Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: l6zH2bqVad+PBtz9lJIgKGIgGgeuebXS7OWCjGWyfYs=
Subject key identifier: 67:CA:41:4D:4C:3D:D1:AE:25:C3:EE:6B:5B:71:78:21:56:AC:06:0B
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 01984A7837F41C09F771C01D247A14605B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 06:00:49 +0000
Manifest this update: Sun 27 Jul 2025 06:00:49 +0000
Manifest next update: Mon 28 Jul 2025 06:00:49 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: O+6hL7elSlBbB4RvNNFyrNnM2tZUi4WBqHqH4hmbNVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:37:f4:1c:09:f7:71:c0:1d:24:7a:14:60:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Jul 27 06:00:49 2025 GMT
Not After : Jul 28 06:00:49 2025 GMT
Subject: CN=67ca414d4c3dd1ae25c3ee6b5b71782156ac060b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:7c:21:86:f2:ef:d9:35:e3:5d:8f:18:48:
c0:31:91:79:e9:a2:6f:4e:51:bf:6e:75:9c:fe:4f:
9f:4f:19:1b:92:3b:e5:14:21:a3:64:e7:0e:64:4a:
08:9a:18:8b:70:b2:2d:b9:56:3b:65:98:1c:85:ac:
2d:10:e7:19:14:a8:26:3c:a4:c4:a7:08:8a:1b:13:
ed:39:67:84:f1:33:a3:47:d7:a0:c2:c6:b7:54:0e:
c7:3d:b7:68:c4:34:19:59:0b:53:51:7a:e9:3f:f6:
4f:c1:19:00:b7:5c:c7:ca:a6:39:bd:9b:d6:d1:8d:
32:c9:49:9d:38:94:5d:c1:2f:6e:03:74:46:81:1c:
42:2a:a3:32:c5:2a:85:58:e5:bd:7a:0f:0c:2c:a4:
f2:59:21:f8:41:cd:7a:2d:a6:2a:77:81:38:6d:cb:
f7:48:42:77:b8:91:8d:6f:79:99:01:89:b8:0c:b9:
8a:91:90:ca:3a:6c:b9:88:db:97:00:a8:18:e0:8d:
80:81:4c:6b:11:ae:82:36:d4:5c:bf:7c:76:e1:9c:
f4:8c:1b:2c:53:63:c0:8f:e4:05:6f:2d:cb:47:33:
ee:3c:7f:98:58:d8:cf:b7:27:6f:96:71:08:e0:d7:
fd:9e:eb:80:6c:1f:8a:42:d9:c7:a4:1c:ea:09:42:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:41:4D:4C:3D:D1:AE:25:C3:EE:6B:5B:71:78:21:56:AC:06:0B
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cd:66:ea:12:11:e4:be:45:9e:d7:ce:3b:f9:f8:68:42:5f:
b1:93:cd:94:d0:02:e6:d0:18:ec:51:3d:de:0c:16:8d:fc:05:
15:d2:23:58:24:8b:07:1a:46:4e:1b:84:0e:3a:0f:49:ee:b1:
1a:fc:9c:d6:3c:58:db:0d:c3:8e:47:51:69:b5:99:91:77:75:
91:1b:99:d0:cd:1c:59:e5:86:b5:f4:e7:04:f0:80:ce:52:b9:
2c:b9:e9:c6:ac:be:12:d3:0d:46:44:2b:6a:8d:ef:1f:fb:1b:
fc:d6:0e:b6:20:fd:b9:a5:6b:3a:dd:bb:e1:95:8e:8c:a3:a2:
e6:f2:2e:bf:08:68:f5:08:ee:95:0d:47:53:90:de:5f:9a:b2:
de:86:9f:68:c3:51:a9:aa:c3:2a:44:97:c6:49:35:09:e8:b5:
db:63:45:ef:7f:5e:37:b5:42:0f:f0:8c:8f:b5:12:f5:97:b5:
39:08:d6:48:27:60:2e:21:2d:a7:a4:c7:82:be:78:95:f4:17:
8e:aa:88:8d:48:84:4a:ff:9f:fc:1c:d6:c4:61:63:15:f5:3e:
dd:33:75:56:7a:a8:43:0c:c7:94:29:8c:e1:eb:e7:2d:63:5c:
56:24:ba:34:8d:93:f3:ee:65:f5:00:2f:3a:23:cf:36:27:0d:
ea:80:5d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:13:17 2025 by rpki-client