Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: qmGnoTyj0O0ZEUUPS43MAj3R2L1B37nLITby89o5Djc=
Subject key identifier: F7:7D:C7:FC:69:BB:C2:77:BA:28:00:03:BB:71:49:A8:28:D4:67:5F
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019838DFB1A3EA3C121DFC121DEC5E0593B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1297
Signing time: Wed 23 Jul 2025 20:00:40 +0000
Manifest this update: Wed 23 Jul 2025 20:00:40 +0000
Manifest next update: Thu 24 Jul 2025 20:00:40 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: vCIB+CQXzfM03gOHSjfJjxpepcUF6cVlwg+2jVH9h9c=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:df:b1:a3:ea:3c:12:1d:fc:12:1d:ec:5e:05:93:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Jul 23 20:00:40 2025 GMT
Not After : Jul 24 20:00:40 2025 GMT
Subject: CN=f77dc7fc69bbc277ba280003bb7149a828d4675f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:4c:06:0b:66:a9:67:20:9b:64:fd:f7:96:
33:00:0e:69:9d:d4:1e:03:c8:88:fa:c9:da:c9:8a:
67:0b:82:55:b4:e7:9b:23:42:c8:13:92:af:8e:3d:
35:a1:42:e6:b5:75:2a:d3:9c:c3:0d:0a:d1:76:6c:
d8:ef:dd:de:6c:09:d6:88:fb:41:1f:ee:0b:87:98:
60:1b:0b:59:e0:63:f4:25:4a:cd:b0:03:af:24:d9:
c0:87:48:91:51:a4:72:d2:a9:fc:d1:08:cf:0e:e0:
ea:6a:b3:0e:e6:11:fe:cc:58:1a:d2:c6:be:3e:a8:
6d:f8:2a:9f:5f:97:2c:44:53:aa:05:1d:e4:a8:d3:
08:4d:69:c2:7a:9e:b2:a2:d1:67:0d:41:82:1e:7c:
2a:06:fc:f0:c1:7a:99:2c:d0:45:20:b9:67:73:4b:
93:14:89:ce:e9:61:52:ff:99:f2:28:d1:70:11:52:
11:08:1b:0d:0b:01:80:4d:06:44:44:a5:cc:43:f2:
19:45:0c:4e:b5:f3:10:6d:77:fd:e2:56:dc:95:c6:
ff:0d:37:91:d7:07:d4:1f:9a:74:c3:74:e1:f0:7e:
1c:46:ce:8c:45:ed:54:0f:7b:e9:b6:7f:c5:d1:48:
17:c1:7a:ba:b3:63:52:74:a9:c8:c9:3d:cd:0d:a7:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:C7:FC:69:BB:C2:77:BA:28:00:03:BB:71:49:A8:28:D4:67:5F
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ac:4b:4b:91:c2:83:ad:0f:24:c3:29:f0:19:88:b0:c1:ce:
0a:b5:1e:79:b5:93:3a:53:3a:df:b4:09:b8:e4:8a:a6:c9:b8:
dc:ae:a3:5d:c2:f6:df:22:f9:4d:f1:28:4d:d6:dc:29:a9:95:
6d:1d:15:14:3f:24:9f:a6:63:6c:93:58:67:cc:98:65:f3:81:
9f:5d:eb:8e:2d:6e:e8:b7:00:76:64:ea:58:6e:39:93:01:5c:
39:cf:06:68:68:cc:36:73:3f:9b:7e:ed:a3:1c:0f:60:64:aa:
de:11:43:1f:4a:51:f7:16:bd:f0:4d:7d:f6:36:3f:64:f3:33:
44:1b:3f:4d:99:83:2a:ad:95:74:b9:7d:52:d9:b1:41:92:c4:
07:6d:d3:d7:e1:d6:ab:8b:24:97:80:df:9a:3a:43:ae:51:8a:
24:22:c5:5a:cd:e8:8a:7e:5b:68:28:4e:63:0d:f1:a0:68:8d:
27:b4:67:47:1c:7b:3b:c6:e1:c7:0e:35:94:10:8a:73:bd:d4:
f8:3f:e0:dc:64:cb:13:c0:fb:e1:2d:14:c0:11:04:f8:db:90:
20:2c:76:bf:6a:52:97:09:09:e5:aa:a2:9e:f9:cc:de:bf:81:
70:da:8d:2b:18:0d:6b:c2:2f:18:5c:0b:fa:76:60:c1:95:17:
6e:3c:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:18 2025 by rpki-client