Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: qhMeFmtwGgPjUg1WEs321HmNu0oljXNS8YPG2/cIRhA=
Subject key identifier: EA:D2:47:AB:9E:A5:A7:80:92:B5:D0:F2:8D:B0:3D:74:25:8F:C5:50
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 01984B53803BDE089058E8832E59EED6553E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:00:20 +0000
Manifest this update: Sun 27 Jul 2025 10:00:20 +0000
Manifest next update: Mon 28 Jul 2025 10:00:20 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: //QBDNmZ3b3VFU+06975doO9b6k0IQYA9PpwLT7hcbQ=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:80:3b:de:08:90:58:e8:83:2e:59:ee:d6:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jul 27 10:00:20 2025 GMT
Not After : Jul 28 10:00:20 2025 GMT
Subject: CN=ead247ab9ea5a78092b5d0f28db03d74258fc550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:18:dc:8c:af:84:da:3a:66:9c:17:86:ca:
23:cd:84:f7:64:bf:4a:f9:c4:f1:13:d4:2c:3d:d0:
9f:7f:6e:19:8c:42:3f:fc:ed:28:a3:12:4f:9a:d9:
ca:75:f5:f4:6c:e2:b4:d6:13:ad:e8:7d:da:ca:21:
a4:32:38:05:b9:46:08:95:44:96:fd:26:14:9d:e8:
c6:39:ec:ae:78:f8:93:fe:90:db:c2:39:ce:46:ce:
29:8f:94:ca:23:72:7b:e4:74:da:5d:71:bc:0b:c7:
30:ab:24:2c:67:a1:db:03:69:a6:b2:d6:ec:86:62:
66:14:df:34:86:d5:ce:f8:76:6f:bd:5e:c7:9f:fa:
2b:eb:e0:07:28:fa:48:c5:f4:7c:0f:88:8d:fc:e0:
67:e6:b3:fa:a6:69:1f:7d:ca:4c:8c:ff:31:3b:b5:
fc:12:31:14:1c:bd:8f:c6:e8:bd:81:a2:7f:22:e9:
42:bb:f1:fb:92:cd:3f:f0:85:83:7e:15:1b:ea:38:
90:0b:a9:a1:78:e2:b8:d9:55:97:af:e3:ef:32:ad:
87:12:e6:7a:b9:05:f1:ba:8c:e5:25:7f:13:1b:c0:
b5:42:c6:e7:a3:d7:8a:80:80:39:81:7f:7f:26:7a:
1f:e0:d9:46:04:5a:46:19:f6:11:6b:0f:c4:a6:0d:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:47:AB:9E:A5:A7:80:92:B5:D0:F2:8D:B0:3D:74:25:8F:C5:50
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:db:55:41:c0:bf:77:2c:9c:6f:76:f2:b3:d7:39:2b:a0:f1:
62:72:5c:cb:f7:bb:99:c9:b2:7e:95:3b:7f:fa:70:29:a6:d7:
88:8f:66:54:5d:81:05:a7:7d:d0:ce:3f:10:d1:d8:82:55:21:
29:f2:60:f3:1f:8b:eb:7a:f2:3d:ee:64:83:a5:a3:84:35:c2:
d4:d6:fb:f4:b5:0e:2f:80:06:12:05:1b:d1:ae:b7:bc:ce:8f:
70:19:11:69:02:02:2c:82:17:11:72:d7:f2:33:52:5e:ab:ae:
cd:f9:84:c1:a8:8e:a7:6f:30:91:53:5b:0c:c1:27:4f:61:cc:
60:41:34:d3:2b:c3:c7:f4:ff:74:5a:5d:05:de:60:75:41:1f:
8a:44:39:88:93:64:7d:8c:e1:c6:f6:02:9b:79:bf:c8:ec:c7:
5e:df:76:d2:33:27:32:55:08:3d:f3:e1:d2:d6:d5:20:98:8d:
1f:b9:db:66:ca:69:69:5b:53:c3:97:d7:fb:fe:ce:66:e8:67:
b2:d9:8c:f8:c3:63:a6:66:e2:3c:1d:81:4c:ea:f7:77:cc:52:
dd:a6:ee:da:ac:b4:50:5e:d6:71:5d:57:91:98:ac:d7:d4:12:
4b:42:78:9a:db:5d:77:0e:8f:02:f6:31:02:e6:86:10:04:46:
5f:df:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:50 2025 by rpki-client