Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: nibdX5Nao3U2CxNgiM2SGsk/3st4G/32UgrIVKRy2ig=
Subject key identifier: CB:30:C7:7F:57:87:06:73:AC:AA:26:69:34:52:C0:19:98:D0:62:D4
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019826A3D2301230A2CC751225353D7EA9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 1F
Signing time: Sun 20 Jul 2025 07:02:06 +0000
Manifest this update: Sun 20 Jul 2025 07:02:06 +0000
Manifest next update: Mon 21 Jul 2025 07:02:06 +0000
Files and hashes: 1: FxDzr4dkx7gP7-0QN9qS1QSuAFE.roa (hash: 2+R/DqRWvZVRETti21Zc43TNJBFDVQNiLw4+AXiQO7g=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: vSBny7+Z2vni+Q1c9VT2UEOfW8Tuh0LXLGb2dXfoYcs=)
3: aSbzflu2ueBH4HFc6DoptPDX5Rc.roa (hash: Ps8MiI9EyDzRjGBlJSLfyNG1HvPUvesSrz/Go0N5kKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a3:d2:30:12:30:a2:cc:75:12:25:35:3d:7e:a9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Jul 20 07:02:06 2025 GMT
Not After : Jul 21 07:02:06 2025 GMT
Subject: CN=cb30c77f57870673acaa26693452c01998d062d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:65:a9:e0:b3:d3:32:8e:3b:09:d5:fd:e6:
dd:02:3c:f5:9b:1c:7f:2b:15:ae:a9:a3:e0:4c:0b:
4e:c9:c2:8f:37:3d:f3:a1:0b:59:c0:3c:66:c8:ae:
80:76:57:da:e2:5c:a1:d6:18:1d:4d:ad:42:b9:8c:
28:1f:23:04:4f:52:7c:dc:a7:e5:29:31:48:c0:2d:
20:1b:68:0d:0c:c7:73:0e:ad:cf:46:d1:3c:5f:5e:
8e:6e:1d:e9:34:49:7c:7c:40:d5:49:56:bd:12:5a:
b4:af:e4:ac:14:d8:eb:20:ff:e1:ba:53:c5:d4:c8:
0c:72:02:3a:f8:77:87:78:48:f8:b8:ed:6e:ec:4f:
82:e9:c3:88:ce:69:34:55:17:e2:37:de:a1:00:5b:
ed:e2:3c:36:c2:7d:82:38:bf:b0:fd:54:92:1f:65:
00:d2:f9:cc:19:3e:7a:cf:5a:49:cb:c4:02:bb:fb:
96:0c:bf:46:9e:cd:3f:ed:34:c3:ff:08:1a:e2:be:
ba:07:de:4e:b2:bb:eb:fb:e0:81:90:fb:2f:55:e6:
b4:a3:97:fa:96:e1:0f:05:b7:0a:ea:a6:cf:cf:47:
26:58:48:c8:66:ee:40:e1:9e:71:96:32:b3:2d:3b:
40:22:8b:eb:0c:52:89:61:b9:c0:84:c4:b3:1a:d1:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:C7:7F:57:87:06:73:AC:AA:26:69:34:52:C0:19:98:D0:62:D4
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:24:37:c4:61:b7:c6:50:cd:f8:d2:ae:ed:2e:7b:ad:34:7f:
24:7d:04:ea:71:a4:08:aa:ad:a7:f6:8c:50:c8:11:8e:30:6c:
89:f7:bb:a5:ba:78:0c:49:ad:8e:14:85:65:13:71:0f:49:1f:
ff:ff:06:fd:13:55:7f:b6:e3:2b:87:b0:19:0d:3e:98:50:e0:
e4:60:ab:ab:c9:18:55:f3:76:e0:ed:0a:e0:c4:e3:89:d9:e8:
52:3b:e3:70:99:4c:50:53:69:82:2c:17:a0:6e:4b:a7:bb:c2:
72:f9:82:73:d3:9c:3c:40:dd:53:b8:7e:98:cf:8f:75:33:12:
d1:0f:04:12:84:dd:20:54:12:2a:df:e5:b3:e7:8b:25:94:c1:
4b:9e:73:a5:3a:f6:c8:21:9e:61:bc:0a:bd:6e:35:30:1d:cb:
00:e4:96:07:49:18:f3:84:a4:2b:67:72:ac:88:7b:a4:0d:37:
c8:cf:e3:3c:a8:4d:92:29:c1:ef:78:6f:25:6c:e9:d5:d8:58:
a3:b2:16:14:a3:66:c7:b7:27:57:43:6e:c7:da:5b:83:85:75:
b4:83:d6:14:ad:56:d9:23:79:fb:80:6e:d1:95:a8:72:82:26:
0b:4d:8f:4b:ab:2e:14:d6:18:35:bd:d1:cc:7a:d6:9b:f6:6b:
35:c5:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:29 2025 by rpki-client