Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: JOCdN8vayFJEsW+5UXkO8UK747czCqgTdBAN+NkDGYw=
Subject key identifier: 25:D7:37:DE:49:C6:4C:D9:4E:81:DB:A8:E9:2D:BC:88:81:72:4F:C4
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 01984A40E769AC548842C5FB5652AEFD23A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 05:00:24 +0000
Manifest this update: Sun 27 Jul 2025 05:00:24 +0000
Manifest next update: Mon 28 Jul 2025 05:00:24 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: KgkqyOq8qU9O69+3W18ZdLXnKXCbSCA7fjcnQv9LMpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:e7:69:ac:54:88:42:c5:fb:56:52:ae:fd:23:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Jul 27 05:00:24 2025 GMT
Not After : Jul 28 05:00:24 2025 GMT
Subject: CN=25d737de49c64cd94e81dba8e92dbc8881724fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:72:d6:4f:bf:b8:54:39:19:36:89:c8:11:
b8:12:b5:b7:db:81:ba:71:7a:ca:a8:f2:af:51:75:
73:79:b0:59:8b:82:a6:e2:14:8c:ba:73:59:06:b3:
90:8c:d7:39:f4:a3:1a:f5:12:52:7b:63:f8:65:45:
2b:aa:6a:13:67:0d:d2:17:fa:a7:cf:01:ec:90:5e:
2d:09:43:84:cf:d0:7b:fd:26:03:31:19:1c:72:d6:
2b:07:84:45:1e:03:1d:a0:0f:6e:4f:cf:92:96:ae:
6f:7d:e1:62:e9:00:94:77:1f:28:20:62:c7:47:17:
d1:bb:e4:2d:57:d4:f7:31:d3:cd:e9:b7:29:8a:18:
b9:c1:55:7e:ab:90:95:eb:58:1c:89:b1:9c:e1:c1:
7d:b1:48:35:f9:03:26:ed:e9:84:a2:71:ce:95:03:
41:35:cf:71:f8:8a:a7:23:5e:6d:61:cb:aa:e8:91:
c7:1a:ab:3d:94:a8:65:4e:45:20:df:35:e5:75:15:
74:b0:93:2e:8e:2e:9f:79:22:07:8d:f4:56:2b:98:
ff:41:23:40:22:e9:11:3f:6d:5c:e0:60:ba:1b:a6:
c8:25:14:e2:79:16:69:fb:96:f6:b4:2a:d7:ea:bd:
6d:25:9f:42:72:16:ff:39:65:93:4e:63:b6:62:31:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:37:DE:49:C6:4C:D9:4E:81:DB:A8:E9:2D:BC:88:81:72:4F:C4
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:bb:ee:9c:1d:2f:09:de:2e:97:71:4a:b6:c9:67:17:b0:cd:
3b:b5:59:b7:ac:bd:77:83:94:3a:4e:3b:44:a4:12:26:05:5b:
7a:95:9e:51:7c:f9:e3:b4:13:de:8c:47:9c:10:f6:31:fd:97:
3d:3f:32:55:36:6c:05:8b:0b:cd:8a:13:a1:b8:25:2d:56:7a:
ec:f7:77:93:60:7a:59:de:79:bf:7b:bb:1b:4a:02:98:e1:a4:
6e:02:b3:6d:a5:a9:b9:9a:76:41:30:10:be:b0:cc:e6:50:5a:
93:fc:49:bb:10:b1:ac:8d:67:02:18:fe:89:86:1b:03:00:0a:
58:86:f0:fd:23:83:a0:8c:0c:eb:c4:99:a3:5b:34:7e:d6:1e:
40:94:fc:86:e4:fb:db:51:78:3b:46:fc:9e:44:5c:21:ef:65:
61:4f:cb:70:dd:93:aa:6e:07:a4:01:01:2d:15:9b:52:2f:7e:
f0:b8:3a:d1:c7:07:3a:e9:0b:40:0f:e5:5b:ce:c4:ca:3e:d0:
d0:b6:44:bf:86:e8:93:85:83:99:ce:7d:89:b2:29:9f:0e:01:
ab:05:9b:a5:e0:c7:ba:23:bf:d2:02:7d:ed:c5:e9:1b:dd:16:
aa:6d:af:a9:99:7d:34:49:ac:5c:36:8e:01:2c:6c:af:3d:98:
a8:79:72:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:23 2025 by rpki-client