Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: tYT46kfzZXgwlbPAsg+62VkPTUUx840FTkj7eD0xr5w=
Subject key identifier: 37:3E:30:5F:0F:F8:A7:F9:CD:1A:E7:84:6E:BB:31:3E:A7:6A:64:39
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 01987CAEA14397ABB2601EA4906B2BCE9748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0B8C
Signing time: Wed 06 Aug 2025 00:01:16 +0000
Manifest this update: Wed 06 Aug 2025 00:01:16 +0000
Manifest next update: Thu 07 Aug 2025 00:01:16 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: oOufYglYfv+Db0U0ub5oKc5me4qXgcU82EFYpAwA7O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:a1:43:97:ab:b2:60:1e:a4:90:6b:2b:ce:97:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Aug 6 00:01:16 2025 GMT
Not After : Aug 7 00:01:16 2025 GMT
Subject: CN=373e305f0ff8a7f9cd1ae7846ebb313ea76a6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:5b:20:2a:9d:e4:d9:dc:9a:17:43:2f:f6:
c2:73:14:a3:06:6e:e4:5b:e1:d5:8c:e6:39:6f:d7:
ab:f7:26:19:42:89:db:a9:38:6a:54:f1:00:4b:7c:
2a:11:ad:af:ed:c4:9e:a6:43:80:b6:e6:d7:91:83:
0b:fc:1d:43:45:74:0b:ad:56:8a:d1:00:71:f5:36:
2e:fd:73:72:85:c6:a0:1b:45:ec:42:99:2c:1a:cc:
64:ef:81:05:20:05:66:6f:4e:f9:33:05:be:42:5d:
fa:09:c6:8d:dd:16:46:52:74:93:87:0e:44:2b:a0:
b8:eb:fc:5b:4a:e0:db:a3:08:66:a3:96:75:c6:5c:
bf:04:45:8e:37:9c:10:85:af:83:91:96:4d:45:9e:
4d:bf:cc:ff:87:83:d0:30:cc:49:5b:67:11:a2:e9:
c2:2f:49:5d:17:d8:f8:dd:84:2f:8e:a6:5e:c2:e7:
50:7f:61:bb:af:e6:81:33:e6:8d:7c:ba:a0:d1:04:
58:53:98:4e:df:71:e1:4e:d9:8c:8f:a3:38:af:f7:
24:51:92:42:72:ed:48:16:da:62:58:e4:ff:51:90:
5a:27:31:97:5a:3e:61:c2:8d:1b:89:a3:43:cc:de:
97:3f:51:a0:8a:c2:59:75:33:ce:b2:5b:d8:d9:7d:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:30:5F:0F:F8:A7:F9:CD:1A:E7:84:6E:BB:31:3E:A7:6A:64:39
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4b:bd:10:12:f5:c9:7e:fa:03:d9:fb:f8:28:5f:0c:06:5b:
8c:3b:ae:fa:d7:74:41:d9:3b:46:f4:ae:7a:7d:9b:62:d9:11:
81:67:b3:ae:d2:c7:37:bd:dc:44:4d:58:2d:3b:e3:b1:e5:e0:
4a:0f:58:e7:3e:04:58:3f:12:0c:43:d5:80:fb:68:3b:d5:de:
3f:b8:d5:2f:43:d2:fc:e4:07:74:49:07:87:91:f5:d6:d2:5b:
9c:bd:a6:6f:c8:bd:3d:c3:ca:bf:3e:25:0d:53:15:ca:4c:5d:
04:a1:1f:1b:31:1c:4e:14:87:c1:1e:c3:53:ab:ea:2d:4d:87:
35:e4:7e:62:d4:5c:d1:96:83:f7:9c:66:ae:20:d7:a5:71:26:
5b:43:9c:6a:cd:a9:6f:94:a8:c2:2b:c0:eb:a8:da:6a:13:f7:
93:9f:6e:9d:7c:d7:8a:2a:ac:d1:e5:c0:bf:9b:89:f2:93:ef:
e1:07:77:46:45:2c:09:df:d2:ff:69:94:1e:1f:e9:9f:07:94:
e5:ee:5d:4f:5d:05:38:0d:95:13:70:1e:ec:64:e1:64:de:af:
04:6d:e8:ae:f1:87:aa:06:94:25:6b:8f:61:cf:e2:23:f0:05:
5c:ce:b2:51:a0:a1:27:1f:d5:da:21:74:2e:7b:d1:71:65:6d:
59:e1:ce:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:04 2025 by rpki-client