Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier: amnjJmoHchZXIW/QssJnWqE4efKw8aHVYYG2OrGlf7w=
Subject key identifier: 42:5C:2B:37:68:CB:59:E0:22:5A:46:74:79:E8:9C:9D:B6:EF:D7:B2
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 0198499C41F849B37B2CDFD1C2E468FFD7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number: 12AD
Signing time: Sun 27 Jul 2025 02:00:33 +0000
Manifest this update: Sun 27 Jul 2025 02:00:33 +0000
Manifest next update: Mon 28 Jul 2025 02:00:33 +0000
Files and hashes: 1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=)
2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: tfH/C+m0NZcpjSXMbA7dLtT1wFqlVYHbZXf3X2xs7kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:41:f8:49:b3:7b:2c:df:d1:c2:e4:68:ff:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Jul 27 02:00:33 2025 GMT
Not After : Jul 28 02:00:33 2025 GMT
Subject: CN=425c2b3768cb59e0225a467479e89c9db6efd7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:01:a2:ca:d3:37:d6:55:3d:59:c4:d8:6f:
b7:9b:c7:0e:4a:6b:23:78:75:43:dc:08:f3:1c:3a:
66:ed:18:13:78:da:42:2e:3e:01:36:2e:b9:33:c1:
69:14:76:9e:e6:c3:22:d0:cc:91:81:e2:ab:a9:db:
9a:85:33:95:ba:3f:24:78:5e:85:29:65:13:3d:ba:
fe:90:63:59:c5:6b:ed:1b:c3:4b:78:9e:fa:0f:38:
a1:01:e5:d3:da:17:bf:85:43:dd:bd:33:c1:53:d5:
b9:97:ff:9f:ec:ed:aa:da:80:4f:3f:55:ff:44:d9:
c4:5c:a9:82:f0:8f:6a:72:9e:0e:3b:8b:9c:ab:c9:
54:cd:64:5c:80:14:6b:df:f3:35:c6:6d:93:a3:2e:
67:8b:ce:20:08:a3:18:6a:07:cb:c6:ae:2b:6b:d1:
2f:dd:cc:60:88:60:a3:75:e9:f3:3c:ea:6d:a7:6e:
51:84:e7:38:85:c9:96:3f:11:aa:f7:18:d5:ea:b6:
c1:9f:e9:c9:e4:4a:28:45:4d:fc:c9:6a:94:f2:05:
ac:a7:00:97:10:04:9d:f6:66:fb:ef:be:71:9a:73:
07:3f:f9:10:1e:14:0a:19:d8:72:1a:46:ef:93:af:
e4:69:2e:60:d3:9a:10:15:94:a4:96:c7:b6:27:c6:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:2B:37:68:CB:59:E0:22:5A:46:74:79:E8:9C:9D:B6:EF:D7:B2
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:b8:fa:a2:6f:6f:90:48:47:7a:1f:da:d9:82:c3:31:41:
d3:6d:71:54:9e:88:75:2e:34:f1:3a:6e:2e:88:8b:c0:01:76:
60:a4:a6:d7:ae:8d:ec:05:1c:07:07:b0:f3:44:1a:98:00:27:
a8:c6:29:93:41:4f:23:ca:b7:59:7a:aa:2e:2e:15:ea:f1:02:
b1:06:df:3d:30:29:c9:4e:b6:b0:48:e6:c6:9b:36:84:06:dc:
f4:4d:93:5e:d8:8c:83:c9:4b:3c:e2:bb:71:cc:8e:3d:91:df:
2c:12:24:73:18:9e:58:cc:c8:f5:53:f7:af:14:cb:f4:f6:63:
96:31:25:20:b8:89:e2:6d:64:6d:a5:c1:9c:96:e1:15:c2:71:
cc:69:8e:98:cd:db:63:6e:24:00:e1:58:09:d2:a1:55:26:6d:
a2:e7:70:44:f3:ba:38:d0:3a:ff:85:e7:fb:bc:83:5d:9c:10:
cb:82:4c:07:9c:99:d8:74:bd:ab:57:d2:8a:f5:c7:04:a6:86:
b9:5b:73:6d:8a:68:3c:4a:86:d4:a2:93:6f:70:88:5b:4e:bf:
9a:3f:0c:7d:f3:d8:fc:b9:7f:c8:94:38:05:ea:3e:73:a1:c0:
4d:a9:5b:72:75:3a:c9:46:66:72:3f:ab:37:88:df:ae:d3:cf:
00:0d:48:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:09:01 2025 by rpki-client