Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: /mBCY+NDhy5+DpFEdna4gMj6nkBSBUMl8W8geFMZTmM=
Subject key identifier: 51:61:A2:3A:BD:D0:43:98:54:30:68:D1:89:EB:44:EC:CC:D8:5B:6B
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0198530DB44719638195C452F043197194C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0C38
Signing time: Mon 28 Jul 2025 22:01:03 +0000
Manifest this update: Mon 28 Jul 2025 22:01:03 +0000
Manifest next update: Tue 29 Jul 2025 22:01:03 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: /4jliwAlkH23inVXtokpOU4kooTf0JmPwgH35Qnjpi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:b4:47:19:63:81:95:c4:52:f0:43:19:71:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jul 28 22:01:03 2025 GMT
Not After : Jul 29 22:01:03 2025 GMT
Subject: CN=5161a23abdd04398543068d189eb44ecccd85b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:4f:24:1b:93:be:5c:8d:46:7e:78:6d:30:
94:17:a9:9d:73:51:42:ff:dc:94:79:a3:4a:0f:73:
be:29:07:01:d6:fc:74:46:1c:8f:9f:f2:8f:59:cd:
df:65:0b:84:b9:31:39:b0:d5:4a:ec:ce:24:c0:63:
cc:e5:72:e2:c7:f6:e3:e5:5d:27:d7:d6:fe:41:f0:
5b:39:3e:f9:6e:33:07:e0:af:36:75:11:c7:b2:38:
4b:dc:f5:77:60:11:c5:f8:36:64:65:b2:30:fe:87:
05:53:9d:bc:fe:28:80:74:8c:88:f1:d9:46:f1:22:
f8:86:42:ad:f9:9b:77:13:20:03:eb:39:5b:41:e3:
11:44:3b:99:db:e3:f8:d2:f2:88:d2:61:f7:62:57:
af:6d:c5:36:b4:79:f3:f5:9d:7f:14:35:77:89:45:
c2:ba:84:39:ee:29:d6:d2:38:6d:a4:56:f3:fd:55:
78:c7:82:be:78:db:56:33:e0:66:dc:ff:37:57:ef:
9e:17:b6:3a:25:3c:02:9d:ad:bd:69:34:f2:89:05:
7f:81:66:12:0a:b4:83:3e:6d:83:72:15:8f:68:b3:
cc:0c:3d:1a:20:86:58:94:82:1c:f2:98:2a:b6:13:
83:c6:73:50:6d:a8:63:a1:e1:06:71:25:92:83:c4:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:61:A2:3A:BD:D0:43:98:54:30:68:D1:89:EB:44:EC:CC:D8:5B:6B
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5a:8e:41:ba:17:88:f0:22:1d:00:d5:79:00:64:e9:ed:98:
17:18:81:3e:20:ad:c4:cb:64:0e:fa:e6:25:0c:f3:29:a8:23:
40:1e:20:42:20:6c:e5:0a:07:3e:09:d2:23:fb:05:5f:f9:b9:
49:5f:66:14:ae:36:ed:fe:85:8b:9f:4f:b8:00:5c:40:91:48:
3b:ce:9d:3a:62:b1:5d:55:6a:a5:8e:5c:bb:d5:f7:52:3d:38:
65:18:d3:98:60:7c:b3:4c:df:75:62:18:1f:9e:87:12:26:e4:
7d:bc:6a:93:a9:84:cc:7d:20:a3:b3:c5:09:ee:3e:2f:d9:d2:
a4:ce:3b:33:4c:d6:dc:8c:4c:a5:2a:00:d0:11:11:d5:6f:c0:
e3:2e:66:2d:98:05:b9:58:5f:a5:58:d4:8d:0b:e5:f6:62:d0:
c6:d6:19:47:5d:aa:d8:42:60:45:60:e2:d9:fe:77:cc:9a:59:
40:cb:87:c5:c1:22:74:23:17:b8:68:bc:f5:87:b1:35:05:02:
14:f3:07:4a:ef:85:c9:34:89:e2:c6:26:f0:57:bf:57:c5:5d:
91:5a:3a:cc:e1:ed:17:13:46:64:d1:78:e7:da:90:33:de:fe:
5c:5b:6d:3a:48:4a:de:16:3f:da:10:16:13:06:aa:65:57:b0:
c8:1f:d5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:01:16 2025 by rpki-client