Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier: QxXbiEm/rqRxdtlVKIOIaEH5vkxO1ahYfjiybVI0Brs=
Subject key identifier: 63:6C:15:73:99:15:67:FD:11:18:0F:3D:1C:F5:A8:9C:5F:C5:4B:75
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 0199228CA0894A11E96197217E5AE7D9206A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number: 0E21
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: qUaH9SXeWQ1q2JhFg4l8PH+Qe49SJE2uMpQCzjJIEDA=)
2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a0:89:4a:11:e9:61:97:21:7e:5a:e7:d9:20:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=636c1573991567fd11180f3d1cf5a89c5fc54b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:b4:3b:fc:d6:43:ee:1d:aa:68:f5:dd:18:
39:f0:c2:90:a1:f0:eb:98:2c:58:ae:3a:7e:d3:50:
82:5f:8f:f9:4c:2a:03:a0:0e:29:78:b9:c8:1b:56:
d6:0e:6a:c4:6e:69:27:6c:86:34:72:ba:0a:bf:bb:
da:9a:47:47:3d:7c:7e:0d:25:67:a4:b8:34:48:73:
d6:08:f2:98:f1:88:b3:55:ef:53:b2:7e:75:da:bd:
68:44:5a:e6:a3:26:c2:63:41:53:d0:83:4d:25:72:
c4:29:23:ff:2e:62:8e:da:c6:23:8b:4e:ae:f8:44:
2a:69:a5:f3:e6:29:f9:60:83:19:77:7f:f4:4b:ca:
d6:93:52:a0:48:76:b0:34:4f:b0:61:10:2a:78:18:
2e:c3:96:37:79:a7:30:89:f6:06:78:83:ca:0b:b0:
19:90:41:d8:14:bf:2e:04:07:d1:2d:61:f8:7b:6f:
ec:f1:99:01:15:1b:be:a5:02:da:42:9f:87:fb:ec:
2a:61:64:cc:12:fe:24:73:ee:4b:28:34:50:20:79:
0f:7c:9b:0b:9f:e7:85:b0:55:02:18:62:38:22:10:
8b:18:1e:3e:2b:95:41:f7:c4:f2:3c:ed:89:a2:de:
8c:1a:9b:fd:13:d8:81:52:94:48:20:a9:90:61:f4:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6C:15:73:99:15:67:FD:11:18:0F:3D:1C:F5:A8:9C:5F:C5:4B:75
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e6:8a:38:e5:f4:1e:4f:fb:06:c7:f5:e2:ad:9f:27:54:67:
60:76:88:63:c8:9c:47:a2:75:53:48:ec:5a:ed:c6:bb:eb:35:
68:2f:a7:96:b2:a3:27:d0:68:71:23:37:c7:1b:55:dc:20:4c:
fd:15:8e:70:81:f7:db:e5:e9:b9:ec:09:51:31:73:c4:c9:b8:
12:f0:54:a2:a1:31:52:8e:ee:60:6d:65:0b:75:e7:a6:df:b4:
50:68:08:b5:ed:3a:48:a0:9f:87:dc:df:ac:ec:02:ef:fc:6a:
99:f9:40:d9:21:1a:a5:1c:47:6e:28:a3:6e:1e:e0:20:1b:f1:
af:b7:6f:8b:67:29:9b:15:14:74:ad:77:fb:e0:2d:61:b0:03:
1d:e6:de:82:fa:12:d8:3e:fa:d8:a0:82:96:f1:6c:f3:73:04:
ce:94:91:a2:65:59:0b:a4:2f:c5:5e:4a:03:25:34:11:34:42:
c4:f0:11:db:1a:48:13:8b:f0:b6:53:90:24:4c:3f:e5:3a:1f:
e3:c2:b8:30:20:3e:b3:78:97:65:2f:ee:d5:09:80:96:25:ea:
98:6d:d2:9d:67:58:05:a8:ae:91:b7:d8:ac:bc:4c:20:c2:8f:
0e:d2:45:eb:28:9d:7b:7c:b5:dc:36:af:93:4a:b9:1f:03:ed:
be:ea:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:39:32 2025 by rpki-client