Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: +9tO7eQzJulafY6+dxJwAEizc/38RUCBoXi9WWH9U6s=
Subject key identifier: 1B:0B:E1:08:02:81:F1:10:04:3D:23:CF:97:4D:C4:7F:A6:4C:C6:AD
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 019844ACD6AB2B5882A4703037FAF7CAE13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 0535
Signing time: Sat 26 Jul 2025 03:00:34 +0000
Manifest this update: Sat 26 Jul 2025 03:00:34 +0000
Manifest next update: Sun 27 Jul 2025 03:00:34 +0000
Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: VddKdqXxGKXY5tKd6C0soCUSOu59KYBNqX6Eqh3i0tI=)
4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:d6:ab:2b:58:82:a4:70:30:37:fa:f7:ca:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Jul 26 03:00:34 2025 GMT
Not After : Jul 27 03:00:34 2025 GMT
Subject: CN=1b0be1080281f110043d23cf974dc47fa64cc6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:60:2b:d2:ba:5d:aa:f0:10:91:13:07:19:
34:1d:3e:7e:e1:80:78:0e:f7:c4:9a:26:1e:75:49:
54:3a:df:94:60:f5:17:73:68:9e:8f:7b:55:95:cf:
a8:6a:87:ea:3d:93:47:28:3f:06:4d:d8:96:c8:3f:
2c:c8:6d:1c:52:2b:43:a9:1c:b2:50:d8:e6:f6:6f:
21:63:4c:c5:b2:58:53:28:1e:80:f7:0f:7c:28:03:
4d:d8:35:45:40:d7:37:3a:46:4a:ec:20:1f:b1:f6:
29:f6:0d:57:8b:85:2a:83:35:5c:13:f1:70:47:a5:
c9:be:e5:81:21:0d:ef:89:91:a3:8f:2c:e9:9f:bd:
0d:7a:61:b5:3e:de:1b:5f:33:da:80:8b:c3:c2:bc:
2f:73:19:51:f7:63:13:95:48:fa:3b:98:b3:32:49:
83:63:e9:4f:aa:ef:ad:9e:bc:0f:07:77:3e:4a:fb:
ca:d7:09:41:2c:95:2d:d4:23:91:07:1e:62:10:db:
c2:5a:e2:c4:89:cb:bc:c2:57:c0:97:77:77:91:a5:
48:b4:d1:e3:0c:cf:33:cb:bd:63:05:a2:44:c5:43:
54:95:5e:2c:37:a2:ac:c5:94:18:fa:13:34:4e:91:
cc:43:58:38:92:9d:1c:b0:a6:73:f0:df:69:75:ef:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0B:E1:08:02:81:F1:10:04:3D:23:CF:97:4D:C4:7F:A6:4C:C6:AD
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ad:9f:4a:58:51:0c:b7:8c:a7:7a:a7:71:86:c3:8c:92:d1:
a0:b6:87:d6:cd:5c:78:01:e9:a0:e2:56:17:19:95:ae:75:34:
43:b3:7f:ba:33:91:bf:95:70:3d:a1:ce:97:c6:5c:8a:74:09:
4d:98:7c:cd:0a:b3:82:83:2a:a9:e5:cb:cc:5e:20:ff:c7:f7:
ee:eb:24:68:00:86:22:1b:30:5f:7a:3e:a5:02:04:98:c6:08:
83:b2:57:a6:17:48:79:15:a1:d2:64:a7:12:9b:5c:05:54:be:
e7:8a:3c:7d:ff:03:b6:f5:50:9d:85:a7:c4:e4:ae:c3:7c:8f:
03:8c:65:48:83:c5:9f:c2:d6:6b:48:ee:41:25:5b:5b:58:4b:
f9:8e:df:cb:ba:7e:fa:b3:46:1c:7a:d2:89:51:4b:ad:f0:79:
37:c3:9b:b3:c0:c5:ad:e8:fb:99:b8:42:4e:63:1d:6a:2b:f1:
4d:71:5e:9a:74:d1:43:12:84:df:e1:6b:26:33:1b:22:26:3b:
7f:55:27:d9:b1:ea:35:3a:36:73:c3:02:95:b4:cd:1d:12:f7:
2b:47:a0:7e:e4:1a:15:37:ef:25:aa:72:38:2b:5b:f6:f0:ff:
4d:6f:1f:d2:bd:35:60:b4:df:0b:ac:e0:16:56:c7:80:59:19:
88:4f:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:50:53 2025 by rpki-client