b9:5f:ef:da:e6:cb:49:ee:30:34:ac:fb:f5:
aa:e5:65:1c:4c:5a:f5:9c:67:17:8b:15:3f:41:b9:
e6:ff:1d:40:72:9d:14:f9:0c:f2:ea:dd:04:10:ad:
e8:75:0e:90:18:ba:86:4a:50:e2:c0:f3:67:c2:42:
2f:ba:a1:2d:64:b9:39:6c:51:7f:09:1e:63:48:71:
aa:7f:9d:3f:26:57:c6:27:1a:de:3d:04:16:2b:ee:
96:c3:ab:87:b3:dc:9b:d6:f1:09:e4:ef:68:52:81:
eb:77:c0:72:e1:b2:ec:48:32:c5:e0:1b:e3:34:11:
69:dd:fb:78:d8:de:44:97:75:e2:28:4a:88:bd:28:
d6:3d:48:71:65:4d:95:35:7b:8b:c7:93:68:58:91:
74:f6:32:30:d0:a4:6e:d4:61:93:f1:a0:25:cf:f5:
9c:e9:4a:d8:80:2c:8a:06:cf:90:c2:26:10:f7:f6:
7b:15:7b:c5:7d:80:32:be:07:28:c4:47:85:94:0c:
ba:d9:78:33:81:cf:49:c5:be:75:d0:84:e8:3a:ae:
45:c1:b8:e3:ee:c5:dd:cd:b9:10:82:2a:28:69:23:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:18:57:AF:F4:54:33:D1:D4:CB:D7:99:51:FD:40:8F:DD:9A:89
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:24:23:00:d8:fc:72:3f:a5:bd:bb:b9:01:63:24:d4:a6:88:
98:09:93:f9:a3:df:d8:d9:9f:7a:13:50:c5:9f:e9:1d:35:26:
50:b3:da:c0:ca:ae:9a:a0:5b:a7:ff:31:2c:0e:c9:94:45:54:
4e:bc:86:14:6a:86:fb:d1:c8:9d:db:a4:9a:49:b0:df:54:87:
8a:fa:fe:97:53:71:25:77:aa:3d:9f:b6:e6:14:37:8c:e7:60:
00:0f:80:e3:5f:32:ca:7e:cb:e4:2c:05:90:0d:f5:f6:ab:93:
39:f9:8a:6d:e1:bd:0e:48:8b:22:ae:ad:36:69:c4:b3:71:8e:
e8:41:42:72:ad:6f:7e:f3:ae:9b:5a:fb:5e:2e:76:aa:4a:8b:
82:e5:d6:47:ce:db:8b:12:a2:6f:ec:d6:b2:f4:f2:2a:49:ba:
aa:75:2f:88:79:29:e6:7f:6e:8e:b7:98:95:8d:d1:39:b1:c7:
ab:7c:91:53:b2:38:75:b7:e5:28:b8:dd:cb:3d:b8:40:57:7f:
fc:08:d5:46:f3:b8:f3:ea:bc:7e:1f:f7:6a:92:a3:61:93:e5:
f3:73:4a:f2:d1:16:c2:10:0b:18:73:0b:69:c9:02:14:62:cf:
6a:f7:af:9d:30:15:cd:62:43:6a:16:41:ec:93:f0:d2:d2:6d:
4c:34:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:16 2025 by rpki-client