Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: FqSLWUFpuIj2FHJPSfpdj43wZ7nvT7kJWA4bTBb7T04=
Subject key identifier: 36:EE:CA:C1:CE:42:63:40:35:EA:3C:2A:07:53:DD:9F:72:45:56:95
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 0198361684DBB886AF074860A93D360A68EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 15FF
Signing time: Wed 23 Jul 2025 07:01:42 +0000
Manifest this update: Wed 23 Jul 2025 07:01:42 +0000
Manifest next update: Thu 24 Jul 2025 07:01:42 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: /AHXrFcrZfzU6rry0UzLdiK+I3tab7tV4N+EpV63v2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:84:db:b8:86:af:07:48:60:a9:3d:36:0a:68:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Jul 23 07:01:42 2025 GMT
Not After : Jul 24 07:01:42 2025 GMT
Subject: CN=36eecac1ce42634035ea3c2a0753dd9f72455695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:4e:4c:62:d8:a1:64:fd:fe:f7:71:67:23:
0a:a3:8b:6e:5e:98:7b:96:bd:3d:69:5c:ea:15:2b:
a0:89:ca:e5:e4:6f:6c:b8:dd:4e:37:9a:3c:03:5d:
b4:aa:f6:1f:73:37:84:74:df:4c:0a:58:83:34:81:
48:46:ac:de:01:98:c7:a9:03:ad:f9:1d:89:b4:fb:
a0:5d:e5:1d:ce:f6:9d:d3:dd:ef:68:a2:b1:83:79:
5f:76:c8:90:0e:2d:26:0d:ad:86:40:b1:3b:7e:c0:
1d:3b:be:18:5b:03:fd:6e:df:27:46:b9:75:0a:84:
38:e0:db:82:d9:7c:59:e1:58:b8:97:47:fb:7b:9a:
1b:36:65:ec:cb:05:bc:ca:eb:bf:69:65:35:75:c5:
7f:9e:9a:69:85:8f:59:42:b8:d8:c4:32:d9:16:31:
1f:65:94:03:98:b0:54:14:95:e0:82:c9:60:68:46:
0c:75:e1:52:a3:07:08:a2:c2:43:bb:d0:c1:94:b4:
c4:a3:56:58:f8:e0:0f:2b:cd:8b:d8:e7:d7:fe:54:
ca:ac:63:04:c9:86:d0:cc:f8:98:0a:71:25:5f:15:
0d:9e:2e:c6:46:4c:bb:d1:90:79:0a:f9:f1:c8:0f:
e1:fa:9e:27:89:01:84:76:ba:31:88:f5:6f:ea:b2:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EE:CA:C1:CE:42:63:40:35:EA:3C:2A:07:53:DD:9F:72:45:56:95
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:36:8d:69:8c:ca:d2:03:de:c2:0b:2a:a6:55:4b:74:4d:de:
98:c7:b9:b4:a8:d5:f7:74:43:5b:8c:69:77:f5:3a:f6:b2:5f:
53:db:31:66:89:13:9e:ab:94:b3:4e:63:32:c6:88:5e:f0:7c:
7e:f3:ec:e5:e9:f3:96:0e:a3:0b:30:c9:e0:f3:a5:5d:06:a5:
e7:b3:6f:c1:bb:df:e6:75:02:30:f8:48:d1:b1:ed:d7:7b:d7:
4b:e6:dc:4b:b5:32:b0:d5:1c:2d:a8:e8:52:4f:f6:6f:3e:53:
f0:57:1d:54:52:3e:ff:b0:54:df:d6:5f:ab:ff:02:15:8f:67:
9a:a8:d1:90:f7:a3:c8:ef:cf:a7:97:61:ac:70:3a:76:10:11:
0b:05:e3:28:1c:d7:3b:fd:10:b2:4c:c9:1e:80:38:85:c7:a5:
b9:d9:24:69:75:ad:51:ba:31:87:9f:9c:7c:4f:1a:d3:03:83:
3e:4b:4c:11:04:5f:44:b9:fc:68:32:ab:79:28:7a:26:b8:93:
02:9d:70:8a:8d:46:06:d0:6a:18:92:43:34:b5:73:b1:bd:9c:
97:76:a8:2c:e1:c6:c3:22:d5:28:97:1e:b9:bd:31:c0:fa:8b:
a0:33:16:c4:a2:33:c7:ca:de:9c:c8:2e:33:ee:1e:e9:38:ec:
c6:59:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:36:46 2025 by rpki-client