Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: BI5nsELhL1RQMPY7Bn4NDsFvmcB+Zb2cUwhUWJQV7Wk=
Subject key identifier: 9C:5C:73:14:4B:7E:AE:BF:AE:03:0F:07:FB:F8:52:90:98:BB:D9:17
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 01992820915C5BC593F518E28749D2FF62AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 04F7
Signing time: Mon 08 Sep 2025 07:00:46 +0000
Manifest this update: Mon 08 Sep 2025 07:00:46 +0000
Manifest next update: Tue 09 Sep 2025 07:00:46 +0000
Files and hashes: 1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
2: BVTw6vsjUxNoBbJObq9Iw2eDZYs.roa (hash: N/vjSEKCprvMbHrwkuq5WBhfoLp/HEmES1XrVOaxIlk=)
3: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: Yk4MbYsnG7NVa72iZaOLCKKBeECDcAQdeD7b7Joxh/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:91:5c:5b:c5:93:f5:18:e2:87:49:d2:ff:62:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Sep 8 07:00:46 2025 GMT
Not After : Sep 9 07:00:46 2025 GMT
Subject: CN=9c5c73144b7eaebfae030f07fbf8529098bbd917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:20:a3:a0:b1:1c:1e:c9:0b:ee:4a:99:9f:
e3:20:ff:40:14:de:0f:fc:80:0f:4b:5b:0a:81:b4:
07:13:2e:e5:20:9e:87:41:8d:f4:1d:bd:d4:d8:51:
cc:1e:0b:83:3c:17:8d:22:49:7e:8b:eb:d3:58:06:
2b:3f:04:d6:09:35:0c:48:69:02:e6:15:3c:87:6f:
14:ab:f3:65:32:45:62:9d:f2:06:8b:c3:14:3d:15:
d3:d5:55:60:5e:0b:dd:e2:6c:3b:c7:51:b6:61:16:
47:7b:fe:31:95:bf:db:17:d0:15:f9:05:f4:ad:61:
1a:57:03:2f:78:6f:6e:fd:ab:1d:54:d1:9e:84:69:
44:92:ad:b4:4c:de:ad:fb:ec:2f:94:14:61:80:a6:
85:fd:44:f7:98:77:f5:d2:f4:07:a0:a9:de:ad:12:
e4:22:77:fc:bb:3d:97:23:d2:0d:01:e6:92:04:f6:
c2:35:78:82:60:a3:24:51:c4:39:84:76:31:a4:a5:
c2:70:84:bb:81:37:33:17:9c:c8:e9:a7:29:96:77:
02:bd:d3:53:01:61:ed:de:8b:06:11:26:d9:be:c0:
6c:d9:89:cf:95:81:c5:73:a4:5b:a7:97:87:c6:60:
b7:6e:56:38:c7:a5:39:a2:ce:ec:ee:ab:07:04:37:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5C:73:14:4B:7E:AE:BF:AE:03:0F:07:FB:F8:52:90:98:BB:D9:17
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8f:53:12:0e:98:1b:d0:be:75:77:f3:f5:91:33:1f:f1:47:
e5:c3:0d:b6:67:f0:f5:bb:f8:7f:3a:48:d7:27:c1:ed:b6:4f:
de:71:cc:da:9e:37:a4:84:d3:bb:01:e1:3d:01:2b:9c:19:65:
5f:59:51:d3:62:c4:58:67:1d:34:5a:12:c8:ae:02:9d:cb:eb:
d6:f4:57:ba:42:f8:72:a5:9e:ae:ee:e4:63:4f:a4:87:d2:75:
e3:f1:54:ae:45:0d:88:37:8c:b3:77:79:b1:ba:e2:93:ba:07:
dd:f0:cb:75:8d:cb:54:21:d4:37:ed:a0:96:d4:8f:23:f2:73:
e0:a5:e2:39:48:2d:51:a3:e9:ad:67:3c:93:b6:48:6e:0e:ec:
75:6f:0a:6a:88:e8:74:a1:7d:af:f9:f6:ea:5e:af:42:98:3d:
82:21:07:d8:11:6d:f5:2f:4b:7a:b4:29:f0:ca:2f:7b:84:52:
cf:7b:a3:da:2f:23:97:b6:b0:f3:58:7b:3d:56:94:97:91:19:
d5:8a:71:d4:32:e0:a5:9b:34:c4:37:91:68:b6:8b:c4:b9:ea:
e1:92:e5:1d:49:d8:10:51:2c:ac:4e:6d:ff:9b:69:1f:a3:a2:
ae:9c:c7:fa:9f:ba:3c:b3:ef:b7:8d:14:47:a2:42:c6:08:8f:
12:b1:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:14:18 2025 by rpki-client