Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: UXa5I2iSADOrf4Rj8q/iluS1AzyuL9zD9UliPfkZyCM=
Subject key identifier: 23:57:1A:F6:24:90:E1:0B:5C:98:AD:C7:7A:0C:31:0B:91:BC:55:C8
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 019854FC659A2AB2B04397824DF8C261B238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1352
Signing time: Tue 29 Jul 2025 07:01:23 +0000
Manifest this update: Tue 29 Jul 2025 07:01:23 +0000
Manifest next update: Wed 30 Jul 2025 07:01:23 +0000
Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: eybz+i4QNbUlOzmQAAsmhNG1q3Lr907sPeD2mr0ukHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:65:9a:2a:b2:b0:43:97:82:4d:f8:c2:61:b2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Jul 29 07:01:23 2025 GMT
Not After : Jul 30 07:01:23 2025 GMT
Subject: CN=23571af62490e10b5c98adc77a0c310b91bc55c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:d4:a0:05:0b:8d:3d:dc:b9:66:c4:56:5b:
6a:8d:56:01:ce:37:69:b8:aa:14:fb:1d:0a:2e:18:
4a:e2:c0:0d:35:6d:6e:83:0d:4a:27:f4:01:1e:a8:
7d:37:ff:86:8e:54:4c:78:a4:8a:9e:ec:23:12:af:
05:96:48:93:14:3f:59:9c:17:aa:8b:52:e3:63:ac:
8c:dd:5a:dd:96:a2:76:7c:73:9d:bc:2e:66:00:39:
57:5a:62:be:28:8f:1f:43:64:62:54:93:10:7b:83:
e0:a3:cc:5f:a4:1d:15:ad:ed:1c:e0:e1:89:1a:92:
13:75:d2:a9:4e:f2:23:1e:b8:1a:ee:23:a5:dd:a4:
cf:e3:00:7a:fc:79:b2:7f:b4:d6:fc:8d:32:d0:44:
00:50:70:c4:0d:e1:2e:68:d2:83:15:79:3d:7c:a2:
74:61:a2:5e:f0:30:d1:63:d6:13:98:6b:76:83:11:
f7:cc:07:36:57:ff:89:b5:e1:c4:58:11:86:b3:e9:
75:6c:20:61:10:0d:2f:5e:88:40:1a:4e:51:fe:eb:
c0:48:e7:3f:7d:ab:85:ce:19:11:05:32:ae:ad:d4:
c4:9e:b9:a9:0d:89:f1:dc:c6:e4:6c:26:a5:89:7e:
a6:93:95:96:cc:b7:d2:0f:b1:c7:4b:b3:c5:b1:7a:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:1A:F6:24:90:E1:0B:5C:98:AD:C7:7A:0C:31:0B:91:BC:55:C8
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fd:ee:9a:56:75:cc:9d:0b:d3:a4:b6:c4:49:a5:50:00:16:
dc:95:6d:33:24:ea:a0:cb:e5:f9:79:bf:25:ed:d9:32:55:ef:
e7:2c:14:09:d1:f1:ce:2b:a5:fe:5c:56:4b:b5:15:9e:94:88:
30:af:be:b7:ef:e4:db:74:d3:4b:8b:f8:6e:c5:8f:10:c1:88:
39:75:02:c4:e4:2c:79:a1:1c:66:35:33:2b:f4:78:67:d5:71:
2e:61:b3:3e:19:24:ce:b9:dd:9d:c6:c0:d0:f0:32:15:41:4c:
fa:e6:18:c1:19:84:10:6f:83:89:42:b0:4d:76:b0:a8:fd:c7:
fd:32:f7:15:8c:17:3c:7e:14:fa:10:d0:51:7b:ad:55:93:4c:
23:c6:bc:22:e7:08:04:62:c5:93:5a:e0:49:da:2a:be:ea:7b:
27:0f:70:2e:d0:24:89:bc:6d:20:6d:38:f2:85:d6:35:81:24:
0e:40:e6:bf:0c:19:c9:67:f9:ea:95:b0:ce:d2:c5:2c:2d:b7:
37:85:98:5d:ed:3a:4e:a0:bd:17:e3:4e:ff:54:99:6a:81:20:
59:d5:2e:d0:71:6e:2e:66:ca:c6:ef:9c:46:09:16:a4:69:87:
a0:d1:92:68:8e:bb:01:e4:9a:ed:6d:48:11:a9:9e:8d:82:a3:
c1:3e:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:47:17 2025 by rpki-client