Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: 5JGsnDLlWSR9c0NwPV6wzYbrnoWjqURtp2oYuIXzwTU=
Subject key identifier: E3:B7:4A:8A:31:E9:1D:22:2A:CD:E2:55:E0:AB:D5:55:45:3F:6A:AE
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 0198548DBFB09DB887E14CB8BF973188A827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 0E63
Signing time: Tue 29 Jul 2025 05:00:32 +0000
Manifest this update: Tue 29 Jul 2025 05:00:32 +0000
Manifest next update: Wed 30 Jul 2025 05:00:32 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: /tFgxb7DRTfO68t/GlZgSl7OCU6HFC3t4+vuf3OI5Yg=)
2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:bf:b0:9d:b8:87:e1:4c:b8:bf:97:31:88:a8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Jul 29 05:00:32 2025 GMT
Not After : Jul 30 05:00:32 2025 GMT
Subject: CN=e3b74a8a31e91d222acde255e0abd555453f6aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:17:22:ca:aa:6f:79:85:36:da:a6:2d:7e:
b1:df:05:72:5d:10:2c:2f:2b:9b:2c:54:4f:2e:a5:
32:40:1d:83:9c:00:16:56:58:86:41:ad:40:6a:26:
e6:01:8f:8b:cb:53:7d:3b:fd:8d:3b:1b:a4:7b:bc:
5b:13:4f:1e:eb:69:cb:b7:67:0c:1e:6c:2f:2a:15:
ac:ad:64:93:2f:bf:1b:45:fb:ac:d8:30:23:f1:10:
3f:a4:d4:bc:49:9b:eb:97:62:a8:09:f7:a2:d2:07:
1e:5e:e8:2e:a5:b1:38:0f:1d:05:f1:02:ec:4b:59:
a9:94:60:27:57:87:e4:60:02:5c:b8:84:78:13:d0:
1f:23:67:6f:32:1a:7c:70:96:a2:cd:e3:0f:6c:db:
c5:5e:7a:69:ee:0f:e8:30:03:8d:75:51:fb:f5:14:
8c:59:24:c4:24:c9:c1:60:96:e6:84:27:be:9d:84:
b6:2a:39:72:75:58:8d:f8:28:13:5c:49:8c:95:b0:
83:dd:02:8e:4f:f0:49:80:33:0d:00:96:f2:6d:f7:
89:56:4c:9d:27:99:b6:f2:0b:cf:28:59:a4:81:f5:
ba:22:d1:23:2f:70:58:89:f7:22:1b:fa:5a:7f:f1:
c5:78:ee:24:b3:0e:fa:4d:23:45:07:5f:d3:b2:7b:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B7:4A:8A:31:E9:1D:22:2A:CD:E2:55:E0:AB:D5:55:45:3F:6A:AE
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:88:18:51:56:f3:ae:49:a0:41:03:3e:f6:76:a0:e4:dd:ef:
b7:90:25:92:64:54:84:eb:5b:e2:9f:6c:26:ab:a9:29:69:f2:
24:41:4c:68:76:9a:5f:91:4f:d7:60:17:ad:83:0c:df:02:75:
74:99:5b:94:66:1e:00:b2:9c:92:57:fb:95:a6:66:03:e0:e9:
a0:41:2d:3c:6c:df:f9:c3:68:13:fd:a3:46:4c:86:b2:0b:48:
3d:4b:4c:f4:43:b6:89:9f:a5:22:77:ae:5a:de:80:76:1e:e0:
7c:e9:5b:42:c8:5b:03:9d:0f:a2:ce:31:20:45:2e:e6:f9:d0:
0e:90:c1:f4:b0:5c:1a:a0:c6:31:86:bf:cd:4c:5b:89:af:80:
f5:c0:bc:68:7b:0e:22:08:9a:14:22:38:50:3d:8f:d9:74:15:
a6:27:45:8d:61:63:f1:dd:19:b8:62:4e:3c:0f:39:f9:ce:4f:
e2:18:1f:bb:cd:cd:76:7c:25:f3:16:58:78:28:ee:6c:2b:c0:
88:63:64:3f:d7:fb:8f:36:00:ca:18:ce:09:1f:2e:5e:17:fb:
a1:f6:55:83:19:88:60:7a:00:5d:7d:23:95:9c:f6:72:7c:31:
2f:a1:98:62:e4:d9:b7:d2:e2:ba:ee:77:ff:ce:1a:11:39:0d:
33:9a:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:25 2025 by rpki-client