Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: M9WWT/io3dTZP/TPSbmFsbbHjfNOPVZi+dVEZ3gRnx4=
Subject key identifier: 6F:37:D9:CB:73:3B:EA:F0:5F:6F:3E:06:58:36:45:9F:45:7F:A5:AF
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 019846D1D2AA8528CD69F5FC69AB8444AF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 10DD
Signing time: Sat 26 Jul 2025 13:00:12 +0000
Manifest this update: Sat 26 Jul 2025 13:00:12 +0000
Manifest next update: Sun 27 Jul 2025 13:00:12 +0000
Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: jL6VYHvMU7cIqcCDi1oFFo5Gwz7GKT+1Ny/+k1O9W+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:d2:aa:85:28:cd:69:f5:fc:69:ab:84:44:af:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Jul 26 13:00:12 2025 GMT
Not After : Jul 27 13:00:12 2025 GMT
Subject: CN=6f37d9cb733beaf05f6f3e065836459f457fa5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:d5:37:46:a6:d6:c9:e4:ab:95:98:30:a3:
6f:51:68:83:c0:1d:a5:fd:31:ec:30:7a:d8:0b:19:
b6:4f:0c:ff:d2:17:5d:ca:b5:ee:4e:13:20:b9:ba:
9e:27:69:53:53:b2:05:9d:a3:0a:74:c4:a9:b4:f9:
f4:ff:02:3d:b0:a6:52:cf:f1:4c:37:69:48:c4:5d:
9e:d0:89:33:08:24:a5:1d:18:f2:5e:34:95:36:85:
5b:f9:f0:11:00:0b:ee:72:6e:96:31:8d:9e:30:0f:
c1:b0:da:4b:d9:6c:41:fe:7c:ba:b0:4c:fe:53:e1:
66:95:78:42:d8:ad:42:9c:e9:53:4f:14:d6:c8:f4:
90:e4:f7:08:a8:f8:af:e7:50:67:de:48:f3:0d:8f:
eb:2f:3c:79:73:26:f1:31:1d:29:bf:de:7a:6b:fb:
a2:57:41:46:f7:66:b5:c3:5e:6e:97:46:09:77:2e:
5e:8e:b6:e1:16:d6:c6:88:a0:02:c5:bf:6c:4e:57:
65:9b:bf:d6:64:af:40:e1:fc:87:de:6e:60:79:08:
3c:a5:2d:f5:58:ef:9e:a3:53:31:c8:3a:d2:93:9a:
09:27:4a:c7:b4:7d:9c:c1:a8:da:7d:dc:8f:87:e7:
3c:9b:01:b0:3d:ea:3d:54:24:7b:39:9d:33:e1:e2:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:37:D9:CB:73:3B:EA:F0:5F:6F:3E:06:58:36:45:9F:45:7F:A5:AF
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ce:16:58:a7:eb:a3:c4:c2:a6:28:1f:a0:dc:2b:f9:bb:84:
d0:88:a2:02:5e:ba:59:29:60:da:25:6d:93:55:00:84:89:3f:
ef:bd:df:7f:60:28:ee:8d:9f:30:5e:e7:42:98:ef:c6:1c:70:
4e:bb:1d:10:e6:98:50:6b:1b:7f:db:e8:20:1b:ba:ba:f2:4a:
34:70:b7:d7:bb:98:82:9c:90:1a:b1:7e:9f:ac:9a:b1:fc:33:
6e:89:98:e9:80:74:8f:16:03:3a:58:52:81:27:17:64:b9:65:
10:ce:3a:c5:0f:63:d7:82:3e:46:8a:f6:d0:c4:9c:e7:12:bc:
19:19:59:f9:1a:fe:27:e3:56:24:66:b0:f4:7f:18:80:ec:3c:
35:0a:49:27:fe:cf:06:50:78:0c:53:d8:68:f1:8a:a3:43:80:
47:a9:c1:48:80:3e:e1:29:61:6a:d8:ba:8f:2b:53:bc:fe:99:
ab:d4:2a:14:0e:2e:51:3c:d8:fb:13:ea:45:f3:eb:db:8d:31:
e8:48:f1:ea:74:13:04:3d:99:79:09:e2:ee:05:ff:d6:f2:de:
66:fa:73:4a:d7:b6:d1:36:14:46:15:05:d7:6a:41:8e:7c:55:
ce:44:83:75:b8:2e:54:6e:8c:ce:f4:be:17:f5:38:b1:5b:77:
85:c0:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:46:01 2025 by rpki-client