Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: JUiDrFX7DzGLkyFedGG+y6/ZTmoUzVUrPPt+zfYmoUc=
Subject key identifier: 3E:45:ED:16:81:D6:15:0F:F1:2F:02:AF:CA:30:DB:2C:6A:72:51:41
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 01984250B99CC62D44D3A8B181026253F843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 165E
Signing time: Fri 25 Jul 2025 16:00:43 +0000
Manifest this update: Fri 25 Jul 2025 16:00:43 +0000
Manifest next update: Sat 26 Jul 2025 16:00:43 +0000
Files and hashes: 1: B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa (hash: towVudD3ZHXUrLOMltR/8PyVnF7v/kv+y5JbOeuwBgs=)
2: QIAcGzg1E-mkwGlMwIaZKUybW5U.roa (hash: vPFlVcoFxwCs0hnXKdVw9v7+IGUFGVEz3iANXdrxvec=)
3: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: oH3KzzNkkei1+cRsyySUQ+RQJC3VtSbBSU185l2bGG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:b9:9c:c6:2d:44:d3:a8:b1:81:02:62:53:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jul 25 16:00:43 2025 GMT
Not After : Jul 26 16:00:43 2025 GMT
Subject: CN=3e45ed1681d6150ff12f02afca30db2c6a725141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:e0:dd:49:38:72:8c:ae:a5:e7:78:80:df:
ac:58:b2:3d:da:d9:7e:fe:3a:67:c2:e3:de:30:ed:
c8:e5:c4:d2:fa:cc:e2:91:94:88:ed:90:57:13:65:
6e:3a:8a:65:6b:cc:b3:5c:e5:d5:b6:3f:1c:37:c2:
77:ef:37:20:46:95:b0:27:1c:fc:d5:9e:9f:0d:24:
7a:29:0c:d2:82:27:e2:53:58:9a:ac:c6:c4:cd:de:
87:1a:ab:18:b4:eb:f4:ed:b6:af:c8:a9:8a:c2:e0:
47:60:80:89:c4:82:1a:7c:92:d6:6a:ab:db:e3:8f:
a7:64:e1:ef:1d:60:d2:5d:63:c8:0d:6c:f9:02:7f:
0b:5a:3c:9c:85:eb:e1:78:65:b2:dc:0b:67:27:d2:
d8:4b:db:1c:5e:65:36:24:2c:7b:c0:87:39:de:6b:
f7:d0:a8:18:6b:05:6a:9e:6e:f3:79:04:13:8b:1e:
19:69:ee:b6:39:4f:fa:48:e2:7e:a9:e3:01:e2:23:
6d:66:32:5a:8d:13:85:ea:e7:db:b4:26:71:17:33:
e7:b6:07:f0:f1:3d:35:84:95:27:0b:54:0b:23:3c:
3c:31:4b:1e:f5:64:49:0f:79:e5:79:7e:4b:ed:f3:
15:a3:3a:0c:48:a1:c2:4b:fc:a6:73:31:17:b2:db:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:45:ED:16:81:D6:15:0F:F1:2F:02:AF:CA:30:DB:2C:6A:72:51:41
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:84:3e:0e:23:5e:2b:e6:47:39:b6:a9:7b:e2:02:ce:22:bf:
9a:c3:d0:c0:e2:81:7e:34:32:ca:fe:62:99:f0:28:0b:a8:07:
4f:89:07:06:12:3b:28:a6:04:3c:16:15:19:3b:b4:2b:82:bf:
79:d7:f1:ce:e5:c7:f9:a3:7b:c7:9c:67:e2:36:55:fa:9c:b2:
38:2c:1c:2e:f2:3f:29:6d:b5:00:d1:d4:2e:9c:d5:27:db:75:
ea:07:80:da:6d:e1:e0:a1:95:db:24:43:d0:8d:61:0f:2a:6e:
69:66:f0:e1:69:41:26:3f:c6:88:f5:d3:a8:06:e8:4d:7f:0d:
e4:5f:3c:cf:6e:9a:79:06:84:ae:4f:51:62:3f:08:93:46:3a:
f7:da:ef:b2:69:bf:16:b6:a4:13:53:a8:68:29:13:75:4c:22:
e3:ae:cc:9e:73:ba:15:f9:23:d5:8f:62:63:b5:61:f4:e4:dc:
3b:3d:d5:2c:01:70:42:9f:0f:ce:f8:8f:79:19:66:06:89:2f:
4c:54:53:e9:e4:d3:1b:3e:72:84:c9:a9:c0:8e:42:09:4c:43:
f2:f0:e0:3f:a8:55:fe:c7:4d:0b:a2:34:e1:b4:4f:db:a2:04:
34:68:ee:3a:7e:35:ca:6b:b4:10:4d:e0:8f:f8:10:11:8b:cb:
c3:54:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:39:26 2025 by rpki-client