Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: riE7+mqDWcRiGBVk7ZDMrPCQVeMT0xszzJpUVbyqcDE=
Subject key identifier: A7:69:D6:64:18:58:F2:26:0A:E3:B4:FA:DE:E1:04:81:90:B4:38:57
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 019921E76699D5E1388EDD5E03D80AEC7F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 0688
Signing time: Sun 07 Sep 2025 02:00:37 +0000
Manifest this update: Sun 07 Sep 2025 02:00:37 +0000
Manifest next update: Mon 08 Sep 2025 02:00:37 +0000
Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: pA+lTNYsDHGTEMsT/FWGwPOPWpGAIx7DwMFt/QLC6FQ=)
2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:66:99:d5:e1:38:8e:dd:5e:03:d8:0a:ec:7f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Sep 7 02:00:37 2025 GMT
Not After : Sep 8 02:00:37 2025 GMT
Subject: CN=a769d6641858f2260ae3b4fadee1048190b43857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:93:af:02:27:7e:bd:64:c4:37:cd:3d:99:
37:0e:06:45:c6:fd:90:92:56:b9:0c:3e:ce:bf:24:
c2:bb:8e:1d:a5:7f:1b:21:31:0b:7f:63:49:30:a0:
83:61:7e:72:ba:66:ab:88:a7:0b:7c:c3:6a:9e:aa:
63:87:b1:11:ba:8f:e6:08:3c:74:bb:4a:3b:65:47:
1c:4e:4a:80:ae:32:8d:b1:00:ec:04:a9:92:1c:40:
d8:4a:ac:2b:95:48:e8:24:12:13:be:b5:59:df:a7:
59:d1:c5:cd:f9:dc:78:aa:82:08:7e:e4:86:f1:8d:
be:65:0a:66:8e:9c:e5:b9:a4:07:9e:25:da:21:6d:
0e:54:11:5e:31:ff:6f:db:4b:c1:3d:3f:cc:1f:9b:
70:fd:e7:89:d3:a8:a8:12:0c:c6:fb:bd:52:e1:32:
d2:6c:5b:82:50:76:13:91:85:c2:37:f7:64:8b:f2:
26:b5:39:40:6c:b2:79:3f:d6:c9:e7:fd:39:48:26:
c4:03:53:7c:2d:24:a0:ef:2d:38:09:41:d6:9a:42:
b9:20:b7:cf:04:9c:44:74:c1:99:40:2a:8a:d1:8c:
80:33:c9:80:93:f1:29:db:c4:dc:4b:cc:49:e8:8e:
f3:bc:e5:08:aa:4a:ae:54:87:39:eb:0e:3e:82:c3:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:69:D6:64:18:58:F2:26:0A:E3:B4:FA:DE:E1:04:81:90:B4:38:57
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ca:a2:58:24:6c:9a:99:67:7a:32:12:e2:f8:8a:99:9a:9c:
34:49:6a:5a:91:91:dc:05:a6:00:7c:69:0b:0b:f6:7e:6e:c4:
7a:8a:5b:f5:18:a1:82:47:c2:47:47:f7:76:62:24:4e:4a:51:
93:f2:90:33:f4:4d:40:b9:0e:92:00:1e:28:6e:3a:17:69:fb:
5a:70:02:6c:0c:a7:93:dc:8b:a0:a0:30:22:62:97:cd:d9:5c:
fb:4d:38:c8:a6:bd:f5:50:12:b4:2e:3d:b5:c9:f2:14:b4:a8:
25:a4:a2:6a:93:b9:ba:b1:28:49:9f:99:24:65:22:c6:69:48:
3e:91:dd:71:62:e3:cf:7c:15:4c:d3:3f:8f:e0:20:c1:79:a0:
dd:28:4c:39:f9:7b:3b:fc:14:e8:f3:9f:31:eb:13:47:4d:eb:
e1:1f:77:4a:42:e7:e1:05:5d:d9:e3:01:d1:0c:5f:86:8d:53:
b3:ad:b9:77:e1:b2:78:f1:e8:57:c1:dd:45:ce:17:ee:e5:37:
c9:c4:33:4c:69:fd:19:0f:69:f0:b6:19:73:02:18:ea:3b:66:
7d:0f:f9:b3:14:e0:fb:98:56:c4:47:da:5b:c5:c7:e5:69:58:
c5:61:ae:ef:95:06:d3:b7:b5:18:ed:bf:5f:97:c3:23:e5:98:
2c:89:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:16 2025 by rpki-client