Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: YTfc6CzmIlnFff70rPNOnoPstNfQxbDEI5V67BABqpw=
Subject key identifier: C2:19:C0:65:DF:79:DE:52:89:C1:DE:84:0E:54:F2:89:4F:2A:5F:92
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 0198808BA871F1C4F96822F6E41EBFB3E02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 18:01:32 +0000
Manifest this update: Wed 06 Aug 2025 18:01:32 +0000
Manifest next update: Thu 07 Aug 2025 18:01:32 +0000
Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: Etfw6IKgfSAgvwBgme28HCP+Ed2sFN2Dn4jREtSUolo=)
2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:a8:71:f1:c4:f9:68:22:f6:e4:1e:bf:b3:e0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Aug 6 18:01:32 2025 GMT
Not After : Aug 7 18:01:32 2025 GMT
Subject: CN=c219c065df79de5289c1de840e54f2894f2a5f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:6a:0e:a3:a7:f1:8c:a9:06:a8:ab:b5:60:
8b:d5:91:f7:8c:2a:6b:6b:da:61:8a:6a:0c:c6:d5:
32:1d:ee:d3:2a:67:84:9b:eb:df:11:ab:7e:22:20:
9d:e7:db:29:be:80:46:48:20:39:00:0b:a3:1c:71:
73:6a:af:97:f7:b5:5f:5c:75:f0:94:39:22:30:cf:
30:19:b9:fd:ca:cf:f6:bc:1c:02:f0:a5:e3:01:2b:
c6:7d:3f:43:42:c2:38:da:d4:02:ed:b5:34:2c:3c:
bd:18:c0:4d:52:2e:fe:f1:d6:e7:ce:31:c4:fb:35:
22:a8:18:df:ae:08:b2:3a:1a:27:5e:72:1b:cf:df:
c4:63:08:1e:c1:cb:de:cf:24:23:30:2d:41:47:e2:
88:92:97:0d:e7:12:12:92:9e:2a:1f:ec:d8:e8:a7:
29:38:42:7f:76:9b:fd:32:72:4c:24:75:e3:26:b5:
a0:8b:b3:3a:87:b6:7d:32:64:e4:bd:e6:49:bc:04:
1b:22:f1:62:63:43:3b:f0:a9:6b:44:32:2b:2f:b8:
2d:6b:9e:e2:4f:79:ac:b2:77:f0:6b:05:98:10:4d:
82:e8:94:6c:c2:56:3e:54:f2:5e:63:58:3f:dd:b4:
51:24:1f:bf:95:84:59:3f:88:c6:24:4e:19:8c:3c:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:19:C0:65:DF:79:DE:52:89:C1:DE:84:0E:54:F2:89:4F:2A:5F:92
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0d:03:8c:5c:26:8f:66:a2:16:3d:f4:8f:14:b9:51:f6:d0:
04:99:05:54:fc:02:10:3d:2c:7b:96:c5:82:fa:5a:c9:dc:af:
54:da:60:ba:8f:78:60:42:e8:d7:98:75:bc:16:dc:bd:61:8f:
db:91:11:ca:78:f2:fd:3f:98:fa:60:6a:ff:0c:7e:89:e1:79:
e2:77:83:fa:1f:86:62:89:9e:5a:cc:73:d8:6d:76:c7:81:0f:
e5:23:03:d2:86:01:e9:4c:dc:dc:ed:6e:e2:52:11:8c:6c:2f:
da:1b:ea:93:21:ba:81:f7:4f:6c:5d:c2:56:ca:94:78:40:48:
6f:3a:42:78:cc:4b:24:5d:a6:f6:08:13:eb:b2:85:0a:1c:9f:
21:2a:14:36:0c:81:43:e2:01:b9:94:73:82:4c:72:ce:0d:0b:
b3:21:c4:7d:4e:1f:28:ec:13:6f:f9:c2:1c:4a:e1:d5:a8:aa:
fe:23:a5:db:e3:44:85:61:7f:de:c7:83:29:48:08:50:59:6b:
f4:9c:14:4d:bf:2d:6e:42:a9:24:57:be:17:bf:bb:04:5f:d0:
d7:46:3e:c4:30:cc:2f:86:f6:eb:95:77:79:c3:93:bb:6c:01:
80:22:1c:e0:0c:c1:c5:6f:ff:78:8e:11:de:01:2c:7a:5e:af:
c4:97:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:05:49 2025 by rpki-client