Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: OExcKMnVlhPGd7hpkP6oav+FfyyupkB0aJYC4Vu4HJE=
Subject key identifier: F6:B2:BA:58:82:4D:E9:D4:51:04:F2:C7:BD:19:13:5C:29:C1:3F:CA
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 0198A23CECC0A610A2EBDF2465ACD01021B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0E1A
Signing time: Wed 13 Aug 2025 07:02:38 +0000
Manifest this update: Wed 13 Aug 2025 07:02:38 +0000
Manifest next update: Thu 14 Aug 2025 07:02:38 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: hRKzHwxMrYbcfj7U7lLGqxzwrjF65nncq6vKyLdgnaE=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3c:ec:c0:a6:10:a2:eb:df:24:65:ac:d0:10:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Aug 13 07:02:38 2025 GMT
Not After : Aug 14 07:02:38 2025 GMT
Subject: CN=f6b2ba58824de9d45104f2c7bd19135c29c13fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:96:9a:2c:6c:77:7c:5a:64:03:5d:bc:f5:
eb:81:3f:68:f9:9a:23:0d:fd:34:0b:d2:15:a4:2d:
12:9d:64:d2:c2:e5:bc:64:72:2c:32:60:2f:ee:c3:
05:0a:f4:ee:10:be:16:36:24:0f:ba:e7:80:b2:71:
90:06:75:cb:ba:d5:37:ea:37:44:de:4a:c6:db:04:
68:a8:c5:df:75:cd:5d:a2:32:e0:ec:f6:f2:fd:08:
49:72:24:b8:c9:51:0f:cb:55:0f:4b:14:4c:78:c2:
fe:06:6b:fa:0c:64:97:ad:c6:31:bb:6d:ea:08:19:
52:18:b1:7a:de:2e:c5:a9:d8:e6:bc:96:f3:1d:29:
0f:9e:b1:91:7d:40:3b:53:ee:83:81:a7:ff:a0:34:
c5:31:23:6a:d3:89:cc:a2:36:08:5e:b5:b7:84:b3:
23:41:33:2c:78:cc:ad:a7:13:d6:23:ba:d6:ae:87:
7e:91:30:69:32:b6:3e:ca:f0:bb:51:35:88:63:d1:
6f:32:c7:8b:39:eb:08:fb:13:cc:16:ce:17:5a:60:
61:f7:66:6a:24:1a:2d:af:e4:02:3d:13:43:03:2f:
94:22:32:fa:58:6e:88:79:e3:61:3c:0e:6c:bb:88:
a3:04:60:19:f0:ea:09:95:0e:6d:f1:32:21:ee:c0:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B2:BA:58:82:4D:E9:D4:51:04:F2:C7:BD:19:13:5C:29:C1:3F:CA
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e7:e3:d4:5f:d4:de:1b:ae:fa:76:32:e0:d3:08:dc:31:a9:
46:86:cd:b5:08:82:0c:5c:28:67:19:94:78:bc:9e:9e:79:8c:
fd:8b:62:63:06:d6:0c:b0:67:9c:ce:c6:1c:7e:08:42:b4:f2:
34:64:71:c4:f8:33:5e:b4:c3:d7:a5:83:84:1b:e2:d0:f4:59:
dd:3d:22:df:b2:a0:a6:5e:11:fb:86:f7:fa:fd:17:2a:0c:93:
9f:f8:10:19:c1:8d:c9:25:97:51:c1:a7:29:c0:e7:8d:c6:36:
85:2f:34:e1:29:5f:b3:bb:15:44:37:e7:fb:b8:ad:88:3b:99:
9b:af:23:b6:ac:fd:96:03:9e:50:fc:ca:fe:4c:13:c4:16:1c:
7d:79:11:1f:05:4e:cd:7f:2c:8f:48:22:8c:0b:af:2a:9a:e0:
f2:d2:f8:2a:45:fb:8d:2a:e7:70:2f:ec:c7:50:d2:67:c2:57:
a3:31:6b:5b:5d:21:f9:2d:0e:10:6d:f4:ce:8d:76:0f:7c:77:
fd:e7:b0:45:59:ca:1e:09:0a:1a:8c:a0:45:02:80:c5:51:99:
49:38:d1:6b:73:d2:ab:65:bb:fd:d6:c2:02:94:d0:75:6d:b6:
99:4f:81:b4:07:f0:5d:38:4b:e3:9e:54:47:b6:30:8c:1b:a0:
34:c1:6a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:50:43 2025 by rpki-client