Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: cy5SD+eTm5oEIRDm8VB6jIiRW0isBndAqU5ltNYvtO0=
Subject key identifier: 9E:F3:C5:48:BA:70:48:A5:B1:AC:AF:B0:AF:18:C4:55:E8:9A:0E:69
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019849D329AE433F4489B9ED3EDEA116C2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0C96
Signing time: Sun 27 Jul 2025 03:00:32 +0000
Manifest this update: Sun 27 Jul 2025 03:00:32 +0000
Manifest next update: Mon 28 Jul 2025 03:00:32 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: Jm9+igOqVmKucY5e7ebpGzu7uOvhTWGJ+i1UmhIvmr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:29:ae:43:3f:44:89:b9:ed:3e:de:a1:16:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jul 27 03:00:32 2025 GMT
Not After : Jul 28 03:00:32 2025 GMT
Subject: CN=9ef3c548ba7048a5b1acafb0af18c455e89a0e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:03:c0:96:d4:3e:94:d1:41:83:fa:5c:80:
8b:e8:98:c0:1b:d9:15:da:6a:c7:30:8f:63:2b:f2:
21:f9:14:89:c8:f3:b0:38:57:78:9c:c2:09:dc:ae:
64:40:27:13:d2:9a:d2:c4:38:51:67:0f:81:d4:1d:
6c:56:9a:bb:17:df:4c:65:cc:60:97:8c:ec:bf:59:
69:a1:72:c4:dd:e0:a6:de:05:da:87:d8:6e:aa:c5:
d7:c7:22:11:94:1b:d7:9b:35:5a:b4:3b:89:c4:2a:
a4:72:0c:8f:9d:4c:42:bd:8e:8c:97:4c:13:38:8d:
14:46:0f:62:b1:88:d5:6c:e0:9c:e6:ae:61:9d:7d:
6b:d3:e6:ae:c6:f7:cf:bb:63:1f:b5:fc:aa:ae:fb:
51:b9:2e:69:d8:20:c3:d9:ba:86:e1:61:79:d3:4e:
c8:ae:b1:c0:29:12:e1:2e:26:13:f1:e9:11:27:ed:
60:ed:e4:ab:b2:42:19:7a:42:e8:ea:24:27:8f:7d:
56:88:e3:ba:8f:b8:34:ed:fc:1f:7c:31:ba:61:5a:
e8:c2:81:83:1e:17:fb:be:c5:78:e9:de:8c:8e:b2:
6d:86:24:30:91:9f:f2:42:9b:b7:bc:19:5b:a2:d3:
96:24:8a:aa:8b:f8:95:59:ce:b3:fb:47:ab:e1:9d:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:C5:48:BA:70:48:A5:B1:AC:AF:B0:AF:18:C4:55:E8:9A:0E:69
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:05:68:05:6e:11:01:4e:7c:1c:93:6a:d5:2b:86:65:10:
b1:e8:be:0d:1e:ab:3a:51:ae:0c:20:80:c9:22:80:64:09:71:
e1:bb:3e:64:c5:10:01:7b:6b:40:9b:23:cf:08:93:a0:61:6e:
68:1c:c1:75:b2:9b:92:fd:0b:03:cc:ca:2d:30:67:7e:08:3f:
42:8f:c3:20:11:68:a3:d6:a7:c3:73:4d:4a:ca:a1:f4:29:0a:
65:16:62:f6:57:c1:d7:d5:4e:78:65:e0:b3:58:52:ee:85:74:
a9:36:a1:5f:43:f0:60:93:a0:36:4a:ca:14:34:d2:d9:46:0d:
87:25:95:ea:56:19:f7:8d:2f:b6:ac:81:df:21:33:ed:a0:fc:
55:50:ba:69:c6:78:95:eb:9c:82:1f:7c:54:c8:72:4a:45:0d:
8b:e3:24:6a:8b:cc:4c:ef:c4:15:13:3f:ea:e3:94:f0:e6:d0:
d2:34:db:63:24:44:76:97:01:f4:5c:03:b7:29:fc:7e:cb:9c:
fc:cd:16:6b:d8:1c:96:80:25:1f:5f:ff:e3:f4:ac:10:92:38:
b2:13:44:c3:32:ce:cb:99:2b:13:88:13:76:a2:16:51:ed:ad:
98:0d:b2:8c:a0:7d:d7:4b:9e:f0:3c:2e:1f:b8:43:c6:f0:72:
fa:eb:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:54 2025 by rpki-client