Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: iKBfP40Q5tR7B+q+6ELyBmSCKhUL0c/JtugjwdMa8bo=
Subject key identifier: 43:81:CB:E0:30:38:CB:05:00:8B:EE:C7:37:61:C7:9D:14:E5:2A:FF
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 01987418F71ACC0362B4DC4B3FAE0C3C0BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 08:00:49 +0000
Manifest this update: Mon 04 Aug 2025 08:00:49 +0000
Manifest next update: Tue 05 Aug 2025 08:00:49 +0000
Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: uiFBBZ1KTMp4be1msAO8HzurRGs9GQU01pvZ1o+KsKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f7:1a:cc:03:62:b4:dc:4b:3f:ae:0c:3c:0b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Aug 4 08:00:49 2025 GMT
Not After : Aug 5 08:00:49 2025 GMT
Subject: CN=4381cbe03038cb05008beec73761c79d14e52aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:ad:7a:87:e6:1b:64:67:90:2a:93:8f:07:
3a:b9:a5:b9:c8:7e:98:b9:8e:1f:fd:e0:17:c8:d0:
51:21:04:d6:20:73:55:06:e6:ed:87:09:bf:24:cc:
11:9f:01:0a:3d:c5:6b:00:dd:0c:7d:da:12:79:40:
a5:a6:f5:c1:af:9d:63:dd:94:38:1c:a0:f4:8a:e4:
dc:a1:99:6c:bd:be:61:f8:c8:17:48:85:89:2c:90:
a0:03:95:c7:b8:7f:dc:ec:70:f2:ed:74:22:05:d2:
a5:76:2f:fa:c9:34:76:c7:75:7c:3a:61:e1:59:7c:
94:d2:b2:fe:22:85:37:05:b5:e1:38:b7:e1:4a:69:
13:79:d5:74:8c:de:65:e1:8d:07:df:ce:f1:2d:5c:
f8:8c:bc:09:78:2c:fc:84:be:90:9b:f6:fe:9f:f1:
76:49:d8:ab:f4:e5:8d:c5:df:30:35:9f:97:40:12:
b4:dc:68:4e:bd:7b:99:78:74:76:b3:89:81:36:1e:
cb:83:5c:ef:0d:eb:90:9d:fa:19:b6:71:a6:e8:7e:
72:72:c9:83:50:0e:7b:63:74:a3:93:62:4a:50:e1:
54:27:7f:04:ea:ca:e3:47:8e:60:f1:6a:09:fb:cb:
3e:ad:a0:1c:c6:e8:55:84:56:49:22:70:80:09:b7:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:CB:E0:30:38:CB:05:00:8B:EE:C7:37:61:C7:9D:14:E5:2A:FF
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:24:23:66:37:f6:1c:6a:7c:d2:e1:ce:94:c3:96:f8:26:d7:
eb:0e:08:17:1c:1a:c8:3d:be:97:90:b6:34:eb:16:ff:57:28:
ef:38:bf:dd:d7:7b:38:68:da:9e:0d:44:b6:4a:33:98:3e:64:
98:d0:6e:b1:db:6b:10:b0:c9:c3:0b:48:47:37:1a:7f:75:fa:
e2:8a:1a:9a:fb:13:7d:47:7b:7c:e1:d0:a7:54:85:61:52:35:
b4:ff:e6:eb:dc:e0:89:e7:e3:d4:18:22:5f:02:8b:f9:25:96:
89:fb:b4:90:9b:f7:5d:0c:6a:ad:1b:c2:06:0a:99:ad:81:2f:
9b:e7:83:ab:1b:28:0b:0a:53:a7:c4:b7:a2:e0:46:16:5e:d0:
e8:1f:36:95:f1:29:28:ef:8c:52:d6:3a:b2:95:63:2a:77:14:
ae:ee:ac:38:f1:90:95:93:60:ad:a9:70:71:17:41:4d:9a:c0:
3f:85:39:db:8d:b8:8b:9f:81:77:05:bd:b4:10:3d:5d:95:8d:
de:4e:5e:0a:61:6d:82:70:2b:62:f7:d3:85:1a:6f:f3:94:d3:
b5:bf:f0:20:49:94:c6:e2:97:84:9a:ab:a6:a4:3c:75:8c:80:
bb:3f:25:ed:04:c3:d2:3a:5c:a8:b3:10:6b:e0:9b:59:56:7a:
93:7f:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:42 2025 by rpki-client