Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: ayihjjpsnqa7+BSi/XgYjtclmbLCR5kD9sqsbYa9T8o=
Subject key identifier: CD:89:E1:F8:78:46:A9:88:F3:47:C0:4D:30:45:EA:15:D7:6E:AB:2F
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 01987B2DD40C0B0139E4A24E7C4DF9BB4B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 0276
Signing time: Tue 05 Aug 2025 17:00:57 +0000
Manifest this update: Tue 05 Aug 2025 17:00:57 +0000
Manifest next update: Wed 06 Aug 2025 17:00:57 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: JP+q7a1qd7W+d95WFq7LSpL2YNgsPMJvaN0fS9D73Yw=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:d4:0c:0b:01:39:e4:a2:4e:7c:4d:f9:bb:4b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Aug 5 17:00:57 2025 GMT
Not After : Aug 6 17:00:57 2025 GMT
Subject: CN=cd89e1f87846a988f347c04d3045ea15d76eab2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:e4:c7:0f:c9:6c:eb:64:ec:1c:34:ab:1b:
3c:51:d0:3d:04:c4:a6:bf:85:7d:8f:6f:11:03:62:
21:16:69:d6:72:4e:f4:4c:28:3b:31:0c:ec:c3:44:
07:a8:2e:48:78:83:f1:1c:dc:e8:b4:e9:a2:b3:92:
03:3d:95:a0:de:2d:59:1b:96:33:65:b3:55:3b:f5:
de:b8:08:a5:a4:6b:b9:85:31:63:11:57:99:8f:59:
2f:e6:42:ca:ad:d2:ea:a7:3e:81:d2:4e:40:0e:5f:
85:79:8f:50:e4:26:4b:c4:c4:8e:eb:5a:3d:dd:44:
ab:ea:5e:3a:d1:bd:ce:de:d8:65:70:df:63:46:1a:
29:b8:4c:73:54:f5:70:09:5f:3e:13:7d:00:f6:25:
a6:36:64:76:c1:45:35:71:69:69:c9:4c:70:56:46:
53:3b:d6:a0:be:a3:58:7a:ef:9d:63:52:48:08:ce:
9a:76:d1:21:53:dc:0b:6b:05:fc:58:1d:1d:4d:5c:
6d:89:c9:0f:da:e6:35:34:24:9f:46:6d:d1:13:1f:
c0:0b:cb:a4:3a:90:25:bb:fb:0c:d0:b0:74:65:99:
08:8d:b2:a3:73:5b:be:1c:a5:ab:c5:1c:70:fd:4e:
4d:d1:d6:15:7c:73:d6:30:03:7e:40:ab:db:2e:42:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:E1:F8:78:46:A9:88:F3:47:C0:4D:30:45:EA:15:D7:6E:AB:2F
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:68:48:08:06:82:0d:ff:5a:bc:75:32:21:d8:4f:30:ba:6f:
fc:66:e7:fa:03:41:23:6b:aa:da:17:4d:f8:b5:78:ef:7a:93:
6c:1a:80:72:a5:1b:89:07:13:13:c7:04:b8:6a:9f:d6:3c:07:
22:93:08:4e:30:2e:f5:d6:1c:e5:eb:b3:9f:9f:10:d1:5a:3d:
cc:9a:60:29:28:22:a7:c7:23:74:89:94:11:39:fb:90:06:b0:
d2:a9:89:55:fc:96:0b:3a:39:77:05:6e:30:6b:ef:f7:08:82:
e5:2e:41:b4:d4:84:d0:f1:3b:ce:dc:40:b3:5a:12:bd:53:3e:
0d:2d:ca:c0:3a:57:3e:61:54:35:68:02:ae:bb:fa:84:fa:2b:
6c:50:29:8e:45:d3:a0:d1:87:db:0c:1f:2b:e7:5f:94:2a:63:
3c:65:ba:6d:dc:88:0f:2b:ac:84:32:58:28:79:f4:cf:2b:94:
0c:10:b7:89:bd:39:ac:59:87:d1:67:87:85:a4:5c:00:3c:b9:
9d:74:3b:d7:56:d9:15:1b:b1:4f:eb:4a:65:9a:2f:3d:fe:54:
2e:0f:78:64:95:0b:29:10:10:36:37:36:ab:fb:5d:b0:ae:94:
06:8a:8b:a9:f5:23:d9:96:02:28:8c:5d:fb:b2:f2:f7:30:52:
54:0e:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:22 2025 by rpki-client