
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: eupWiWJsbGAmIS7D/NHOQjNS5uApDKPAvnefLVlwQYk=
Subject key identifier: 0A:ED:04:33:14:3E:DA:40:C8:49:1C:CD:0E:1E:B7:BE:CD:FB:9D:9C
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 019880C205B39816F3DB83189FEF18609D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1360
Signing time: Wed 06 Aug 2025 19:00:55 +0000
Manifest this update: Wed 06 Aug 2025 19:00:55 +0000
Manifest next update: Thu 07 Aug 2025 19:00:55 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: olv3DJ1e6oswTblQ9cgsFyaNegEDOpD3/cNK7ZSo9/k=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:05:b3:98:16:f3:db:83:18:9f:ef:18:60:9d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Aug 6 19:00:55 2025 GMT
Not After : Aug 7 19:00:55 2025 GMT
Subject: CN=0aed0433143eda40c8491ccd0e1eb7becdfb9d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:cf:3b:7f:b1:07:7f:7b:df:17:91:9b:71:
3a:e5:e8:5f:d4:d4:a3:f5:f4:28:06:1f:f6:7f:9b:
e9:be:05:01:21:5a:c9:9a:40:dd:2c:fb:fe:3d:9a:
ec:64:5f:86:e0:82:8c:ab:3e:41:eb:71:bf:24:2b:
34:10:14:ba:cd:0f:ae:8c:d3:91:5a:d3:8b:96:21:
9f:48:cf:3a:1b:15:45:28:be:43:29:d6:bc:6c:e4:
92:14:dc:de:ea:1a:56:e5:99:17:82:5b:98:ea:c0:
a5:e4:4b:ef:2e:2f:a8:f3:52:a4:76:68:38:46:d9:
0a:87:fd:ae:1f:27:90:f5:5d:a1:e2:3b:9f:e8:14:
20:c0:51:ee:7c:3a:30:4b:55:5d:36:06:ad:1c:05:
2a:19:8d:ed:db:07:d5:52:e8:23:d9:07:9d:23:f2:
9c:5c:d8:ba:0c:e8:d9:b0:db:c3:a1:fa:e5:65:c9:
74:bc:42:f0:07:9c:89:e8:f3:0d:37:9a:c1:75:e6:
a4:70:9b:c0:8f:2a:46:b4:d2:9a:48:90:1b:21:dd:
4e:b8:4d:60:77:c6:3c:0f:51:1a:ad:a5:39:fa:89:
20:8c:74:95:5f:93:51:bc:18:54:8b:2f:44:84:85:
1f:5f:7f:72:e3:fc:40:fc:8e:62:a5:d0:5d:6d:d4:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:04:33:14:3E:DA:40:C8:49:1C:CD:0E:1E:B7:BE:CD:FB:9D:9C
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:37:6d:75:7b:1b:bd:11:4b:37:f1:5d:6d:01:1b:fb:5b:
e8:59:1a:84:2b:23:e6:c9:ba:ec:b2:09:a3:fb:b2:ee:0a:5b:
4b:83:6a:03:b4:49:89:ec:5b:b9:5f:be:c7:44:2c:bd:53:f8:
94:db:9b:e1:d4:40:bd:02:f3:bf:15:d2:4e:91:e6:65:bf:cf:
5d:46:6b:03:9b:31:25:2e:2d:31:ee:99:21:e2:a9:2e:e0:52:
d9:0b:f8:c6:d7:af:41:39:68:56:29:f5:ea:5b:2d:b3:c0:a6:
17:92:0e:31:8f:41:84:c6:90:2d:d6:25:39:64:c6:61:0b:d9:
ad:e1:63:b1:84:d5:af:2f:bf:47:5a:49:aa:81:2d:ab:0c:3f:
fe:8e:68:71:e1:05:c8:1a:6b:1c:6f:60:75:c8:f8:b4:9e:29:
33:7e:33:b7:6f:bb:c9:cd:ed:e5:0d:96:60:d0:71:1e:89:f5:
d7:eb:96:93:93:cc:58:60:3d:a5:dc:7e:de:a2:a7:b5:92:75:
83:96:6d:ad:9c:06:5b:75:0a:09:38:01:be:ba:ed:d6:f5:d5:
3f:6c:54:98:5b:4f:27:8e:45:84:84:96:08:c5:d6:6e:2a:e3:
47:40:50:7d:e6:dc:62:e3:57:82:26:e3:93:81:10:7d:e0:62:
08:d4:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:23 2025 by rpki-client