Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: HcGyenaqL+WEs+9+suIVVWQxKRKgvcsHlyHUYRAiW8Q=
Subject key identifier: A8:B6:6D:6B:75:EC:C8:B8:27:1A:48:91:FE:83:FB:C6:FD:DE:3C:59
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 01988EEC7E40257FF794260223290F332328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 13:02:00 +0000
Manifest this update: Sat 09 Aug 2025 13:02:00 +0000
Manifest next update: Sun 10 Aug 2025 13:02:00 +0000
Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=)
2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: s6ZMuLFb5EuhvbfVvVKliAANL62GjZa2UYHeiLQYokg=)
3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:7e:40:25:7f:f7:94:26:02:23:29:0f:33:23:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Aug 9 13:02:00 2025 GMT
Not After : Aug 10 13:02:00 2025 GMT
Subject: CN=a8b66d6b75ecc8b8271a4891fe83fbc6fdde3c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:33:43:77:6b:06:be:fc:ad:d7:08:c1:1f:
26:52:31:fe:4b:b1:9a:53:15:02:e8:32:f0:45:1d:
14:8f:82:6b:e2:0a:b4:d5:64:35:5c:d5:4d:3d:cc:
4f:9b:f3:7d:5c:8c:d4:14:8a:61:d9:eb:4e:d2:50:
38:3b:55:b0:94:c5:20:f4:6b:18:a2:aa:fc:b0:0e:
a3:2a:f9:32:67:70:c8:97:50:70:ad:81:80:13:ab:
5f:c7:47:be:56:20:d1:44:75:a3:41:b8:36:79:a7:
a6:00:64:39:b8:1b:b1:c5:af:21:35:07:ba:ca:7c:
c1:af:33:b3:44:6f:e5:19:33:1e:29:bb:50:10:10:
01:fc:3c:d9:37:8c:f6:b9:7e:3c:fd:c8:40:12:bf:
da:4e:44:c2:7e:3f:41:2d:5c:35:39:9d:d8:40:5b:
57:08:03:bd:1a:24:c1:d0:28:41:c1:61:cc:1e:19:
83:32:f9:3b:a2:07:0f:70:a7:cb:09:6e:14:55:aa:
87:98:4f:81:b4:8f:02:9d:fd:3b:55:e8:e6:85:3c:
7b:99:9d:53:57:1c:ff:78:3a:4f:5e:8a:c5:34:51:
f0:73:ef:b3:5a:7f:43:74:dc:96:c0:a7:fa:e6:30:
68:59:05:5f:0a:cf:51:90:c8:56:87:85:82:8f:11:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:6D:6B:75:EC:C8:B8:27:1A:48:91:FE:83:FB:C6:FD:DE:3C:59
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:95:ac:cc:3e:ce:63:11:21:5e:94:d3:b1:e4:7f:41:1f:
de:5a:de:ff:e5:3e:1c:2e:95:ab:bf:69:2e:47:4d:4d:51:60:
2b:71:8b:a7:29:15:ed:15:cd:88:2b:ec:c1:f7:54:37:49:bb:
55:20:8c:a3:e9:da:98:81:ef:ed:ae:1c:59:d3:d7:b2:bc:1a:
3d:06:bc:11:c8:cf:4d:46:b7:38:60:34:32:c6:91:49:e6:0f:
73:43:1b:a9:f2:c5:6d:c5:e2:c9:54:ae:8f:9f:f9:dd:6f:43:
bd:99:44:8d:e6:9e:7c:24:ce:09:69:84:00:55:e1:38:54:05:
33:7e:b3:ad:3f:0f:07:9d:c2:76:fc:0f:6b:7a:15:cd:9f:25:
24:0c:00:99:07:4f:11:9b:ec:be:ad:6e:42:35:c7:ab:7b:09:
2b:79:21:5b:8f:2d:38:ee:6d:42:c5:b0:2e:5a:44:aa:2b:6f:
dd:b8:31:82:f9:82:4f:b7:e6:55:10:3b:94:6d:ef:1b:4c:25:
e6:78:4e:e9:f2:af:57:4d:05:56:c5:ae:67:2f:c0:bc:b9:8e:
9d:68:8a:eb:35:1f:0e:a7:58:d9:bc:9b:cc:a4:b4:65:ad:75:
b7:13:a4:3c:6b:23:87:63:72:67:5b:de:b5:d6:c2:b7:21:df:
67:ac:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:12 2025 by rpki-client