Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: 16Opr6EU/fubh2Hp2zJyzRTJo+QUv/cpB6RlcI/yyEE=
Subject key identifier: F8:D3:2D:39:8B:70:73:75:86:52:84:6E:4E:06:B4:32:F4:B5:C8:6D
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 0199221EBFBE0EF1CEF13DB351C663E98AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 0358
Signing time: Sun 07 Sep 2025 03:01:04 +0000
Manifest this update: Sun 07 Sep 2025 03:01:04 +0000
Manifest next update: Mon 08 Sep 2025 03:01:04 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: ow7cgyraj1sPimbzE3QeaIk/YP2uw80o9j2z0FI7TCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:bf:be:0e:f1:ce:f1:3d:b3:51:c6:63:e9:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Sep 7 03:01:04 2025 GMT
Not After : Sep 8 03:01:04 2025 GMT
Subject: CN=f8d32d398b7073758652846e4e06b432f4b5c86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:83:e8:fb:9e:11:23:77:af:66:9e:9e:04:
3a:6f:4f:c7:f5:0e:a6:d6:52:9a:c5:fb:49:2c:57:
72:61:f8:f7:e5:4a:92:01:3d:dd:f9:21:02:a7:08:
a9:f6:db:c9:2f:27:a5:1d:60:a3:81:6c:9d:ce:8d:
41:41:02:59:d4:cc:27:21:26:86:78:f5:0f:5b:af:
4a:7f:aa:3d:17:97:23:37:42:66:4f:ba:9d:22:31:
c7:97:a5:5f:02:fe:a6:80:13:22:45:a3:dc:93:24:
ee:f0:9a:4e:ab:d1:7a:f2:48:1f:35:9b:91:c0:6a:
75:5b:64:74:56:6b:ac:8c:83:55:60:94:2f:1f:e1:
e6:e1:1d:d4:a2:19:74:f5:de:a4:67:d3:a2:e6:a0:
dd:03:eb:c7:50:96:08:d3:b0:1d:cf:15:b9:11:d7:
39:32:75:04:fd:d1:bc:68:35:fc:ae:70:be:8b:46:
82:6d:c7:6f:97:df:d5:15:d6:59:a8:d7:72:74:55:
de:fe:69:54:8a:92:ba:2d:60:9a:33:91:87:3e:4d:
ae:a1:5f:dd:12:a1:16:be:c1:b5:c4:4b:32:fe:08:
13:45:50:11:70:93:f0:90:11:3a:60:58:bc:20:7e:
f5:97:08:4f:c8:8f:d7:34:d0:7b:01:ed:1f:a6:cb:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:2D:39:8B:70:73:75:86:52:84:6E:4E:06:B4:32:F4:B5:C8:6D
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d9:bd:f4:ab:9d:d5:50:12:6f:6e:8a:74:fe:f2:d1:d7:6a:
1e:e1:96:a6:87:65:f4:42:84:0d:05:c1:a5:e4:86:1a:32:28:
01:44:c8:0c:34:13:9c:62:f9:c2:4e:de:65:da:a7:3b:96:f1:
af:f7:7e:98:61:5b:7a:51:99:d0:3b:87:0c:91:3c:00:00:bd:
f0:0c:32:25:1a:61:07:79:af:cf:73:84:6e:dc:48:ef:48:4e:
1b:4d:0a:45:29:99:ef:3e:5e:ca:a6:f3:33:07:8a:8f:c5:a7:
48:3c:a2:b0:6e:3d:95:00:62:0f:0d:33:dc:4e:9e:c6:81:d1:
83:1c:c6:e5:5f:e5:7f:6b:b7:0d:60:33:04:81:39:b0:76:8e:
cd:d0:1b:39:ec:44:50:68:26:0d:e8:67:54:6c:51:a1:70:9e:
0f:ec:d4:09:56:e4:b8:cd:8e:03:5a:b0:41:ba:68:60:64:3f:
6d:3c:f8:31:0d:84:8a:c5:d7:c3:e9:1d:2d:e0:b0:e8:96:f6:
2e:f0:92:62:b0:8c:82:4b:48:3d:5d:ee:55:51:0a:53:a4:08:
e3:1b:f7:51:c3:af:0f:71:d8:5b:4e:ee:89:45:9f:12:a4:8a:
76:3e:97:d2:65:f3:75:41:c5:f7:7a:c3:3d:c3:28:e6:7e:c4:
98:4d:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:28 2025 by rpki-client