Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: oqOXQDrknDRc+6eu2Mjbu2KuNj3LY4Kp5pny+b5AbIM=
Subject key identifier: A5:B2:0A:11:88:C8:BB:0F:FB:1A:08:CC:92:51:13:26:B6:A0:9C:3D
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 01988B0F95DC53FEC301900058B39077C83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:01:51 +0000
Manifest this update: Fri 08 Aug 2025 19:01:51 +0000
Manifest next update: Sat 09 Aug 2025 19:01:51 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: 1si/jNay9P1jjOB4ZoQKcwF+2TfJuvHXmpACgYz6suI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:95:dc:53:fe:c3:01:90:00:58:b3:90:77:c8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Aug 8 19:01:51 2025 GMT
Not After : Aug 9 19:01:51 2025 GMT
Subject: CN=a5b20a1188c8bb0ffb1a08cc92511326b6a09c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:b6:f4:71:de:53:ff:b6:06:d9:2b:d0:d9:
a2:e8:59:e5:ae:50:a9:8d:3c:bb:e8:9c:d8:2c:b7:
39:96:0d:56:8a:43:a8:7a:f3:e3:55:ce:be:24:81:
30:46:01:d3:11:dd:b9:64:a7:fd:53:a0:53:ca:1e:
9b:a0:64:f6:79:ef:1d:c5:a5:d9:7b:7c:30:b1:e2:
8e:5f:21:31:f4:04:7c:cd:46:be:c3:c9:b7:19:b4:
a9:61:12:96:bf:29:4c:27:30:43:9a:91:f8:e1:f7:
1b:51:2d:58:cf:bf:c7:bf:f9:bf:93:8e:33:60:9e:
01:4c:ed:1b:42:f2:6c:b7:e5:6d:aa:e0:b7:b2:d6:
dd:af:89:76:1c:3f:1b:7c:30:54:ef:ef:ed:06:ae:
b6:10:5a:fa:41:e7:31:90:93:e8:61:96:43:b4:22:
b6:68:74:f0:d2:51:c7:5c:1a:73:dc:db:82:62:2c:
b1:5f:c6:6e:6e:45:3c:d1:a3:4f:ea:5a:2a:83:47:
74:bd:2c:22:72:17:e9:34:73:d2:b9:98:e0:04:93:
1c:b6:f2:2d:19:b0:ef:8d:74:6c:00:e4:3d:77:40:
9d:ea:ff:95:a2:bc:bb:cd:34:d7:6c:32:57:b6:c1:
dc:2f:45:7e:5e:31:f3:51:1e:fe:03:00:5d:2e:54:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B2:0A:11:88:C8:BB:0F:FB:1A:08:CC:92:51:13:26:B6:A0:9C:3D
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b5:28:56:bb:cd:b9:c7:8a:84:7f:27:73:ce:28:1a:25:56:
59:b5:73:c7:b1:f9:63:8f:82:be:c8:52:8a:52:4d:7a:aa:19:
6b:14:e3:86:e5:46:7c:f4:02:11:81:1c:39:2c:d2:0b:fe:01:
41:23:25:86:3f:02:d1:02:da:d8:7f:78:89:1e:13:46:97:08:
9c:ec:1f:23:b9:94:48:5d:01:65:15:df:df:ff:3c:33:f6:0c:
d0:7b:94:c5:3f:2b:af:fc:76:e3:ba:12:c0:b3:13:bf:90:e1:
ce:48:2e:6a:c4:b0:9b:e8:1b:57:f7:83:52:9f:70:c7:15:97:
cb:81:2b:e2:87:90:f0:9e:2a:2a:5a:fb:3a:84:96:9a:26:e7:
5f:34:b3:8e:4d:7f:6f:15:10:1a:cc:08:72:aa:8d:b7:cd:df:
42:2f:ea:f4:e0:e6:85:5f:d9:64:75:90:da:66:35:44:d9:14:
ee:db:3b:4f:5c:2f:4c:78:88:a6:4d:d2:36:af:0e:57:31:3e:
7e:c6:fc:f1:ed:86:5f:6b:08:4b:df:42:04:57:c6:c7:c5:e5:
d6:0f:f5:6e:06:37:4f:94:9d:83:9d:61:6f:d3:eb:59:98:0f:
71:1c:7a:83:af:60:16:10:d0:06:ab:30:3e:e1:7e:c7:0b:23:
e4:2d:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:40:10 2025 by rpki-client