Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: OCOAaC7ikI/EL/gBFZmoDbS5p8FU1G2mv3pEDEKysz0=
Subject key identifier: B3:01:14:98:63:B6:25:3D:A9:B2:0C:A3:17:AA:6E:EC:03:38:51:A6
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 019849666A6BE4116DAEF0B5A967EDC72815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:01:45 +0000
Manifest this update: Sun 27 Jul 2025 01:01:45 +0000
Manifest next update: Mon 28 Jul 2025 01:01:45 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: QlIcv7YN5NA9OLWh3jiu8aIIicAVv7Z4IWH8dy07J6E=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:6a:6b:e4:11:6d:ae:f0:b5:a9:67:ed:c7:28:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Jul 27 01:01:45 2025 GMT
Not After : Jul 28 01:01:45 2025 GMT
Subject: CN=b301149863b6253da9b20ca317aa6eec033851a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:69:02:44:11:60:b2:47:5e:ec:9c:bf:8a:
14:d4:8f:f8:d2:55:fa:33:9c:c9:e6:22:31:86:12:
8c:9c:4f:48:5b:a4:e5:d2:39:ce:11:68:70:01:71:
47:40:22:40:79:a4:d3:2d:6b:56:4d:e6:6d:91:8f:
e6:eb:80:5c:96:16:24:48:44:54:e9:e4:20:43:b8:
46:9a:0f:02:9d:79:5c:1a:a1:e3:72:bd:d4:e3:09:
cd:dd:c8:51:77:90:dc:ab:66:a4:a8:f0:57:ae:57:
a7:83:b0:04:29:75:07:d2:eb:10:08:bd:a7:f0:73:
a4:fd:f1:d4:d5:39:0c:a8:83:60:66:a4:73:84:73:
9d:a7:8d:96:a5:f6:c8:79:a6:43:51:b4:c4:9d:51:
ea:70:4a:d7:38:07:90:e8:20:c9:0c:90:c1:1e:80:
3f:c3:16:c2:36:a3:92:05:94:bd:0a:dc:2c:00:76:
53:60:75:93:10:a8:06:38:a9:a1:34:ef:d8:58:fc:
ec:83:ef:14:37:ab:d0:63:c8:29:a5:85:65:01:31:
f0:21:b4:80:2a:a4:e3:59:e0:67:8e:68:6f:ba:08:
c6:bc:66:cf:40:cf:d5:cb:4c:a5:02:93:65:db:f4:
0f:6b:dc:00:57:d7:e9:fc:e9:75:b3:8b:69:21:f8:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:14:98:63:B6:25:3D:A9:B2:0C:A3:17:AA:6E:EC:03:38:51:A6
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1a:34:c9:5c:31:42:b5:7e:e1:4c:bd:cd:76:1d:db:61:8c:
40:bb:67:f7:6c:36:0c:8a:a8:8c:6e:d1:6d:d2:06:a5:48:f7:
15:64:db:a3:da:29:38:8a:ce:85:07:3c:79:fe:b6:1d:27:dc:
50:d7:59:25:0b:a6:8c:4e:31:69:95:d7:a2:6f:3c:fc:70:bf:
fc:db:aa:a9:b6:12:a8:80:5d:17:31:37:b3:cf:5b:6a:f0:9a:
79:8a:f8:eb:a5:05:e5:2c:42:22:3c:93:1a:c0:57:ce:91:e8:
83:b8:0c:bd:3f:2f:61:b0:3a:75:95:1c:95:5f:31:ec:52:3f:
86:3c:ca:62:7d:af:79:41:da:cc:c9:c9:9e:17:c9:19:4a:f5:
2b:79:6a:49:2a:7f:f4:e3:19:8c:85:cc:db:c7:ee:dd:c8:00:
ee:5a:ac:44:59:39:a6:13:d7:fd:1d:8e:cb:67:49:01:ab:e5:
6c:0d:d5:ca:c2:80:12:21:46:e0:5f:70:17:ff:f0:1b:ea:d6:
37:54:de:f6:75:e4:ee:b3:d4:36:3c:0f:95:c1:54:08:c1:7c:
ad:90:28:49:09:5b:5b:41:85:c7:cd:db:01:e7:b2:a8:36:a3:
5a:71:d6:a2:7d:af:30:ec:df:e7:57:57:aa:f9:38:9d:b8:fd:
ad:82:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:19 2025 by rpki-client