Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier: +YaOOWqUHkxIkDMktLpEGnZpPlOJT7r/aKSXdKFZCEY=
Subject key identifier: 38:E3:B0:97:9A:FC:94:88:C8:E5:39:53:B3:23:BF:54:BE:84:37:64
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial: 019845F671A36C17FD1A67C21D50E58BF52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number: 032D
Signing time: Sat 26 Jul 2025 09:00:35 +0000
Manifest this update: Sat 26 Jul 2025 09:00:35 +0000
Manifest next update: Sun 27 Jul 2025 09:00:35 +0000
Files and hashes: 1: 21zXl1VT2wOLl9fEbNkRa053DOE.roa (hash: 5emuQVjcm3y58xrRXNGECOspFNylmBXZoEALIIh48B4=)
2: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: Gmp2uF0+MsMCchieBehHIT8Xuc9NcwCKWUlPIi9VZkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:71:a3:6c:17:fd:1a:67:c2:1d:50:e5:8b:f5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
Validity
Not Before: Jul 26 09:00:35 2025 GMT
Not After : Jul 27 09:00:35 2025 GMT
Subject: CN=38e3b0979afc9488c8e53953b323bf54be843764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:5a:7e:b1:1a:96:4b:a0:49:f5:0e:48:6a:
22:fc:32:3b:98:14:c1:04:ad:69:ce:7b:2e:e6:97:
43:14:90:a4:b9:31:94:ee:ad:b9:b0:ef:3f:50:67:
35:1d:a8:6f:8c:da:b7:1e:1a:bf:a8:35:46:71:ec:
48:de:94:f1:db:8c:f6:42:be:9b:27:06:98:3d:f6:
c1:fd:2f:c3:ff:c1:fb:5f:e9:92:93:79:20:1e:32:
dc:fb:1f:56:ec:f0:1d:23:99:48:7d:57:0c:b6:d3:
e1:5d:05:82:50:d8:be:77:51:e1:b5:83:e3:9c:e6:
6d:83:60:12:d5:be:e0:df:46:be:55:c6:af:17:62:
e6:7d:68:fe:a1:42:2d:1a:ac:f0:ae:d8:4f:40:cb:
50:e7:d8:15:cb:35:2a:4c:2d:96:29:2b:11:53:23:
c7:c0:6b:dd:e6:d9:3e:b9:26:ba:3a:de:dc:c5:5e:
98:c7:6e:d5:25:19:ac:e1:db:57:59:2e:e6:68:46:
4c:c1:5a:2b:c1:83:d3:60:d9:cf:a0:5d:2a:d4:cf:
5f:23:f6:09:4c:23:e8:52:2b:62:fd:c6:33:3f:95:
c4:47:57:79:84:32:47:1e:46:fc:19:3b:3f:a1:18:
ef:c4:a0:1f:47:84:25:d7:c2:ea:e0:03:04:78:47:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:B0:97:9A:FC:94:88:C8:E5:39:53:B3:23:BF:54:BE:84:37:64
X509v3 Authority Key Identifier:
keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:58:fc:22:8a:ef:2a:f6:f6:f2:97:82:62:cf:d5:85:cb:4a:
98:26:34:df:9e:d6:4f:c2:68:80:11:8d:d0:1d:96:f1:e9:e4:
06:51:50:4e:a2:15:b7:f5:a3:2e:6e:59:c2:41:a0:b5:06:d4:
c1:dd:62:ad:e9:9e:6b:3e:fb:35:b8:20:b8:1b:a7:76:14:4d:
f0:8b:8c:33:5a:fb:c0:14:75:28:a4:74:dd:c0:43:82:72:2e:
8d:7b:29:c6:d8:07:84:ba:bd:cb:97:fe:d8:8f:aa:e1:4a:bb:
32:c9:57:fd:45:6d:f9:7a:d4:cd:aa:4e:1c:3d:e9:2e:24:f2:
a5:dd:11:77:8f:8c:b7:40:a3:79:98:c4:5f:2d:0f:f7:0b:dc:
09:59:38:a6:7b:de:0f:2c:98:3f:9b:7f:17:08:40:39:36:fd:
45:5d:d2:d5:d7:ad:32:c7:ca:46:21:ee:29:89:e3:e1:63:77:
7f:15:69:28:b1:3b:c0:d7:29:28:77:3e:62:93:f3:b8:34:cd:
94:f5:5d:59:9b:74:bb:ff:4f:2a:a0:23:cd:c0:fa:65:76:78:
eb:8a:25:ba:b3:2d:92:a7:55:ee:01:ce:ab:76:e3:7b:99:32:
30:d4:55:50:85:52:ef:38:4f:08:58:3c:7a:86:ed:e9:81:54:
ab:86:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:08:24 2025 by rpki-client