Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: vmQ09ZkBrVdu/oZDCk1M3pLmexSw/jeJZ7ftqs0stcA=
Subject key identifier: 3E:95:14:65:0E:72:21:8B:F5:4A:76:E6:99:B7:3C:9A:37:A7:3B:82
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 01995943B0E26CB49990EAFA9700B415399A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0E1B
Signing time: Wed 17 Sep 2025 20:00:32 +0000
Manifest this update: Wed 17 Sep 2025 20:00:32 +0000
Manifest next update: Thu 18 Sep 2025 20:00:32 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: PSuu/bpdb873NiNMDN4AsTpG8HGCvX45jUDbxjrbZWQ=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:59:43:b0:e2:6c:b4:99:90:ea:fa:97:00:b4:15:39:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Sep 17 20:00:32 2025 GMT
Not After : Sep 18 20:00:32 2025 GMT
Subject: CN=3e9514650e72218bf54a76e699b73c9a37a73b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:ca:c8:9c:f9:1d:f6:b7:b9:ef:05:ad:f0:
09:08:12:aa:b9:d9:ec:6a:30:9b:af:2e:95:b7:b6:
0d:ec:61:13:de:e2:f3:82:7e:c9:78:e7:a0:fd:5c:
04:32:9a:5c:42:d0:40:48:90:a1:10:d5:b7:8e:25:
49:95:9b:f5:49:96:2c:b3:f2:30:72:12:b5:19:d3:
0a:06:7f:59:c8:e1:39:17:6d:fa:6d:99:df:6f:16:
4c:bd:11:bc:1c:06:39:f8:40:d0:23:99:f4:bf:0a:
de:c2:cc:89:1f:1d:92:9a:b0:03:ca:64:b2:23:16:
89:20:8d:d4:ea:24:96:9c:dc:8c:50:f8:2d:67:f6:
55:3e:c7:9f:6f:fc:e0:b1:f7:0e:d6:0d:83:51:d7:
2a:51:c4:e5:77:66:a3:66:34:7b:7a:64:07:b8:57:
76:0c:15:61:37:7a:5c:14:32:85:4c:dd:16:ce:0a:
36:17:0e:b9:6a:bc:97:41:98:0a:20:c8:ef:21:05:
2d:e2:c8:c1:3c:aa:7f:a1:d3:df:48:ae:88:b6:c9:
63:f7:ae:58:bb:dd:bc:e2:31:97:ee:df:78:bc:6b:
6e:24:ae:96:0a:d8:d8:93:ef:50:9c:51:ea:ab:13:
44:61:ce:c2:35:9b:69:7e:f7:98:2b:aa:6f:ee:5a:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:95:14:65:0E:72:21:8B:F5:4A:76:E6:99:B7:3C:9A:37:A7:3B:82
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1e:e8:cb:09:f9:b3:a1:af:97:4c:b5:75:ad:19:3b:c0:3c:
d7:4c:ff:d8:79:7b:a7:44:5c:6f:4c:49:94:df:17:a6:8f:ae:
e8:6c:b5:48:c5:4f:6f:ef:35:64:da:02:8d:eb:58:be:5c:31:
c5:69:8c:6f:fc:58:8a:f1:a2:b0:54:5b:33:52:9c:0b:0e:d9:
20:df:68:81:09:59:97:54:e6:ae:53:e8:81:d0:0e:06:f2:18:
c0:e3:ee:52:2e:f3:b6:44:50:0c:43:f1:cf:c3:08:30:21:68:
a0:5d:48:57:d1:f6:1e:2f:94:c2:ea:ef:d3:a1:18:fe:13:a6:
4e:70:b8:c6:28:5e:59:51:e0:ac:e7:eb:46:7f:b8:0b:cb:5d:
69:74:24:38:ac:c9:d0:78:cc:58:b8:0a:80:08:34:fd:e1:9a:
a2:90:33:90:7e:97:bb:e2:4c:85:8f:ee:b2:2f:bd:9d:3f:e0:
6c:06:3a:3e:15:bd:19:33:04:18:a2:ff:d8:28:f1:81:2b:cf:
37:13:09:79:2a:37:ad:57:06:3d:21:26:06:42:e5:cc:01:64:
fc:c5:8a:89:ba:9f:bc:d4:41:7a:57:d9:a1:58:ae:ac:fb:5c:
ac:37:40:8c:c8:54:3c:bc:d0:85:60:2a:46:97:4c:f6:96:6a:
8c:ee:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:05:03 2025 by rpki-client