Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
File: QVHWtEHT9XdiwDL4-tIXYIoi96E.mft (raw, json)
Hash identifier: Bh2d66iD0ED2da5Y+viuMOLJsgwkGYWv+HO2T6en35Q=
Subject key identifier: 4F:4C:84:FB:8E:70:A7:29:4A:9A:70:6A:1E:80:46:0F:21:4F:61:B6
Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Certificate serial: 019922FA672053AAC37C624D5BBFA636CD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:00:59 +0000
Manifest this update: Sun 07 Sep 2025 07:00:59 +0000
Manifest next update: Mon 08 Sep 2025 07:00:59 +0000
Files and hashes: 1: Im-QceSwk2rydy4UnBzai_RFayI.roa (hash: 7cmPd6tOwgpnXHTZZ7ExgoosfdS4LnMMgIaEbvg4EPQ=)
2: QVHWtEHT9XdiwDL4-tIXYIoi96E.crl (hash: 92w8Zzh4G8vbVGJn66vuG97RqgK5Du142pZHFE5mEpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:67:20:53:aa:c3:7c:62:4d:5b:bf:a6:36:cd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Validity
Not Before: Sep 7 07:00:59 2025 GMT
Not After : Sep 8 07:00:59 2025 GMT
Subject: CN=4f4c84fb8e70a7294a9a706a1e80460f214f61b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:2a:91:61:e7:29:5d:08:ad:68:eb:5d:cf:
86:4f:7f:42:e9:cd:d5:ad:81:72:76:ce:df:b3:73:
e4:bc:25:a8:89:f0:76:b4:99:1c:75:d5:83:6c:8c:
2b:42:d1:5e:39:e7:fb:42:64:9f:99:b2:e1:50:32:
4c:7a:df:ae:95:60:da:ed:0a:5c:0d:60:af:96:3d:
c8:ac:4a:4c:32:f4:6a:7a:d0:65:a9:be:45:2e:f8:
3b:1f:0b:57:f0:9c:4b:94:bc:df:4f:29:72:40:6f:
15:9c:ee:82:1b:b1:a7:ca:6e:b3:b2:a7:e9:0c:5d:
75:59:dd:b8:f1:e8:a7:20:86:31:a2:52:74:41:77:
f9:f5:f6:d4:39:66:16:25:b2:50:21:f1:8e:f1:b5:
72:14:c5:83:f4:ed:56:ea:b9:66:72:ea:e2:55:a5:
7f:38:75:41:08:76:03:33:b8:b8:c3:b8:c6:db:d1:
4d:8e:e0:cf:55:65:17:8f:37:96:7a:81:73:17:0f:
d4:86:1c:79:a3:ae:56:1f:4e:a1:59:6f:c3:9d:13:
bc:94:54:26:30:32:6e:50:0e:f3:a4:29:8d:9b:b9:
d9:23:7d:7f:30:3e:e7:fc:db:ca:ab:29:da:98:58:
2c:75:be:55:01:59:48:b1:49:65:11:cd:39:e0:48:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:84:FB:8E:70:A7:29:4A:9A:70:6A:1E:80:46:0F:21:4F:61:B6
X509v3 Authority Key Identifier:
keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5f:0d:3c:df:19:dc:4d:8e:44:e8:77:5a:6e:c3:76:3e:96:
56:55:8f:ea:58:1c:9c:a9:61:5b:d1:e1:30:b9:b0:fd:c1:a9:
b6:3b:69:b2:09:cd:ae:b3:39:2c:85:43:0f:5d:e3:c1:f6:f1:
27:34:a9:10:0f:dd:aa:e6:29:2c:4c:fe:1e:9b:68:2a:8e:84:
18:d1:4a:cd:52:ee:0a:b5:ba:67:c4:58:a3:d4:84:50:09:df:
aa:0f:3b:07:83:e1:38:5a:5a:80:aa:b5:8e:65:e2:03:86:1e:
d1:ca:6f:ec:43:31:00:b7:ab:f4:be:7c:b1:30:4e:8e:b2:94:
dd:ed:d6:b7:9f:eb:78:be:39:fa:24:84:df:00:9f:fb:c9:c0:
6c:2f:b8:93:2a:76:7d:c0:eb:89:f9:c8:0c:df:ec:48:23:62:
9f:60:63:f3:37:c7:22:46:0e:04:16:a1:a3:d9:43:89:bb:64:
a7:17:8b:99:85:20:64:d3:ae:88:4d:25:b9:df:b4:5a:f8:af:
69:58:ec:cb:bf:81:6f:40:1e:03:5d:94:92:cd:ee:7e:a3:db:
e5:28:c5:72:1e:77:ab:67:25:4d:a1:79:35:de:ac:6f:f1:a5:
58:f2:2e:40:ec:6d:be:8f:39:16:2a:c3:7a:68:e0:fb:49:6d:
f8:f5:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:56 2025 by rpki-client