Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: Z/HXZ5lqRjJB6tNVunDVBQ3mLBuxqLQcRe17akLsyDU=
Subject key identifier: 9F:3B:43:CB:10:52:8E:41:4A:98:FB:C9:FF:DC:6E:F8:AB:2A:97:BA
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 01988C58B2D794E1223398235673B58B7BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 15FC
Signing time: Sat 09 Aug 2025 01:01:19 +0000
Manifest this update: Sat 09 Aug 2025 01:01:19 +0000
Manifest next update: Sun 10 Aug 2025 01:01:19 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: IwQswNT108xmjSgQjF4TMAbwZCZAy9P2DIc75Cs9wuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:b2:d7:94:e1:22:33:98:23:56:73:b5:8b:7b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Aug 9 01:01:19 2025 GMT
Not After : Aug 10 01:01:19 2025 GMT
Subject: CN=9f3b43cb10528e414a98fbc9ffdc6ef8ab2a97ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:d1:60:1d:79:70:7a:30:2e:48:19:8c:07:
0a:24:75:cf:5a:bf:29:80:fe:88:04:d7:88:e8:ec:
ff:77:e1:7e:14:bf:be:e5:a6:e9:48:52:c5:d2:54:
2a:cd:b4:9a:e0:2a:ce:9a:9f:3c:ed:83:32:1d:62:
b4:3b:40:e2:8b:cf:3a:ef:80:24:67:7a:54:ee:70:
75:7c:28:8a:fc:d8:d9:69:78:8a:6f:00:c7:11:48:
4f:fe:98:02:88:05:95:6f:4b:72:4f:44:dd:f1:b8:
fb:ef:83:64:e9:c4:6b:43:c9:18:ed:cd:3d:cf:b9:
4f:d8:1a:0f:61:f0:6d:fd:b0:db:a8:67:e0:e3:22:
93:a7:77:a4:86:da:37:38:e9:fb:7a:16:53:2f:2d:
c2:b3:f3:7d:33:db:c4:d7:6c:a2:41:58:8b:47:d3:
a9:2d:e4:d9:a4:9e:e6:af:75:62:79:20:36:f7:48:
96:1f:d8:a5:89:d1:17:21:da:37:0a:ac:01:a7:09:
55:55:b5:d8:e2:92:24:72:91:d7:c3:b9:3e:89:d8:
0f:33:8a:de:86:fd:d2:a9:62:ff:31:5a:d2:da:db:
3c:73:6e:b9:7a:24:aa:c4:44:15:f5:af:97:02:93:
e7:2f:c2:69:96:d7:a1:fd:37:af:9c:10:7d:42:3c:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:43:CB:10:52:8E:41:4A:98:FB:C9:FF:DC:6E:F8:AB:2A:97:BA
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:dc:c1:ec:62:d7:42:cf:51:e3:4e:3a:45:09:bd:bc:e4:f3:
95:cc:76:11:91:61:6d:47:d6:4c:f8:75:a2:2f:6b:9a:b7:f8:
91:a5:0e:c2:cf:f1:91:fd:b9:9f:2d:aa:7b:ff:a5:4d:d8:bf:
18:71:7a:62:67:5f:c5:23:24:3a:9b:0d:a7:0b:e2:22:ac:70:
c5:a3:8a:ac:19:a7:27:93:25:99:82:7f:21:ec:c7:31:3a:89:
6d:49:e5:13:6b:fe:8b:2b:89:50:c0:94:b6:5d:d4:a5:de:8f:
67:b3:b8:a8:75:9b:7b:4c:1a:9d:0c:e2:e5:b1:9a:8d:53:90:
d3:7c:c6:51:ff:78:84:c1:fa:02:5f:c5:f7:ac:21:0a:8e:90:
1f:5f:2d:35:4b:19:64:dd:90:72:45:0e:37:24:bf:ef:af:e3:
7a:2f:79:fc:dd:97:fa:e8:ac:6e:60:5f:6b:4c:55:3a:7b:a6:
58:8c:9b:26:f5:2d:1d:23:3e:47:08:e5:ca:79:39:a2:49:52:
5e:de:a2:9b:2d:f7:f9:cc:1e:96:cc:88:ac:8b:4a:a3:8c:3e:
b0:b7:8b:6f:78:e3:17:f0:f0:fb:df:46:b4:ea:0b:78:e9:a7:
3d:75:20:34:52:f8:a7:68:23:81:ef:6d:b9:99:6e:6f:6a:b9:
1c:c3:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:03 2025 by rpki-client