Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: CU9SCN9hS4/WOExGesYXdX/dw8yzxB3+FScTNDH8+NE=
Subject key identifier: C0:B8:44:D5:EF:85:42:CD:7A:45:03:5D:A3:4C:23:8F:5A:58:48:EE
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 019853442E18053061C477278841E52ABCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 12BF
Signing time: Mon 28 Jul 2025 23:00:33 +0000
Manifest this update: Mon 28 Jul 2025 23:00:33 +0000
Manifest next update: Tue 29 Jul 2025 23:00:33 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: SNYt/Hr29lXhaV4ImlA8jsOii63+7T8Cr0dk9rJoYzo=)
2: TH3iTyQHdiPtwrxen-ik0aBRXKI.roa (hash: 9e3J8Nl+Dc6K9RH7KE3BYQUYhRYoAJ/tNPR6z9IBOhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:2e:18:05:30:61:c4:77:27:88:41:e5:2a:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Jul 28 23:00:33 2025 GMT
Not After : Jul 29 23:00:33 2025 GMT
Subject: CN=c0b844d5ef8542cd7a45035da34c238f5a5848ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:51:b7:92:b4:a1:df:e6:d1:49:e7:93:59:
2c:0c:60:e5:d3:32:86:92:2c:79:f4:35:15:05:82:
4a:8a:10:81:47:a6:23:bf:22:7f:88:6e:28:f9:53:
a4:f9:ca:26:0b:c1:33:70:8b:26:67:58:0f:f0:d8:
e3:95:a0:1e:50:23:c2:9b:ea:79:84:ac:66:ef:8e:
a3:db:4a:ad:a0:2c:1e:ec:d4:7f:0b:72:b0:69:8b:
a5:35:06:f7:7c:41:f9:23:4d:22:67:0d:26:bb:9e:
c0:14:db:8a:d6:18:ea:f1:d1:5d:66:33:2b:67:8e:
d0:bf:f3:87:a6:29:ad:86:f1:a4:71:24:14:9b:24:
49:af:f6:e6:ab:81:43:fe:96:92:e1:fb:d3:9f:6e:
0d:a7:e8:11:1d:19:dc:8f:7f:8a:78:01:11:da:9d:
76:1c:db:bb:d6:c7:21:d1:e0:a4:67:9f:4f:67:a7:
44:20:59:80:42:e4:b8:47:fd:9c:58:01:5b:48:32:
bd:30:53:2d:6c:13:b8:f7:7b:ac:5b:de:33:1c:4f:
04:07:3e:9e:89:1c:5d:db:68:d3:05:65:c2:04:42:
c2:d1:e3:a5:fb:4b:1e:74:d0:f8:5e:be:18:77:f4:
e0:86:fc:ac:80:53:aa:11:5d:32:c2:ad:e8:e8:50:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B8:44:D5:EF:85:42:CD:7A:45:03:5D:A3:4C:23:8F:5A:58:48:EE
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c5:4e:e4:df:dc:10:1d:76:3a:89:51:33:fe:68:7b:b5:22:
86:ba:00:a8:15:81:95:2b:b1:17:49:72:c4:d4:e5:c1:64:69:
58:0e:d6:3f:1d:73:52:cf:f7:20:3a:90:cd:f8:7e:12:2e:95:
89:44:e2:92:b1:9a:0c:91:b4:b5:89:42:f0:42:2e:2e:86:0e:
ee:88:29:04:5f:ea:c8:56:49:9a:14:e8:7a:f0:4d:5f:8b:dc:
fc:fc:af:5f:7a:f9:38:5d:32:7b:b2:a5:13:66:a7:72:f3:2c:
3c:40:f8:47:21:04:08:54:1d:fa:f4:a8:53:1f:d6:6b:b6:fc:
5f:2b:6b:4c:d3:2e:b2:83:0c:72:63:38:e6:6e:12:94:85:87:
f9:f8:2c:22:58:94:ca:aa:50:1f:36:79:17:f2:ae:6d:03:d1:
f3:67:59:fd:30:22:e9:c6:cb:89:b5:e4:f0:47:cd:5c:61:59:
e2:55:1d:11:55:34:d8:9d:c9:ab:e1:0e:71:d7:ce:f0:e5:cb:
03:a2:05:13:6d:b6:bf:9f:f6:12:54:42:83:6e:cb:3c:d3:c6:
06:9c:b0:ea:5b:a8:30:1f:a4:8b:54:90:32:3e:a8:57:08:5e:
1f:20:88:9c:ff:1f:d0:76:7a:c8:87:50:8f:06:2d:2c:26:b6:
b7:b6:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:32 2025 by rpki-client