Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: vO2+IP9ktGeu7yADnyK+kSlUmV1uTs/slZoruM/Nmuo=
Subject key identifier: 66:65:22:04:05:17:51:2B:B8:04:1C:9D:D9:5F:0D:24:D2:62:34:23
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019892FEEB93529568413C8CD9FB2995C189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 08:00:36 +0000
Manifest this update: Sun 10 Aug 2025 08:00:36 +0000
Manifest next update: Mon 11 Aug 2025 08:00:36 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: CeKw+bqeh8zq8talxlVkAro2NhzCz9I2C+lfVVe7nIo=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:fe:eb:93:52:95:68:41:3c:8c:d9:fb:29:95:c1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Aug 10 08:00:36 2025 GMT
Not After : Aug 11 08:00:36 2025 GMT
Subject: CN=666522040517512bb8041c9dd95f0d24d2623423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:ef:b9:e4:a5:33:0f:a6:c8:b0:15:b1:2c:
f7:a4:39:79:98:21:3b:1e:28:25:47:45:3b:56:bf:
c7:60:43:09:93:ca:23:16:34:7d:75:c3:4e:20:82:
67:d5:ea:81:d7:6f:8d:65:d7:f2:13:d8:4e:9e:72:
68:97:c7:39:56:02:e9:9f:3c:a3:99:17:07:d2:4f:
30:85:3d:49:43:23:e0:92:af:25:07:cc:df:99:a6:
73:53:d0:c8:fe:05:f5:0a:fc:a7:06:a6:bf:7f:18:
73:01:00:79:f3:f4:d9:4e:10:1c:82:fa:fb:c3:c4:
81:1e:18:17:b6:62:79:0b:7a:19:42:8b:26:85:6d:
ea:ec:ff:3f:49:79:d1:81:8a:03:d8:67:60:6f:b0:
f3:00:f5:da:eb:f6:ad:c2:4c:0c:cf:f8:6a:2a:c9:
8f:a9:0f:59:dd:eb:ce:e9:fc:c1:5c:bf:8a:90:28:
e8:37:42:69:24:a7:f8:f2:fa:fd:b2:66:b0:cc:78:
a1:4b:84:f2:4f:a6:90:cd:5e:73:3e:56:a5:78:6a:
ab:fa:22:ea:ce:84:18:31:df:df:c8:86:83:3d:0d:
3a:23:63:8f:08:ef:6b:b8:5c:fc:ed:05:62:eb:84:
65:e9:0c:bf:85:5e:35:2a:03:ec:b6:89:8d:b4:15:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:65:22:04:05:17:51:2B:B8:04:1C:9D:D9:5F:0D:24:D2:62:34:23
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:47:e7:52:85:a0:13:f1:83:33:0f:c7:45:75:5e:47:b7:f5:
01:57:d1:18:de:70:33:d0:ac:48:92:89:f6:bc:83:85:59:fb:
b8:a7:2e:20:c1:14:d9:b6:3f:c3:42:b6:60:60:46:90:d3:17:
4a:1a:56:10:90:de:db:ac:d7:c2:b7:83:ab:70:f2:7c:28:b8:
06:c9:2b:ef:63:0f:ab:56:ee:94:de:9b:97:ba:cc:1e:51:d3:
7c:16:c9:8d:56:11:b5:f7:7a:69:21:28:75:f8:03:3c:e3:af:
67:2f:c3:9b:ee:37:52:3f:e5:31:a2:8b:67:11:8c:d6:de:df:
45:b3:f5:37:b7:97:b1:1a:8d:7a:10:3d:83:41:db:2a:23:56:
ac:70:c1:d1:70:05:2b:a1:c5:c0:40:da:2d:04:84:33:2a:5e:
48:34:ca:3a:bd:5a:4d:2c:bd:d4:08:e7:37:0f:64:37:2f:46:
b0:e8:75:67:22:58:2c:f5:cf:d8:d0:9b:9e:64:2e:41:d5:1e:
0e:3a:02:85:e4:c1:98:54:ad:b1:63:32:ac:65:d0:87:aa:0c:
a4:17:9b:03:d2:1c:d1:2e:f8:c5:cb:7f:19:e5:0f:18:3d:7d:
36:72:a0:0f:2d:a0:a3:e1:7f:a9:43:6b:3e:c6:f9:7d:f4:72:
33:77:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:18 2025 by rpki-client