Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: BT0WSX0uuLvgBIcQDqt/3b6fKmcVJ7ArQXBkB0G7LX8=
Subject key identifier: C3:F0:96:BA:36:1C:50:D7:EF:9B:71:CB:22:37:45:9C:0C:DF:FB:98
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 01987298BFF3D4C4D178D0ED87F71E070F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0EA9
Signing time: Mon 04 Aug 2025 01:01:09 +0000
Manifest this update: Mon 04 Aug 2025 01:01:09 +0000
Manifest next update: Tue 05 Aug 2025 01:01:09 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: nTIDPbTzinGKyBbSczmisEVBQ/XgdeYvRGtGuf1WvTM=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:bf:f3:d4:c4:d1:78:d0:ed:87:f7:1e:07:0f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Aug 4 01:01:09 2025 GMT
Not After : Aug 5 01:01:09 2025 GMT
Subject: CN=c3f096ba361c50d7ef9b71cb2237459c0cdffb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:1d:5e:05:20:75:97:bc:39:4f:26:fc:51:
5f:e0:34:9c:61:9d:10:fb:76:a6:73:41:9d:06:82:
b6:94:c8:cb:7f:57:22:6e:96:c0:c6:ff:3d:2f:42:
66:c9:05:a8:1b:cb:0b:59:b1:b9:b3:0d:fd:5d:dd:
f4:6b:b6:49:d8:39:9f:e7:da:29:30:b1:a3:10:96:
18:b1:7e:c3:02:28:bf:41:69:cc:99:cf:a8:3e:e4:
68:40:79:82:8f:cf:43:c9:bf:bf:1f:b0:ab:d1:9a:
67:83:78:de:07:be:df:6d:05:74:7c:88:07:03:1a:
36:73:15:4b:2a:23:dc:5e:56:f7:f9:e5:9c:f1:43:
ec:63:18:95:39:b4:87:a7:c2:8f:fe:b0:09:50:8b:
78:50:4a:d9:a5:f5:20:91:48:a2:ec:bb:4d:07:98:
f7:db:58:26:bc:e5:9e:ae:3b:f8:1e:43:b8:f6:68:
12:9b:f5:d0:62:ca:45:23:89:45:2f:7f:30:40:c6:
0d:35:d9:1b:32:84:3b:22:2a:86:da:eb:db:a2:e6:
7b:ca:b4:4a:1c:06:b0:e7:ad:b8:94:7f:20:c9:84:
6e:d6:51:a1:50:e1:46:50:ab:0c:4e:af:14:ef:b4:
17:0e:ab:44:68:c8:29:e9:b8:31:f8:f6:50:41:9a:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:96:BA:36:1C:50:D7:EF:9B:71:CB:22:37:45:9C:0C:DF:FB:98
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:33:a2:da:9b:c5:a8:02:b2:1c:e5:7c:b9:79:e3:cd:e6:2f:
20:0a:fa:ce:04:1b:ad:ae:02:b8:91:2d:5c:31:8e:b0:d7:fd:
b0:8e:e0:ee:cc:f6:a8:7b:b9:46:80:ab:b9:1f:3a:b9:68:d9:
ba:b5:c6:10:57:11:0e:8d:06:cf:f8:6c:60:0e:b4:ee:b3:a4:
29:7c:c8:25:e3:a9:5d:cc:6b:38:aa:17:cc:12:a8:ac:f8:f7:
ef:54:a3:18:31:80:73:22:16:40:a2:41:df:e7:14:f0:e3:9f:
d4:4a:d9:cd:4a:38:cf:eb:3d:3d:8b:78:f5:f2:c3:0c:f3:d9:
b8:20:82:7a:de:ed:6d:28:60:6c:49:e6:5a:2e:91:c6:ed:aa:
25:74:73:d6:3f:ba:ba:20:d8:fb:3b:34:1e:18:cd:24:62:8e:
b1:4f:87:c5:99:fd:eb:2e:51:37:db:22:a1:35:77:d0:de:56:
f1:cd:f9:d3:b5:94:f4:4d:da:58:77:0d:31:90:90:67:90:11:
6f:da:31:75:41:4e:54:88:00:06:0c:fb:fc:73:4f:39:23:2a:
37:e3:d0:32:10:fd:cc:2c:53:f8:b2:ed:5b:27:e8:89:c5:2d:
fa:2c:fe:48:53:d4:1a:0e:dc:e7:96:93:2d:53:93:9c:fa:62:
45:a8:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:26 2025 by rpki-client