Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: xxJJRNDwhZXMs6NBgdVk3ybkfijQNwPMR3odLuaE/zI=
Subject key identifier: 9E:38:AF:8F:C9:D9:23:19:5A:90:19:F0:39:98:16:CB:5A:9D:5C:CF
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019882B0DECF2BD10324C0C7839381DCE24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0B00
Signing time: Thu 07 Aug 2025 04:01:25 +0000
Manifest this update: Thu 07 Aug 2025 04:01:25 +0000
Manifest next update: Fri 08 Aug 2025 04:01:25 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: pHfbZ0rT7JfxjVVpBUyxGoxFxishK3KDsC4TAILx7cI=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:de:cf:2b:d1:03:24:c0:c7:83:93:81:dc:e2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Aug 7 04:01:25 2025 GMT
Not After : Aug 8 04:01:25 2025 GMT
Subject: CN=9e38af8fc9d923195a9019f0399816cb5a9d5ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:c9:0a:6b:2f:85:1c:b2:c5:11:25:c6:02:
17:45:46:03:67:a9:29:72:49:e5:64:01:11:ac:05:
d5:f6:67:1b:7d:3f:4c:47:59:17:14:3a:28:64:8d:
74:8b:07:d7:49:84:7c:80:5c:33:4e:7e:67:92:4b:
7b:67:4b:3b:7b:ed:74:f8:00:0d:44:ab:04:09:c7:
0e:d2:09:57:37:58:2f:07:6d:9b:6d:c7:56:3f:0e:
57:5a:6c:00:22:37:7b:5b:b8:2d:b8:be:94:9c:4b:
99:df:d0:f2:d5:0c:5d:43:8c:be:2b:ad:cd:8a:e3:
20:1c:25:bb:50:34:b5:7b:42:73:43:ee:8a:8f:f7:
a2:47:15:3f:4d:61:95:6b:07:42:56:49:3d:31:5f:
87:cd:95:2e:ad:be:f9:1b:16:cb:dc:18:1e:d7:aa:
fc:89:e2:b4:d3:b3:a8:1a:ef:e9:a0:14:e1:65:0d:
e8:8c:86:ea:8c:68:6b:fc:59:91:ed:51:85:c2:dc:
51:c0:60:60:e5:48:da:5c:cf:fb:f0:ef:3e:f4:ff:
ee:2a:de:ce:d1:a3:03:c7:ce:63:68:2d:87:bd:33:
e4:e1:0e:34:06:17:7a:cd:ac:b2:97:bc:d8:93:84:
8b:d9:0a:5e:bf:aa:b9:d7:7a:dd:ac:61:2e:ae:77:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:AF:8F:C9:D9:23:19:5A:90:19:F0:39:98:16:CB:5A:9D:5C:CF
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:32:f3:91:71:af:64:e7:f9:5a:3c:3b:df:23:5a:76:81:bd:
12:6a:c2:a2:d7:43:a9:f0:81:5b:07:f4:9f:02:71:c6:79:d1:
c7:7d:78:9f:16:04:fa:30:cb:e7:b4:d4:58:70:ec:5c:ec:a8:
a0:d8:9f:19:6b:88:25:82:d7:b5:9e:fc:5e:67:06:c7:67:96:
33:85:9e:79:50:b0:76:dd:61:cf:c0:8e:b8:8e:e3:2b:39:7c:
03:2d:6a:ff:dc:1e:21:4e:dc:f0:48:6f:59:1f:b5:a4:c9:62:
c9:4a:29:b1:36:5c:f3:a1:3d:eb:71:ee:d9:ae:ee:e8:fb:88:
5b:13:85:9f:72:46:e9:5e:e6:7c:61:b6:fa:10:5b:48:03:78:
96:7b:b5:ed:58:4d:ab:23:47:b2:e4:a6:09:b4:d9:5c:a3:98:
65:1c:6f:1e:e7:a4:3a:65:5f:35:b7:9a:5b:73:55:30:af:5f:
de:cc:af:0a:8c:96:b9:c1:0f:4e:23:a1:d5:62:c4:a6:3a:e1:
dc:c2:05:e5:47:45:f8:60:40:3b:45:49:31:91:48:b8:94:de:
77:e7:43:b2:c7:38:66:a9:3e:86:63:a0:47:78:38:ee:6b:69:
14:2a:7e:b7:83:47:8f:ee:d2:43:61:4f:74:87:86:d5:5d:36:
3c:06:ba:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:25:53 2025 by rpki-client