Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier: YSlyOHJbnhezbKq1Qs/tLRWd48nOUlPTTifhy2Dt3QA=
Subject key identifier: 8A:82:90:10:C9:EE:A4:27:7D:5E:3D:3D:04:C5:46:84:AB:FB:FB:50
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 0198541F94C4982C07CDC43DB5F2EC11933A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 03:00:12 +0000
Manifest this update: Tue 29 Jul 2025 03:00:12 +0000
Manifest next update: Wed 30 Jul 2025 03:00:12 +0000
Files and hashes: 1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: s2XCsp80cqoW1yq1PJ7d7LuSDb3CoVon0cmTgfwtzcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:94:c4:98:2c:07:cd:c4:3d:b5:f2:ec:11:93:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Jul 29 03:00:12 2025 GMT
Not After : Jul 30 03:00:12 2025 GMT
Subject: CN=8a829010c9eea4277d5e3d3d04c54684abfbfb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:83:33:ea:1e:7b:5f:cf:32:ea:f5:ee:0d:
a8:da:4c:8b:df:1e:d4:41:ec:38:95:5c:40:68:01:
42:fa:2c:8e:14:e9:02:ad:e2:02:ae:be:2d:02:90:
4c:c8:20:cb:62:18:81:21:08:f5:a1:09:b8:72:5f:
24:3c:3c:bb:63:89:9b:84:5b:8f:40:62:4f:da:44:
fd:f6:31:66:fb:33:96:63:33:63:34:4b:a8:26:df:
88:d8:1d:e6:69:af:d8:02:98:77:7f:4c:05:3e:b7:
b2:0c:ac:cd:ee:c9:93:95:b4:1d:a9:d4:4d:1b:d0:
c9:1a:5d:3e:c5:84:b7:30:74:88:5d:e7:c5:75:1a:
1b:ee:b8:22:d6:71:e5:b2:e5:7a:59:7a:6f:39:e0:
0b:4e:8f:0d:bd:b4:ef:8d:57:28:bc:a9:be:1b:7e:
a0:2f:27:ec:e8:9f:40:94:2e:84:62:8e:78:c4:23:
72:72:46:cb:01:f9:b9:45:ef:e8:90:e2:df:2c:9f:
1d:5e:53:b6:4d:9e:a2:f9:3a:b6:bf:2c:d2:0f:1d:
df:57:fa:f0:b5:ce:dd:91:4c:87:53:e2:12:f5:29:
53:38:01:63:bd:0f:bc:c8:6a:88:41:62:69:6c:85:
06:29:c4:4b:65:76:36:76:10:b4:37:c1:23:5a:4d:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:90:10:C9:EE:A4:27:7D:5E:3D:3D:04:C5:46:84:AB:FB:FB:50
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:60:fb:8a:09:47:be:cd:46:ab:1b:3a:20:cd:30:d0:64:1b:
ce:e0:2b:76:ca:cf:98:26:16:01:1a:2b:0a:09:a7:4d:b2:c6:
ad:3f:6f:e3:32:ac:4e:4a:45:f3:74:59:14:48:6e:54:3a:e6:
2e:87:bc:8c:0d:a0:23:87:78:b3:03:9f:85:8d:e7:b5:92:e9:
19:c9:d1:fc:61:a3:fa:ce:c6:fa:3c:ff:f1:82:9a:f3:10:09:
ae:3e:ff:f0:71:ee:84:f6:77:94:42:7a:d8:fc:3f:17:43:66:
0d:9f:c4:de:c8:aa:e1:ba:20:22:b5:26:28:95:e2:9d:17:f7:
2c:b8:9c:98:d0:fb:df:8b:53:94:f7:a0:e4:80:ce:46:5d:81:
a2:b4:7b:2d:94:42:3d:fb:55:df:35:9e:22:9a:4c:67:e2:04:
43:a4:3b:5c:cb:32:e2:1d:70:80:a4:ee:3e:4e:99:b5:82:0e:
6b:a8:87:1f:fb:41:18:ba:a2:8d:36:bf:dd:82:f6:a9:2e:09:
f7:4c:11:d9:44:da:c0:a9:39:6d:ba:14:05:c0:11:7a:51:e2:
5d:74:64:38:5e:52:9b:d8:d7:0f:27:63:59:25:36:03:3f:c5:
a5:9f:f3:59:05:0d:45:1a:dc:d1:75:50:d4:1a:96:6c:86:8c:
d8:c9:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:17:42 2025 by rpki-client