Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: QyLQ1u5YohBZZev0TFKuod0zZzRTJMPMmizpfdo6EK4=
Subject key identifier: D0:FD:89:56:DC:B8:18:4D:E4:83:6B:77:56:9F:F9:66:11:EE:95:64
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 0198974A303E8BDADC8C2F24012BFD563ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 04:01:18 +0000
Manifest this update: Mon 11 Aug 2025 04:01:18 +0000
Manifest next update: Tue 12 Aug 2025 04:01:18 +0000
Files and hashes: 1: JTBFzZ_Xd-qKEEB1M2yH_cqN0L8.roa (hash: UtmE2VrYOG/N+bYO3QuLYMQZyMdAh9FYCP1pfkSwK6Q=)
2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: J6uJp0xrKD3qQlsAcUYiKCnbxUtGgdsdGWI4pHoi3EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:30:3e:8b:da:dc:8c:2f:24:01:2b:fd:56:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Aug 11 04:01:18 2025 GMT
Not After : Aug 12 04:01:18 2025 GMT
Subject: CN=d0fd8956dcb8184de4836b77569ff96611ee9564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:58:5c:11:88:55:92:2c:eb:1d:e4:cb:28:
d6:8c:73:bd:2c:17:61:ad:af:f4:95:a5:74:45:e1:
aa:49:fb:b3:ec:0a:68:b1:78:dc:86:b7:67:b6:aa:
72:b2:c8:97:63:d6:b2:8e:25:4d:f8:22:95:5e:2d:
0c:90:98:1d:25:0f:88:02:c6:11:ec:52:da:1e:04:
cd:58:e4:c2:66:a1:7c:3c:65:28:88:a7:7c:2f:08:
66:56:ec:1d:5b:12:25:51:18:ac:3e:df:dc:c4:20:
34:fd:9d:a9:45:71:22:8e:4e:84:ed:1c:7a:30:31:
a9:ec:a3:48:b4:e4:21:5f:6b:b4:ef:1d:01:17:42:
6e:d5:83:01:e9:f5:2a:38:48:30:16:05:ef:82:9d:
56:bb:54:1d:ab:03:b7:8a:19:f1:a5:75:74:da:d1:
a2:83:18:5f:51:ff:a9:61:51:32:8d:e7:2f:ec:db:
b5:f3:53:25:ac:33:76:15:66:ea:d2:48:1f:0e:46:
03:d7:02:fb:43:ec:f7:71:13:bc:0e:5d:c5:0d:ae:
89:94:75:d0:b8:e8:05:8f:18:7b:b4:12:e2:66:a7:
a3:2d:24:27:a4:c1:0f:4e:49:a8:48:ac:8f:1e:50:
76:29:2a:14:78:7e:68:bb:24:53:bf:ce:e4:bd:e8:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FD:89:56:DC:B8:18:4D:E4:83:6B:77:56:9F:F9:66:11:EE:95:64
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c1:83:ab:83:d2:a5:83:b0:1d:10:e0:89:a7:10:09:b0:aa:
a5:a0:10:0e:9d:8c:01:8a:d6:ef:06:8b:87:d8:59:9e:84:2f:
87:45:ca:d8:b6:38:cb:f0:8f:0a:dd:4d:34:62:91:1f:7b:1d:
2d:54:d5:5d:15:d4:43:60:2f:de:13:7f:d7:cf:c8:69:71:b4:
c4:ed:96:21:5e:3a:a6:d8:6f:a1:ba:13:0d:15:48:4d:9f:48:
ad:a3:5c:a7:f1:93:b4:49:26:f6:12:95:e3:f8:b7:a9:26:01:
0b:7e:f6:0f:22:b3:52:c0:e5:78:9b:ac:0f:57:14:9a:0c:2f:
65:bb:fa:8e:81:5e:e5:65:a0:15:e5:86:8b:30:1e:ad:af:44:
9b:53:bb:01:95:50:de:d9:f5:c1:1a:8e:57:b6:0f:3c:e9:f8:
c2:bf:d3:b5:be:3d:31:b1:bb:77:5d:63:82:5e:b7:1a:58:06:
f1:43:b0:c2:d6:6b:4f:b4:1b:d2:9b:fc:79:70:54:38:7a:3a:
02:7f:9a:22:2b:d4:2d:e0:7e:d5:c0:ce:34:99:ee:5f:1f:a3:
b4:17:ac:81:5b:21:55:5a:56:c5:71:25:ee:bf:a7:0c:23:06:
c4:65:62:2f:9a:e7:33:ef:cc:29:84:21:f1:5f:e2:8f:21:02:
0a:a7:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:37 2025 by rpki-client