Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json)
Hash identifier: Rn9hpRrxwSA3TPEbOcTY5IgO0NZMASd6vru6iryTzRo=
Subject key identifier: 90:24:1B:8C:A5:AF:29:FA:A7:03:01:E9:49:7A:5C:CD:4A:BF:6E:D0
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 0198499C6B0F7251DEFC2FFC1E1821811323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: Ic1eoHPYNdLRNXWY+oCwmQohyImRZLWYl76bm8TQiGw=)
2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6b:0f:72:51:de:fc:2f:fc:1e:18:21:81:13:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=90241b8ca5af29faa70301e9497a5ccd4abf6ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:7a:24:0e:25:dd:93:84:10:30:69:96:8f:
9c:ef:35:f5:94:f4:a4:d4:f1:dc:82:a1:9f:dd:65:
15:99:3c:d9:cf:58:15:22:fd:a8:f7:a2:ea:7f:30:
d2:a1:9e:a4:d8:25:0f:e3:31:87:26:06:d0:d2:a6:
ab:7d:48:33:fe:de:dd:bc:16:58:26:17:cd:82:ab:
63:3f:c3:21:3a:cc:2a:d6:2c:92:61:e8:31:b7:a6:
64:bc:b5:0e:31:50:b0:e6:41:5d:7a:83:f5:70:95:
c5:43:0c:29:4c:01:2f:87:ec:c8:7b:84:09:1f:75:
59:2f:85:25:d8:ee:e7:d8:ad:57:a2:07:96:d0:f1:
bc:70:44:d1:c2:50:21:61:f8:93:3f:32:aa:5b:20:
c5:c6:00:3b:a3:ea:98:d3:ea:22:fe:a0:0e:9f:66:
9e:39:4d:cd:26:c8:04:f5:a2:4d:86:ae:2d:1d:e1:
2a:cb:de:82:33:08:5d:74:7b:f9:0f:46:54:ac:7e:
f6:b6:91:e7:ed:78:4d:fa:9e:84:28:3f:0f:c4:a1:
51:c3:59:f6:9d:c1:1f:2b:0e:af:c6:9c:43:b3:2f:
aa:06:ed:dc:f7:ea:02:1e:27:00:7f:c9:66:f1:10:
ae:01:bd:0c:f4:3c:98:f9:f5:1b:7d:11:ca:60:fa:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:24:1B:8C:A5:AF:29:FA:A7:03:01:E9:49:7A:5C:CD:4A:BF:6E:D0
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c9:b3:32:6d:db:b9:d7:95:1c:9e:f8:12:ad:ab:d0:d4:0e:
06:38:69:7c:74:ae:ab:b7:26:35:18:3a:10:f8:fa:80:66:f1:
0c:3b:82:18:05:7d:72:29:89:4c:e2:43:cf:87:4b:8a:79:cb:
65:ac:9d:14:4b:f9:8a:ab:16:45:65:f3:d9:9b:dc:2b:52:63:
a6:77:50:d9:00:be:cc:d4:0d:83:5f:3d:1b:c9:92:d3:8a:ef:
6f:9b:54:5a:a2:8a:8c:b6:62:02:50:a0:4c:0a:e1:55:11:00:
c6:dc:4a:1c:b4:40:5b:ba:ff:87:4c:24:67:1f:46:70:f5:71:
9a:64:d2:1c:d9:95:2d:84:e4:d7:e4:8a:0e:d3:b6:ee:8f:8f:
be:9d:f1:e4:d1:b4:a0:5d:73:0d:ac:58:99:4e:6a:55:62:aa:
67:a5:d9:8d:ae:f4:09:79:80:ee:08:73:75:94:d7:be:d2:9e:
90:27:5b:d1:76:e6:86:45:75:33:b7:8f:c2:45:ed:98:4a:b6:
c7:44:4e:b9:eb:4a:27:6d:ce:90:f0:1c:25:f0:79:73:a6:ad:
b1:c1:fb:10:a7:5f:bb:9d:73:48:44:e8:36:4a:55:4f:d9:24:
e1:ae:de:53:6a:b6:c7:eb:6b:3d:ed:31:41:9c:58:09:ae:d7:
c7:ee:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:43 2025 by rpki-client