Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: svm4g+xxBM0RvjvEYo+cA7ShCZBp8PtDT2MKV3Twq8M=
Subject key identifier: 90:43:49:A2:7E:87:70:D6:83:99:F1:FF:42:CC:20:A2:62:DD:AF:D3
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01987450B22CAC33FC72C29F17146AAB169C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 09:01:42 +0000
Manifest this update: Mon 04 Aug 2025 09:01:42 +0000
Manifest next update: Tue 05 Aug 2025 09:01:42 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: 4yIIV996xWjxbp1arLCz+lVPFl6TIpfMqHqA8YHwefU=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b2:2c:ac:33:fc:72:c2:9f:17:14:6a:ab:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Aug 4 09:01:42 2025 GMT
Not After : Aug 5 09:01:42 2025 GMT
Subject: CN=904349a27e8770d68399f1ff42cc20a262ddafd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:2b:bb:0c:be:ae:15:18:4d:a9:f9:0a:5b:
97:67:81:d3:a2:74:b1:ae:9b:9e:05:a9:1c:d1:af:
b4:62:1f:65:1c:9d:88:89:8b:1b:d1:63:3c:32:ae:
40:d2:57:6d:ce:10:50:2f:89:c1:70:a3:1b:00:67:
bb:49:63:4b:95:c5:b5:50:c7:79:ba:6a:9e:0e:50:
71:2d:44:3b:cf:5c:25:74:e3:b5:db:7c:1e:af:63:
0b:65:0f:fb:3d:9a:5a:8b:38:b8:49:aa:d3:f0:6f:
ca:aa:7c:b0:f1:b9:47:61:97:3a:8a:c3:f6:79:30:
7f:0d:05:7a:86:64:da:4a:d1:d7:82:3b:87:94:03:
2e:dd:c3:52:84:57:e9:db:f6:24:b2:34:73:8e:c2:
b8:6f:41:e6:ee:ae:1f:b6:08:07:2a:f0:29:40:3a:
a6:26:c1:fe:f0:45:fe:81:cf:d4:9a:be:0c:6a:89:
0b:cb:a1:c2:88:d5:73:35:d7:f5:db:30:3c:08:85:
8f:6e:d1:75:14:19:fa:d8:a5:d9:91:9a:67:89:fa:
68:a6:aa:d7:9d:de:f8:0e:84:4a:19:01:86:92:d6:
3e:a1:da:85:5d:aa:74:18:fd:2a:bc:9e:42:36:de:
cd:53:d0:46:ce:75:67:bc:b2:65:92:87:42:12:be:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:49:A2:7E:87:70:D6:83:99:F1:FF:42:CC:20:A2:62:DD:AF:D3
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ae:32:dd:d6:78:14:26:16:65:cd:1d:1d:25:d5:f3:b8:e8:
74:65:60:9e:c8:31:8c:b5:f7:d3:c7:8c:79:bb:af:5c:ab:39:
92:0e:19:3a:80:86:f2:7e:67:6f:28:44:c2:eb:26:b3:9a:7a:
d7:29:28:f9:24:83:5c:18:89:b0:cd:b9:74:2e:48:ee:7a:16:
e8:4a:f4:00:7c:01:11:5f:c7:ad:68:ba:e8:41:93:90:4a:67:
c8:8d:f3:17:41:60:b3:0c:e7:32:4b:b8:85:40:6a:78:4d:3c:
57:50:1c:6b:09:70:21:0b:8d:e9:1f:4a:24:07:cf:45:a7:58:
cb:b7:93:08:ac:74:24:78:49:fe:b9:53:32:33:2d:19:96:57:
79:bf:57:7d:1f:5a:59:5d:88:0c:98:c5:f9:4d:48:2f:ca:05:
bb:f5:00:c3:52:dd:22:ff:2f:11:d7:a8:3d:37:4a:ce:8f:79:
c5:56:aa:68:35:53:4d:07:23:2d:b3:c2:7d:5e:9f:fa:6c:84:
fd:a3:e1:e2:f2:50:78:47:51:f6:ce:d2:fe:9c:24:7a:d4:43:
51:b5:b2:13:49:97:74:95:96:a9:41:2f:26:b5:ff:00:bd:94:
c6:69:ea:84:45:a1:c8:96:ce:44:04:b0:2f:f1:f3:89:ee:47:
53:74:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:22 2025 by rpki-client