Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: QAZaV+PuzkUCqgndJtY17ClPx7McNEy0/EMOIJ122yY=
Subject key identifier: AB:9F:E7:FF:2F:87:2E:CE:D3:EA:9E:9E:DC:7B:12:19:B2:08:DC:AF
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0198C6ED867925502C02A4800EE9038073F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1411
Signing time: Wed 20 Aug 2025 10:01:51 +0000
Manifest this update: Wed 20 Aug 2025 10:01:51 +0000
Manifest next update: Thu 21 Aug 2025 10:01:51 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: XLjz9WLl2rR2EWiX1+Y1Bhq9qKjP5cX+QT1X+rpY1sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ed:86:79:25:50:2c:02:a4:80:0e:e9:03:80:73:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Aug 20 10:01:51 2025 GMT
Not After : Aug 21 10:01:51 2025 GMT
Subject: CN=ab9fe7ff2f872eced3ea9e9edc7b1219b208dcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:13:2f:0c:38:10:50:1f:1d:da:fb:e9:1f:
96:38:7c:29:cc:e9:e7:82:90:ce:39:44:ed:a1:ec:
6b:96:d4:ee:f2:cf:5b:30:c4:1b:66:f0:96:fd:27:
0c:66:1f:a5:d1:18:ce:f7:85:26:83:b3:4a:38:a3:
14:85:b9:e8:1b:65:b7:5e:cf:24:c2:55:27:71:bf:
f3:68:dd:aa:9c:06:74:85:cc:c7:4c:82:81:fa:4b:
6a:68:83:e0:c0:e2:6e:17:84:41:d6:8d:42:8e:f1:
57:dd:0a:4e:0d:63:73:ec:74:8f:f6:62:dc:9d:c3:
6a:82:05:dc:c4:f0:70:67:4d:0c:7d:fe:52:62:6b:
ac:33:03:fe:6d:87:0a:9a:d9:87:f0:1b:b3:05:c7:
4d:ed:2d:dc:53:4f:8f:0c:65:39:1b:df:de:ef:d0:
40:3a:5b:42:80:68:1c:7b:9d:4e:d0:d8:24:1b:cf:
39:e1:71:41:4d:bd:15:b5:2c:45:bf:f7:c3:68:14:
c5:67:08:02:46:e3:c5:0d:3f:56:7e:20:b9:5a:bc:
57:5b:53:12:a2:46:4b:9f:ae:55:dd:ab:23:a7:fe:
31:c2:6e:71:47:e9:94:5f:4a:30:e2:89:da:4e:63:
0b:07:c8:33:5c:3b:b8:7c:3b:4d:fe:84:8b:0a:40:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:E7:FF:2F:87:2E:CE:D3:EA:9E:9E:DC:7B:12:19:B2:08:DC:AF
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:15:49:4f:a3:f6:94:8d:2e:32:c1:6d:00:0e:1a:a4:d7:
6f:20:c6:78:9e:79:24:e4:5d:87:22:32:e6:51:88:dd:17:8c:
63:2d:f7:9e:6b:e4:2f:f4:e2:fe:f4:32:4a:17:b0:03:47:7b:
be:50:b0:eb:cd:09:d9:bf:58:c8:97:47:0f:12:e4:a8:73:b1:
49:4b:0f:2e:c7:f8:f1:9d:bf:7a:dc:3b:22:eb:63:7c:cd:0d:
2f:ea:e7:ba:09:f6:b5:fd:68:45:7b:f3:e1:58:7e:15:12:a6:
04:67:8e:dd:d2:a0:2a:b6:b4:c1:c2:6e:e4:2f:74:d9:3a:22:
3b:39:e7:b0:30:50:cd:c8:6b:f6:7e:32:a3:97:38:72:4f:c1:
04:3b:bc:51:a1:f1:5c:12:53:be:fc:c6:9d:4c:11:8f:87:ee:
41:6d:75:c8:7a:91:df:cc:da:b7:87:6a:f3:c2:e2:31:a4:d1:
23:6e:3d:57:5c:46:09:f5:7a:69:9c:5a:7f:aa:12:ad:2c:60:
d0:aa:9c:e4:b9:bf:d4:be:a1:fe:87:3d:b3:a9:3e:e1:ee:18:
45:d3:35:90:b9:f7:b8:60:d5:ca:41:a2:9d:8a:e4:06:14:6f:
6c:d6:6c:e6:0e:ae:e3:e7:32:bf:48:34:6e:0b:90:1f:3e:23:
ab:a5:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:20:15 2025 by rpki-client