Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: YVzbcTtBZXNCFuaRqdetyqahVylq+e20YwavpyHaieY=
Subject key identifier: 72:D6:DD:0D:C3:90:00:41:5F:48:2B:E3:67:5A:C5:03:E0:53:11:4D
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 01992330EE801BF7C19136ED33437D3801EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 101E
Signing time: Sun 07 Sep 2025 08:00:33 +0000
Manifest this update: Sun 07 Sep 2025 08:00:33 +0000
Manifest next update: Mon 08 Sep 2025 08:00:33 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: J3vPz1u7OUMSbQ2xp/1ktfOiknBNgdNDo8E2qBWiIeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ee:80:1b:f7:c1:91:36:ed:33:43:7d:38:01:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Sep 7 08:00:33 2025 GMT
Not After : Sep 8 08:00:33 2025 GMT
Subject: CN=72d6dd0dc39000415f482be3675ac503e053114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:6b:6c:c8:05:85:39:dd:75:44:40:7c:aa:
b1:78:e9:b3:9d:f6:70:da:a9:4f:55:6b:c9:27:2c:
f4:24:96:c5:4a:b1:bd:46:e8:25:d4:d7:84:ab:a7:
dc:16:40:d1:04:b7:05:b7:d2:b0:ea:9a:27:88:bf:
71:98:f3:0e:c3:dc:c4:20:33:f8:35:1f:28:df:c8:
d4:ff:d7:c7:67:a0:2b:37:21:9c:41:56:39:6d:5a:
b0:49:c4:92:b8:bd:f0:42:4c:18:76:71:da:b8:1c:
99:0a:54:d9:ef:e2:c3:ed:24:c9:c7:80:d7:3b:a5:
59:db:b7:2c:36:b8:6e:23:cf:7f:8d:42:3e:fe:55:
75:f6:62:0f:61:63:e0:97:45:c6:e8:e2:50:73:43:
ed:9d:af:a8:b9:aa:75:41:fd:28:08:5f:1f:fe:2f:
13:c1:d5:65:5c:21:f2:66:80:8a:f3:ab:31:b1:de:
05:8a:e4:25:fb:a4:e9:b0:69:2e:20:5d:6e:e0:36:
9d:fd:8f:0a:20:45:f1:48:d7:86:c2:e7:e0:54:89:
9a:74:ce:4e:a7:61:b6:89:00:57:8e:a0:fe:be:69:
20:4f:e8:9a:a1:9f:e8:c3:bd:fe:cc:18:c8:2c:c8:
c0:73:d7:38:36:5d:12:52:22:1e:8c:4c:43:5f:94:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:DD:0D:C3:90:00:41:5F:48:2B:E3:67:5A:C5:03:E0:53:11:4D
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5f:65:a5:03:b4:b3:f2:35:c0:e4:25:4d:12:15:5a:11:de:
a4:0a:d4:9e:cc:3e:40:e7:23:40:8c:e3:1c:77:1d:76:f1:e7:
19:19:bf:50:f7:a4:59:f2:df:ec:66:0a:c2:a7:d5:a2:bf:04:
41:11:2c:e5:5a:57:1a:8f:6b:18:52:7c:db:d3:d0:75:62:c5:
bd:13:82:a9:08:8d:f0:9e:56:9d:e9:d7:d6:06:fd:b4:7b:f4:
b8:34:1c:7e:1b:9f:a1:16:77:67:1d:12:ad:8a:e6:78:8a:d2:
fc:18:83:a2:a9:32:c0:cb:74:0d:1b:c9:d3:91:b2:17:8f:9a:
02:74:64:83:37:d2:a8:ae:d2:d2:51:fe:18:e9:f6:60:9c:f1:
67:16:f6:d7:07:2f:78:30:06:94:cc:6e:be:be:d7:10:b5:fc:
b7:45:cc:ab:a8:e8:c4:fb:22:22:e4:51:18:e6:ba:88:ac:2f:
22:a8:a2:90:24:0a:1c:76:1b:d1:1c:0a:ec:d0:e0:eb:cb:e6:
47:9d:8c:4d:09:81:d7:f9:4c:89:a0:45:79:15:7f:75:40:b3:
c9:0f:53:b3:b0:15:2a:70:4d:68:b6:64:20:26:ef:32:14:64:
37:ba:51:e8:21:6b:dc:e4:e8:c4:eb:4f:66:61:ba:dd:b2:ef:
e0:eb:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:21 2025 by rpki-client