Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: 8TQcEqum9r/92sV/ZxZsdpxAM1/EV3uMNVLa6Ehcp64=
Subject key identifier: C4:44:F0:A0:F9:06:AE:9E:DE:85:A4:30:5E:09:5A:F4:E5:ED:BE:07
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 01984AE5AAF8562D271CA7FFA9D979326ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 110A
Signing time: Sun 27 Jul 2025 08:00:22 +0000
Manifest this update: Sun 27 Jul 2025 08:00:22 +0000
Manifest next update: Mon 28 Jul 2025 08:00:22 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: ow/zn3EqbL+WotOLNvFG3UG3Ds0p1azgjDavfIXrE0M=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:aa:f8:56:2d:27:1c:a7:ff:a9:d9:79:32:6a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Jul 27 08:00:22 2025 GMT
Not After : Jul 28 08:00:22 2025 GMT
Subject: CN=c444f0a0f906ae9ede85a4305e095af4e5edbe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:80:2d:c8:c5:7f:ac:a7:f5:56:b3:c0:42:
a6:2a:cd:cd:b4:e1:51:18:df:d3:5b:45:58:f2:d8:
d9:19:82:82:c6:16:37:16:5c:52:24:f6:1b:3d:e7:
76:0b:67:e5:5b:37:3c:c3:1c:90:a5:ac:bc:05:90:
4a:7f:1e:34:02:bc:ed:b5:3e:d1:66:40:8a:31:92:
eb:e6:22:5f:e2:64:9e:c5:a3:8d:9d:3c:65:a3:a6:
52:bd:51:aa:8d:5f:21:4a:eb:4e:a7:d6:c2:78:5c:
21:70:ef:6a:22:4c:88:e7:40:0a:17:a2:0b:fd:00:
ea:69:9c:cf:bf:76:70:e2:89:1c:e4:4d:7b:49:f3:
67:bb:7a:29:0d:6c:60:b9:0b:96:39:dd:f8:56:03:
0b:76:b6:b8:02:06:c1:ef:da:46:82:cd:19:b4:50:
96:f5:60:a7:0f:88:b2:aa:6c:ac:d3:b4:20:82:1b:
bb:9b:ea:7d:48:77:69:05:87:46:d4:a8:00:35:78:
e1:c7:6b:3c:56:18:87:3a:2e:ae:65:4c:0f:03:7f:
db:12:ae:16:79:e0:8e:63:99:f7:84:f6:09:c1:a4:
a6:4c:a9:69:7b:30:be:fe:59:02:30:31:19:e1:d5:
a5:74:bc:d9:22:f3:ca:bc:1a:66:da:42:67:4a:b4:
52:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:F0:A0:F9:06:AE:9E:DE:85:A4:30:5E:09:5A:F4:E5:ED:BE:07
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4a:be:1b:1c:cd:c3:54:f9:8a:29:ba:76:96:d2:22:0c:2d:
8f:09:5f:77:72:2e:73:f5:08:21:37:26:f3:8f:87:f2:3c:1f:
d7:49:3d:c7:7d:59:3d:9e:f0:de:7c:58:62:9c:68:a0:8f:90:
08:8d:d2:92:7b:09:8d:0c:0f:11:b4:72:dd:30:72:91:2e:8c:
b0:e4:bd:95:3b:64:35:c1:16:dd:42:a5:af:05:9d:4c:00:07:
63:7b:62:a0:1f:87:c2:50:08:4a:8e:81:f4:a9:9f:18:f4:de:
51:f2:21:66:fc:b3:c1:06:f2:e0:43:b5:5c:2e:2d:22:bd:57:
a3:48:13:7a:86:6a:98:7c:06:ab:d0:5e:81:d1:2f:db:9f:4b:
20:5d:39:60:80:4e:6d:17:45:1a:1a:cc:4a:b3:ae:08:f2:68:
8c:12:b1:4d:0f:d4:96:48:48:a6:2a:5e:e2:12:53:8c:ba:60:
dd:91:10:74:16:da:0c:c0:42:97:c0:22:bf:8f:58:6b:f6:35:
bc:9e:59:7a:06:7b:87:66:70:40:0f:47:cb:e4:81:56:59:3a:
9b:7f:2b:77:15:20:17:8f:65:9d:44:ad:70:c2:c8:c6:cd:fc:
4a:3a:ca:b0:7d:62:6b:c6:e0:9d:c3:1e:12:c7:ea:63:97:44:
38:dc:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:26 2025 by rpki-client