Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: b4YLocEE/vvRK2Jv56MUMJF1NLceS5j2WW4RtGe61t8=
Subject key identifier: 47:7C:03:F0:33:40:86:80:B6:0A:28:1E:82:03:77:A2:65:00:2B:0D
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019847E544742B8E819A9C95543FCA9F9496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 08CB
Signing time: Sat 26 Jul 2025 18:01:04 +0000
Manifest this update: Sat 26 Jul 2025 18:01:04 +0000
Manifest next update: Sun 27 Jul 2025 18:01:04 +0000
Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: YXaqDXGlyk1jO/05rdIww1kCrtIIZLmPnzi4b2z1POk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:44:74:2b:8e:81:9a:9c:95:54:3f:ca:9f:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Jul 26 18:01:04 2025 GMT
Not After : Jul 27 18:01:04 2025 GMT
Subject: CN=477c03f033408680b60a281e820377a265002b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:d5:69:f3:20:a4:ec:de:12:9d:17:62:a3:
78:67:a2:cf:06:18:c3:d3:3d:00:eb:cb:48:21:92:
40:b3:d8:2d:b4:8f:68:d6:12:4f:ee:eb:02:e1:2c:
c4:46:9f:35:d2:1e:fa:18:be:c6:13:ab:a5:7b:ec:
b2:be:c0:db:70:a7:d7:0c:94:7f:03:42:61:93:05:
96:62:aa:10:f6:0e:60:9e:5d:5a:77:48:3f:6b:2c:
08:9a:81:64:6d:f2:bb:f4:e9:28:b7:26:43:86:2a:
56:94:3c:be:d7:e3:96:ea:f0:51:c9:d4:c8:f4:6a:
9f:ec:12:f7:2f:c4:4f:41:ac:1a:77:ce:ce:70:1c:
31:84:04:57:1c:0f:48:73:fa:a0:92:02:44:d6:93:
ff:9d:24:45:9f:29:04:6f:e0:db:68:d0:57:94:43:
fe:10:07:8b:c5:b8:60:4d:a3:4a:9f:6b:e4:0f:bb:
5d:6b:91:fb:d4:da:3e:cb:c9:30:5e:30:7c:17:d1:
90:eb:3a:5b:07:08:71:1d:7e:e5:03:82:cf:47:25:
e6:a2:3f:de:a2:a9:85:c1:f3:70:0e:1c:36:8a:66:
50:89:22:18:2d:79:0c:4b:68:11:e1:3d:a0:39:11:
df:5a:75:4c:30:0e:a3:c1:f9:bf:9e:ec:9e:8b:7d:
2b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:03:F0:33:40:86:80:B6:0A:28:1E:82:03:77:A2:65:00:2B:0D
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fe:15:d4:59:72:27:1d:89:24:58:97:99:8e:9f:75:b3:e6:
2c:b2:78:24:f8:05:c9:1a:3d:06:18:5e:9e:7c:4b:cc:19:cf:
10:43:b9:9d:5d:91:13:e1:f5:8e:fd:f6:f0:74:6a:4a:33:dd:
e0:f8:b4:c2:a4:57:f6:8f:4d:3c:cd:09:27:df:b9:f8:a5:27:
ee:85:53:96:da:b8:83:8c:d1:c8:6b:c4:81:62:82:b0:cd:b9:
81:cd:e1:09:46:6c:51:07:5b:de:88:fb:f6:2e:a3:92:49:8f:
66:b1:9d:d2:1a:af:01:2e:86:0b:e0:9a:b7:8b:0c:35:e4:86:
a0:61:22:48:48:2d:7e:71:1e:15:1c:57:24:b5:f7:8b:f8:80:
16:3c:69:29:67:64:64:68:d0:98:22:92:14:8b:f3:c3:ed:c9:
81:b8:85:e1:12:ca:6c:73:79:75:05:8b:c2:19:72:11:c4:75:
12:bc:6b:6e:65:b6:9c:10:cf:30:01:10:fd:ad:fe:82:bf:10:
29:ce:92:9b:aa:f2:6f:d3:f9:c4:1e:b8:84:db:70:9a:9c:d3:
b7:38:a0:d0:e0:79:d6:47:b7:9b:0f:3d:4a:69:41:4d:66:3a:
3d:06:11:20:ce:82:19:44:40:ae:71:68:bd:e3:be:a7:54:c8:
f0:e9:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:53 2025 by rpki-client