Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: YMVM4wKXqU07D72xQMPjNQCs2p3gdyfTkRcXQFnAiVo=
Subject key identifier: 4B:90:4F:CD:02:EC:0F:6A:F5:F5:14:9D:60:91:4D:C6:7F:2F:8E:1B
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 01991CF845D70BAB688F2AB6E25B2483056B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 0F8C
Signing time: Sat 06 Sep 2025 03:00:56 +0000
Manifest this update: Sat 06 Sep 2025 03:00:56 +0000
Manifest next update: Sun 07 Sep 2025 03:00:56 +0000
Files and hashes: 1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=)
2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: GlWWBE/sdR1X8AD67rSZCYcUevgE9pWon+7J1MCly0U=)
3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:f8:45:d7:0b:ab:68:8f:2a:b6:e2:5b:24:83:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Sep 6 03:00:56 2025 GMT
Not After : Sep 7 03:00:56 2025 GMT
Subject: CN=4b904fcd02ec0f6af5f5149d60914dc67f2f8e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:61:fa:64:c8:f7:da:cd:ec:95:4e:bf:13:
43:03:07:ef:b8:6c:de:9e:90:a3:24:62:a7:51:c2:
40:c0:68:7c:97:31:22:03:34:cb:62:0c:0a:9e:30:
40:b4:d4:cf:81:17:95:5d:a1:5c:bc:4d:fb:67:92:
e7:33:98:75:12:3f:9f:38:ef:d0:4c:1f:01:da:8c:
3d:01:dc:b9:cb:e6:7f:ed:bd:b6:37:0f:ea:58:4f:
13:42:e2:52:27:1e:01:0d:57:99:90:cd:3a:ed:2a:
37:03:4d:95:9f:3f:aa:b8:db:ba:95:2b:8a:21:93:
a6:d0:93:1a:23:e6:cb:69:a6:7a:d2:23:72:bb:1b:
ac:55:21:b9:50:53:b4:1a:95:b0:5e:f5:fe:7b:c6:
4f:ec:de:de:ec:9e:4d:ce:25:a0:32:9e:f7:52:7a:
94:34:62:5c:13:2a:5c:88:26:04:8b:e1:1e:05:36:
d5:c8:08:2e:da:1a:69:95:91:9e:59:de:39:4b:fb:
f4:51:91:8d:3c:cd:d2:9d:ab:60:8e:27:9a:82:f9:
42:53:50:51:7d:f7:01:5b:ac:d7:dc:a5:87:56:fd:
ea:85:a5:ee:0f:3a:e8:d4:f0:ad:f5:e1:5b:fa:ca:
86:f5:fe:ce:91:29:39:28:54:77:43:01:dc:21:f8:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:4F:CD:02:EC:0F:6A:F5:F5:14:9D:60:91:4D:C6:7F:2F:8E:1B
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bb:f0:d8:7c:8c:55:6e:3c:b0:a9:bd:13:15:18:46:ce:40:
f3:c8:91:64:8e:df:ab:52:79:75:2e:9a:bf:96:a9:ca:90:ae:
15:68:92:c0:19:70:68:34:d3:b4:11:34:8d:d2:90:44:5f:99:
fc:be:4a:68:12:e8:b9:a5:a7:44:d4:7f:85:5d:08:90:18:64:
b5:b5:04:17:26:52:aa:96:9d:21:8c:9f:26:d1:f5:76:bd:24:
76:2b:e5:41:7a:85:31:f1:ef:13:ae:f6:a3:d5:74:d8:6d:6b:
9f:fd:bf:e5:08:df:ce:c5:4e:df:af:ca:c1:91:54:49:13:14:
bd:02:14:7f:ae:56:34:c9:58:7d:91:af:fd:4c:38:8d:76:97:
27:92:43:44:e1:44:37:5b:d1:99:33:a2:e7:c8:5d:71:3e:51:
4c:9d:f1:46:a9:28:50:e4:9e:15:10:4c:4c:42:97:1b:78:90:
e2:f8:08:7f:a2:51:08:52:c0:f1:17:15:1d:ac:ba:db:50:94:
5b:42:3a:6d:96:ff:39:9a:63:d7:94:bc:0e:65:22:1d:d8:45:
0d:9e:20:e4:63:ac:6c:90:98:46:07:5d:7c:4c:9a:71:bf:76:
60:2e:e3:2e:9d:48:0c:87:e3:e3:07:03:95:da:db:db:f5:95:
94:cd:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:05:54 2025 by rpki-client