Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: JaT3ZLr+dpGwXBAqmQ0WyTqdM44ObAIXI1NZihcZbQ8=
Subject key identifier: E4:5A:05:62:C2:7C:CC:C2:D8:91:BB:5E:F7:9E:7D:C0:83:2A:10:06
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 0199228CC2C5474C546758D22A6A5171B72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 1344
Signing time: Sun 07 Sep 2025 05:01:14 +0000
Manifest this update: Sun 07 Sep 2025 05:01:14 +0000
Manifest next update: Mon 08 Sep 2025 05:01:14 +0000
Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=)
2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: 82P+LYPo5SVb1dk6soN5ki9/tkPr6Y0EYisaWsAEXwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c2:c5:47:4c:54:67:58:d2:2a:6a:51:71:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Sep 7 05:01:14 2025 GMT
Not After : Sep 8 05:01:14 2025 GMT
Subject: CN=e45a0562c27cccc2d891bb5ef79e7dc0832a1006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:90:1a:f5:64:6c:87:df:28:d4:a6:c3:23:
dd:4d:46:13:8b:60:cf:3e:48:b4:64:dc:5f:9b:9a:
f0:e4:46:c1:1b:c5:0b:8e:0a:bd:5e:8f:2c:48:7f:
01:2d:c7:4f:00:01:20:52:e8:c9:06:b1:af:bf:d8:
ac:be:8b:b5:55:7a:5d:2c:b0:4e:cf:70:d4:59:6d:
72:39:ef:be:7a:ac:3d:a2:60:db:3a:21:ee:db:38:
67:58:a7:36:d8:75:ac:d7:b7:f4:c1:ed:59:e6:4e:
5d:4a:64:1f:df:5c:b4:d4:4a:62:c5:0c:c4:bd:14:
ea:b6:89:7a:5a:13:7d:38:6b:f7:11:e1:c6:27:6b:
06:33:d7:45:c8:af:6d:35:3c:bf:25:de:08:5f:d8:
ac:71:ea:1f:ba:8a:09:05:b0:69:78:5c:8f:e4:ca:
d9:fa:b1:4b:d2:d0:e3:70:53:75:ab:cb:c6:89:12:
4b:bc:38:23:db:f5:0a:32:83:74:98:87:5d:a2:22:
c5:5f:ae:5e:ce:fe:e7:c7:6e:64:7d:0d:69:8f:d2:
1a:be:0e:b7:64:c5:17:52:8c:4d:82:2f:e3:0c:16:
63:38:ff:1c:6d:a1:7e:e4:9b:38:f6:48:99:af:ed:
9b:6c:81:ff:1f:76:88:d7:35:01:6b:c8:cc:3e:34:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:05:62:C2:7C:CC:C2:D8:91:BB:5E:F7:9E:7D:C0:83:2A:10:06
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2a:17:d4:c0:42:3b:ea:7b:d2:7e:3f:4c:78:d7:f4:9b:4e:
cc:bd:d6:8d:aa:c1:be:1f:fb:55:00:58:69:45:48:94:a6:96:
40:cb:de:37:74:2d:8a:f5:ca:22:f6:2b:be:eb:05:53:db:55:
e6:3d:a8:0a:1e:c4:db:45:fd:60:7f:87:c4:36:67:5c:7c:07:
23:7a:e4:d3:20:bd:81:98:0d:68:95:9e:39:f8:53:2c:43:19:
61:e0:f6:e9:6b:5d:b5:07:5c:76:b9:a9:3b:10:03:52:87:14:
83:64:47:e8:e3:b0:70:4f:34:52:df:18:02:a3:38:07:92:4d:
d6:39:16:06:00:f8:a5:5f:28:17:25:ca:de:7e:42:00:dc:cd:
83:cd:14:56:27:a4:88:4f:db:97:a8:9c:c4:cc:cb:aa:db:24:
77:26:c9:5e:bc:86:3c:84:71:8d:0f:86:6b:b2:c4:86:58:7e:
db:db:b8:7d:25:3e:25:43:be:20:02:ed:07:70:3f:5f:6e:ee:
f0:5c:f6:de:4c:c4:bd:8b:34:57:ea:52:6f:e9:ab:70:00:0f:
3d:c7:6a:a5:4d:c5:7b:a2:05:94:de:a5:ce:2f:f4:3b:be:76:
41:4b:00:b1:3e:08:d2:f1:f0:57:a2:0e:c6:7d:d5:f5:e1:39:
07:26:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:33 2025 by rpki-client