Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: 8XoT+Y2LN6uhgiGf3B5VYAIg+DEtLnqSDGBGSfA+LCo=
Subject key identifier: E1:42:51:59:C1:7F:3D:71:A3:1D:12:8C:04:35:C4:DD:16:11:24:A6
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 0198C5A267946B184926B04FDA085F308A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0680
Signing time: Wed 20 Aug 2025 04:00:11 +0000
Manifest this update: Wed 20 Aug 2025 04:00:11 +0000
Manifest next update: Thu 21 Aug 2025 04:00:11 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: ILofEHbcuqONQQDqkTOOwuL37/aTKugqiiduBFBk9dY=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:a2:67:94:6b:18:49:26:b0:4f:da:08:5f:30:8a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Aug 20 04:00:11 2025 GMT
Not After : Aug 21 04:00:11 2025 GMT
Subject: CN=e1425159c17f3d71a31d128c0435c4dd161124a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:e7:a2:db:35:8d:5a:e3:b7:11:b1:c3:88:
3d:d7:a0:8d:17:e1:b1:bc:6a:96:b1:63:70:2d:de:
8f:1b:d9:dc:d4:f0:39:6a:e5:e2:b2:9b:ce:22:3d:
32:e8:6d:72:f2:fc:26:02:9d:5e:40:72:57:21:f9:
7c:4b:64:f8:24:cd:79:fb:09:95:60:e8:8c:22:d4:
15:44:99:dd:ba:ac:a6:75:f2:1d:0f:c2:45:66:0d:
7c:da:fc:04:5c:3f:b7:f9:2e:eb:09:28:63:a4:85:
40:b3:5a:13:1a:f6:f2:fe:8f:4e:30:08:bf:8c:4e:
d8:47:78:99:51:78:0d:46:6a:d9:e5:f8:ec:d1:c0:
01:96:08:f4:69:e7:a2:bd:05:da:cb:36:81:5f:52:
e6:03:3a:13:2b:da:fb:ba:fe:88:24:12:10:f0:88:
00:37:e0:ca:25:a2:ed:04:4c:6d:14:c0:08:2d:c2:
44:ab:08:22:bd:e6:59:c6:4e:59:98:58:ef:6c:89:
03:33:c5:c1:6e:23:67:c8:ef:04:e0:1b:e6:8c:5c:
dc:33:09:57:40:1e:a7:f8:08:07:42:65:a9:16:19:
e6:15:f8:40:73:41:37:1d:8b:ea:2d:17:8f:df:66:
37:c0:ac:dd:e9:02:25:17:d4:6b:d9:2f:f9:d0:ee:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:42:51:59:C1:7F:3D:71:A3:1D:12:8C:04:35:C4:DD:16:11:24:A6
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7d:40:96:18:8c:cf:de:f8:6f:10:d7:43:a0:52:9b:b6:7c:
1a:af:10:78:1c:77:cc:c1:d6:93:66:aa:10:cd:28:60:18:2c:
00:b6:25:a4:f6:1e:0f:1e:51:fd:55:d2:24:b5:77:be:18:2d:
c8:88:e1:89:00:55:97:a1:7f:82:00:6c:1a:17:a7:e3:96:4f:
85:b9:71:e8:da:0a:8b:9d:37:2c:da:99:cd:4f:d7:d0:c1:ad:
a5:ab:98:d9:66:e5:ad:9a:9d:5b:83:01:a6:86:8d:a6:bf:cd:
45:16:9c:3b:78:91:e8:fa:81:c5:7f:4c:ad:bb:45:43:15:f9:
5c:35:5b:05:cd:38:80:29:77:7a:c3:1b:e2:d7:b4:42:bb:cb:
14:91:23:13:f7:38:5c:3b:99:39:a7:f1:14:d6:6d:c0:1e:9c:
b3:9a:9a:56:5c:53:d8:e6:d5:6a:04:4b:cc:e4:29:50:dc:61:
ce:5c:55:d6:eb:62:3a:d8:fb:e4:eb:42:01:03:88:14:9b:3d:
75:21:14:e0:41:2b:fc:63:08:85:74:1e:00:81:b4:a2:49:a2:
59:46:fa:9e:c2:ba:9a:bf:55:5d:0a:89:ec:a6:63:de:66:53:
7f:b2:e9:45:34:23:c6:d6:fa:49:f5:88:82:81:3e:6c:23:92:
d9:07:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:40:24 2025 by rpki-client