Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: 6+6Sv099+owgt95M8nrfCdHRZnEpfEkvVQaElV2A1bU=
Subject key identifier: F0:5D:A3:86:7B:3C:68:07:80:DB:2D:3C:FB:C1:9D:5D:F9:E2:06:8F
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019853E9026A260FA84FFF8375A991C2764D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 118E
Signing time: Tue 29 Jul 2025 02:00:36 +0000
Manifest this update: Tue 29 Jul 2025 02:00:36 +0000
Manifest next update: Wed 30 Jul 2025 02:00:36 +0000
Files and hashes: 1: Y_LE7fqvC-DJjpGE04PAiZiS4sM.roa (hash: /iG8f1CjLF+Lu2JxpQ3C4TbNa9Jv5YP2v7PLHqXyCAI=)
2: kBfIeqAeKWivX1BBStYnhq8eQKY.roa (hash: 6hm3q6RVhanYeJb6ZfkoLkT3Ro77DzfwBMRFcvbLBuA=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: lpOSL/St103OgykHewrnShRkxHIk/LbZBaebKGoeZE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:02:6a:26:0f:a8:4f:ff:83:75:a9:91:c2:76:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Jul 29 02:00:36 2025 GMT
Not After : Jul 30 02:00:36 2025 GMT
Subject: CN=f05da3867b3c680780db2d3cfbc19d5df9e2068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:d0:c0:95:2b:b1:3f:1c:45:ff:1e:cf:fc:
ed:41:0c:f7:40:db:a5:01:92:d6:0e:a2:cd:b7:bf:
65:25:90:ce:9d:d0:ef:3f:71:21:57:2b:d3:f9:10:
e8:4d:05:e6:b2:98:0b:e9:2d:c2:c6:7f:72:8d:1e:
31:f7:65:ab:ab:0e:f1:46:45:df:3f:0f:29:1f:3a:
10:6c:9f:eb:b3:98:33:6c:b2:4b:2d:12:a5:b1:95:
c4:98:3a:1b:a8:81:6d:ea:b5:52:3e:67:31:ff:4c:
bf:12:99:13:dc:54:67:e0:0c:ea:af:e1:ab:89:22:
60:6a:a4:24:ea:52:4c:30:ff:b5:68:04:1d:b5:f6:
11:5c:37:7e:ff:1b:b1:d2:e7:e4:ed:37:8f:40:a6:
d1:6f:7c:df:62:ba:2c:9f:e5:69:bf:f2:96:10:2f:
09:89:fc:55:6d:94:0b:d3:8f:12:b8:47:ca:27:23:
16:0a:d3:b2:0f:fe:29:d8:30:b6:e3:44:7c:4c:bc:
7b:b3:38:10:73:b7:99:88:4a:e4:46:b1:ad:c9:16:
f5:64:d0:44:4f:69:96:e6:fd:a1:dd:c0:ab:a6:83:
71:51:29:9c:77:d4:58:d7:41:bb:05:b2:9f:87:19:
5f:45:25:07:de:91:72:bc:d3:a5:b2:d1:d9:ea:f4:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:A3:86:7B:3C:68:07:80:DB:2D:3C:FB:C1:9D:5D:F9:E2:06:8F
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d2:36:b3:24:5a:4b:1b:8c:0f:83:d3:42:a6:66:a3:4f:99:
87:54:97:4d:a5:d5:9e:dd:70:3b:63:c8:c6:d3:68:4b:b5:b8:
d6:c9:b6:65:4e:d3:5d:2e:f7:d6:1c:95:86:57:84:44:f5:3f:
a4:dc:8e:ad:b8:b2:34:b5:79:92:38:49:d8:8c:42:a6:ce:e7:
d4:2c:67:29:55:21:0d:aa:01:7e:77:61:fb:9a:99:91:d2:4e:
a2:7c:63:7b:99:b6:f5:29:0c:0b:ba:34:11:e5:bb:a2:59:34:
e4:ac:c6:0e:67:31:59:9b:0e:4b:f5:7a:ea:de:09:8d:e7:94:
14:f7:e9:93:67:16:fd:b5:82:e3:32:8a:5c:ba:31:ce:1d:48:
47:d1:51:08:dc:05:0f:f9:dd:ab:c4:ec:c2:fb:9a:40:e9:e7:
e1:5c:83:c4:f6:59:13:8a:0d:a8:f6:f7:66:25:aa:39:dc:6c:
e1:1b:a0:f6:ae:45:4f:ea:25:e8:7d:84:e4:f9:34:d7:84:b3:
e7:f2:b8:13:89:c0:bd:10:ce:06:f4:23:db:1d:37:86:48:9e:
62:08:7d:e6:78:28:27:ea:34:f8:dc:e6:a1:64:c2:b7:3c:f1:
a0:21:02:1f:21:0e:07:0d:d9:5d:d4:59:8a:bc:7d:db:44:a4:
9f:17:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:58 2025 by rpki-client