Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier: c0gf9fr+Ifsft1GkEePUQgLQ8ADscStYDxyznDLa8VQ=
Subject key identifier: 17:4B:7A:81:86:55:D3:8D:65:84:86:19:3C:2C:BD:9C:F5:AD:12:8C
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 0198432C78F5878211498C3B537EE026C071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number: 158F
Signing time: Fri 25 Jul 2025 20:00:44 +0000
Manifest this update: Fri 25 Jul 2025 20:00:44 +0000
Manifest next update: Sat 26 Jul 2025 20:00:44 +0000
Files and hashes: 1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=)
2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: vRgkKcKdI/HY394d9jx9bTAfk+siNU4EE9QpOZi+gCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:78:f5:87:82:11:49:8c:3b:53:7e:e0:26:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Jul 25 20:00:44 2025 GMT
Not After : Jul 26 20:00:44 2025 GMT
Subject: CN=174b7a818655d38d658486193c2cbd9cf5ad128c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:b3:10:47:c4:52:4f:e8:81:27:ee:5b:b1:
bd:3e:dd:08:f9:af:8e:a7:31:4b:dc:62:ac:93:dc:
bb:b3:ca:55:1f:77:c1:88:1e:92:50:67:44:61:e7:
9f:1d:d5:c8:df:93:e5:b7:bf:41:54:29:dc:38:1b:
12:70:b2:0d:c4:fd:ce:cb:1c:40:88:7e:16:ab:a8:
dc:e8:a2:40:d3:e6:5b:b8:fa:e0:4c:9a:74:fa:aa:
29:b9:b4:bf:d4:9e:1a:c8:41:5d:29:f6:29:d9:5d:
24:27:6b:68:dd:37:d8:1c:e0:06:c9:0b:04:21:07:
b2:2d:a6:7c:93:27:78:88:48:fb:b8:6b:27:24:35:
5d:fb:5d:40:68:bf:19:93:7b:ec:70:f5:6d:c3:a3:
32:e1:14:4d:90:b8:09:8e:6d:9b:cf:3f:1c:e1:3b:
09:1a:01:8f:aa:99:2b:ee:a8:f4:55:a4:20:73:82:
04:49:2d:44:13:32:1b:f3:22:a9:75:84:51:88:90:
f2:b5:af:81:13:be:32:e7:d2:fb:76:87:12:ad:22:
1f:6e:63:aa:80:d7:ef:1e:7d:46:b2:4c:9b:61:29:
d0:e0:99:48:f1:83:b2:56:ed:dd:b5:66:ce:bc:2e:
28:dc:e0:88:43:a4:28:d8:c7:85:77:72:35:cf:6c:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:7A:81:86:55:D3:8D:65:84:86:19:3C:2C:BD:9C:F5:AD:12:8C
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:01:28:e8:e2:f0:c7:91:9d:b1:37:af:b1:ca:69:8c:06:53:
59:a6:2d:0b:3d:97:eb:dd:72:7b:4f:47:bb:27:9b:5c:3f:f2:
d4:ed:52:82:dd:49:de:01:f6:b8:e5:15:31:e4:7a:70:ed:1e:
f7:98:09:d7:d4:c5:21:bb:c7:40:1b:ee:8d:df:48:b7:78:82:
33:33:e5:35:14:57:68:3e:e5:8e:77:11:50:82:70:1f:c6:a3:
f6:b1:93:56:ab:b5:32:c0:a0:3b:ae:8a:6b:6c:f2:59:41:8f:
7e:7a:67:0b:db:01:aa:79:2a:da:80:92:50:c5:59:ec:d2:49:
13:ce:48:7b:b9:34:46:45:8f:ed:5f:c6:0b:c9:d8:5e:99:2a:
11:e4:ba:9b:b3:4c:49:62:b9:8f:c7:fb:7e:a5:ab:98:bf:23:
e8:95:e4:8f:a6:5b:9b:e3:03:b4:11:91:e9:16:66:8b:14:81:
85:33:7b:ef:fd:20:0f:e6:28:8a:a6:8b:84:69:fc:e5:08:42:
14:a3:45:17:f5:e5:8f:49:07:e6:4a:d1:90:bb:ba:3c:9e:a0:
d3:dd:39:a2:ac:3e:3f:5d:79:9a:d3:31:f0:95:27:1f:53:95:
c9:a3:46:43:0e:40:ed:bd:cf:43:61:b3:1c:0f:2b:b7:6b:23:
4a:7c:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:36 2025 by rpki-client