Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: DPnwcJ5yuhLsCCY1ucKUHmP+TkXw4pR/toacPqExb38=
Subject key identifier: 07:6C:07:AF:07:97:CB:FB:CC:0B:A3:6E:7A:DA:9A:DA:9C:2F:BD:37
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 0199247B1EF56F80F2454DC52801FE8DDF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 1382
Signing time: Sun 07 Sep 2025 14:01:12 +0000
Manifest this update: Sun 07 Sep 2025 14:01:12 +0000
Manifest next update: Mon 08 Sep 2025 14:01:12 +0000
Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: 0Yqauj9CL80fGHNUObaTR7mahqBHHntXvEDlUnedyqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7b:1e:f5:6f:80:f2:45:4d:c5:28:01:fe:8d:df:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Sep 7 14:01:12 2025 GMT
Not After : Sep 8 14:01:12 2025 GMT
Subject: CN=076c07af0797cbfbcc0ba36e7ada9ada9c2fbd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:29:ae:de:b1:8c:67:3f:8c:67:ef:13:ae:
64:65:b5:82:f7:72:8f:3d:17:ac:65:2f:d9:cc:ff:
57:0a:4a:a4:69:cc:2f:03:49:97:10:0b:83:c0:bd:
d3:36:c2:7e:69:5e:6d:4f:3c:f5:23:c6:63:d4:96:
87:6f:2d:cb:63:bd:0b:b4:7a:b9:97:5c:cd:b8:95:
81:9d:67:10:5a:bf:fe:fe:a9:bc:5e:d4:5b:80:90:
12:35:94:ae:60:13:8e:2c:2a:aa:7f:c1:d4:e5:1b:
d8:d3:cb:e4:d6:39:79:b2:36:e7:2b:57:70:43:15:
21:6c:0b:f9:e2:c2:b5:77:77:42:d0:36:d8:56:31:
49:13:91:e9:7b:e9:67:ae:cb:ac:07:55:82:61:00:
72:e5:68:30:d5:3e:36:3c:57:c6:df:fd:77:ad:3c:
a3:84:3b:60:00:08:ea:c2:2b:a6:5c:e9:5e:7f:fb:
c1:aa:d3:9f:81:af:db:de:ac:5e:f7:c7:d6:53:57:
40:1e:7e:05:70:37:dd:c4:cf:f8:1c:81:ff:05:ab:
20:b3:10:1c:b5:67:5a:45:fe:8c:a5:3c:10:b7:ce:
44:a3:41:a1:13:0f:fc:09:bf:76:1a:e4:9c:df:9c:
46:08:d9:4b:28:77:ff:df:32:ab:f5:4a:ad:df:04:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:07:AF:07:97:CB:FB:CC:0B:A3:6E:7A:DA:9A:DA:9C:2F:BD:37
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:87:56:49:6c:2a:c9:ee:99:78:0a:cd:54:2e:68:a7:fd:1b:
50:38:ef:66:d1:2c:18:e9:33:51:4d:22:35:04:73:5b:db:9e:
4f:60:a3:3c:d6:c5:c5:9b:25:49:7b:c7:ce:b5:b9:d5:0d:33:
61:1a:80:a9:8d:46:37:de:d2:1e:f9:5b:5c:6d:42:4f:73:d2:
e6:d7:41:4f:10:20:63:0b:27:68:40:45:18:18:dc:35:23:3c:
1c:d0:28:a8:9a:2b:f0:5f:bb:b8:ec:f9:0c:8b:4f:3f:79:2c:
97:31:6a:c9:dd:14:9c:77:9c:7e:1f:49:8a:ed:d4:03:31:1f:
07:85:eb:b3:25:bd:8f:03:22:60:32:fb:22:4d:bc:f2:f6:b8:
bb:2c:90:80:44:ac:49:34:fd:e1:86:63:90:99:75:7e:22:dd:
0a:f4:56:4e:06:40:89:0e:7f:21:8a:fd:d9:d0:f7:b6:e3:a0:
60:53:27:4c:a5:67:40:a1:b3:e1:95:2d:40:b4:de:c9:be:39:
97:03:42:26:ce:2a:a2:97:af:39:f5:e2:c1:96:91:0e:b1:92:
6e:5c:27:0c:b5:0b:43:ab:d5:46:b1:49:8b:4d:e9:18:a0:6f:
26:9b:f5:d9:05:5d:13:e9:85:4d:02:e3:36:c1:c9:f6:ba:bf:
6a:d6:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:58 2025 by rpki-client