Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: JWi6BRigJBsD2lDU3A0RlLzHTlKXm3cWkF57J4m5cV8=
Subject key identifier: DB:40:19:71:C7:78:16:C2:AC:2E:91:62:24:6F:60:C5:A3:F5:F5:EC
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 01988CFD064AA21FD800B81AC80C3C058158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 136F
Signing time: Sat 09 Aug 2025 04:00:49 +0000
Manifest this update: Sat 09 Aug 2025 04:00:49 +0000
Manifest next update: Sun 10 Aug 2025 04:00:49 +0000
Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: /rbZ8Qe2nlQirpPTz0PbzEM4ERXqtro5PdWiwkdJ7G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:06:4a:a2:1f:d8:00:b8:1a:c8:0c:3c:05:81:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Aug 9 04:00:49 2025 GMT
Not After : Aug 10 04:00:49 2025 GMT
Subject: CN=db401971c77816c2ac2e9162246f60c5a3f5f5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:b7:84:35:a6:e0:c7:e6:59:63:d1:4f:e0:
de:fc:7c:c6:78:83:d4:ca:c5:bd:ea:4e:e8:4c:c3:
dc:b3:ed:e1:2e:e3:46:7d:e2:b5:85:44:ac:39:71:
e8:a1:31:39:2f:16:80:5f:34:c7:3e:63:d0:dd:c6:
18:54:89:36:29:bd:ed:98:73:83:ff:57:64:e3:f1:
f8:f1:f5:2e:07:b4:04:87:f5:f1:c9:5a:03:dc:86:
8e:c9:90:9d:ec:6a:1a:e4:2b:56:24:a3:1d:4a:39:
41:fd:9f:22:42:45:5b:a0:e1:61:95:96:8e:11:ab:
32:e3:5b:10:11:e9:42:a0:4e:45:d5:77:68:8a:2f:
fb:7f:dd:17:cf:97:a5:19:fe:40:fb:c3:e2:b1:9e:
de:5d:dd:44:18:eb:d0:e3:28:39:7a:6a:95:35:a0:
12:6b:e7:63:ab:27:b8:8a:15:1e:5e:cd:a2:40:dd:
d8:95:8e:3c:f7:0d:9e:d1:bc:7d:8d:0e:ab:99:4c:
9e:af:5d:0a:81:18:21:50:20:ef:49:73:45:92:a0:
fd:99:1e:35:60:2f:20:27:dd:6d:50:a8:18:c6:28:
3c:c2:7d:52:a8:fb:54:d0:ef:f8:97:7d:2e:f5:78:
7f:c0:63:d1:7b:c7:70:a9:c4:46:80:28:56:69:0e:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:40:19:71:C7:78:16:C2:AC:2E:91:62:24:6F:60:C5:A3:F5:F5:EC
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8c:79:14:14:74:7e:27:74:95:f3:dd:50:aa:c9:85:a6:85:
23:2c:3a:96:7b:d0:32:1d:e7:46:62:40:81:15:85:e9:30:e1:
e8:5d:6f:0d:e6:ae:47:79:9b:a7:d7:84:08:d8:04:e6:6f:ad:
8e:cd:f7:2d:e2:50:1a:f9:15:55:00:27:7f:aa:8d:e0:6d:66:
ac:b5:86:38:3a:d7:f1:ce:df:73:95:9d:5d:0e:7d:81:ca:bb:
4c:29:36:9d:d0:84:a5:79:cd:ad:a4:0a:aa:82:b2:0e:4e:6e:
eb:5e:ba:15:bb:d0:1c:4e:b7:69:02:0f:66:8c:6c:31:91:9c:
26:94:c3:92:db:a7:ba:07:11:26:d8:ac:4f:c0:6e:96:4b:61:
86:3e:af:5d:08:d5:04:6c:99:8c:99:7d:6b:1d:c9:d5:62:b1:
27:e6:5e:ce:3f:6b:3c:f3:67:48:79:bb:f0:c7:29:ad:4b:bd:
b0:68:b9:09:4f:ee:d4:18:e2:67:c1:63:5e:64:2b:83:39:e0:
89:e7:1f:1e:4f:60:40:6d:df:c4:f6:7b:06:de:d7:90:b7:be:
96:57:3f:f1:8b:ce:19:9a:0a:2f:9c:df:7b:32:a0:56:6d:26:
84:b1:cc:12:80:5a:30:b0:a3:eb:18:bd:65:31:4c:d2:99:b5:
3d:e5:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:09 2025 by rpki-client