Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: +IqMV6R2QYLhiUkTsalBZZXOC1MAjrzl4rNgd1Lg4Jk=
Subject key identifier: 03:72:41:F5:39:DB:F2:CD:BD:2A:F6:23:44:51:34:9B:51:D0:E4:28
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 01988E46D7F00953BBBF96CCFB1084830790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 1167
Signing time: Sat 09 Aug 2025 10:01:03 +0000
Manifest this update: Sat 09 Aug 2025 10:01:03 +0000
Manifest next update: Sun 10 Aug 2025 10:01:03 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: rnOo7TZAy2Cg/V88qCCcTGg4wE3dMxXun4bTRL/GS/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:d7:f0:09:53:bb:bf:96:cc:fb:10:84:83:07:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Aug 9 10:01:03 2025 GMT
Not After : Aug 10 10:01:03 2025 GMT
Subject: CN=037241f539dbf2cdbd2af6234451349b51d0e428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:43:aa:6d:c5:25:51:67:61:7c:da:39:3c:
8f:d5:e4:28:79:c6:73:ec:57:81:de:28:0e:0a:8a:
c1:4d:56:67:1d:97:47:4e:d8:e5:f0:1b:b0:1c:a3:
a9:c6:f4:7e:b3:1f:aa:65:47:56:4a:f8:f0:66:00:
95:d6:1d:51:37:f1:d7:f5:d4:29:72:81:36:a8:b6:
6a:31:21:09:5b:ee:36:19:a1:5b:5b:82:36:49:36:
db:18:cd:97:b3:94:ba:83:32:a4:14:82:35:d3:08:
a0:80:85:0c:5c:2b:90:fa:24:59:74:7f:0b:1c:8a:
b2:94:b1:da:1e:91:bf:8d:c3:82:7f:0b:d8:a7:89:
0d:fc:7f:13:2b:81:99:51:f8:54:47:5c:1f:2c:0f:
4e:c3:83:bc:c1:0f:78:4e:ff:0e:3d:3c:45:aa:9b:
b9:eb:fa:1c:d6:a3:8a:ec:9d:ce:8a:64:85:b7:2e:
a1:ed:b5:6b:1c:8a:3c:3d:db:fd:05:2d:11:7b:2b:
3a:22:0e:8f:68:c3:67:13:d6:ac:8a:e6:2d:0c:c7:
38:dc:71:e3:bf:07:ef:58:ef:44:62:cc:91:09:12:
3b:17:8b:12:04:0a:5b:4b:3e:e1:88:0a:02:b3:57:
c2:88:9c:d9:75:e0:ed:55:a7:f1:38:16:a9:d0:d4:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:72:41:F5:39:DB:F2:CD:BD:2A:F6:23:44:51:34:9B:51:D0:E4:28
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b9:bf:fb:26:bc:8b:6a:31:03:31:b1:71:3c:38:96:5f:13:
ed:48:62:03:09:2a:7d:2d:ee:b6:2d:11:8f:14:16:ad:34:1b:
39:99:78:7f:3d:fb:77:af:9e:13:ed:e1:f9:db:7b:da:29:25:
96:6b:4d:8b:fd:7a:a2:82:37:84:1e:bd:28:6c:58:18:7a:93:
dd:1b:27:b1:4e:47:65:a4:d0:63:1f:79:3c:2f:cf:b1:20:79:
35:5d:e1:d9:88:d8:69:e4:b8:0d:ba:a1:f4:36:fd:16:11:9a:
e9:b9:1c:03:48:6b:4e:a0:82:33:a2:cd:a7:c6:9d:05:d4:04:
0f:b7:90:1e:cb:2d:ba:5a:99:5b:7a:6f:09:d1:1d:ea:5e:a7:
2b:83:9e:87:36:05:eb:b0:52:02:ec:67:e7:52:46:d2:32:e9:
e5:60:34:51:55:21:ef:ed:a9:c0:a4:25:d9:fd:db:46:b6:12:
0e:c7:48:3f:1f:bf:fa:75:90:c7:af:66:c5:d7:46:57:f0:76:
29:5e:11:8a:a7:66:5c:b4:38:7d:39:5b:00:80:b4:03:cf:ff:
76:43:1e:9d:e3:f5:59:fb:12:0d:11:03:f2:d2:b0:c6:88:1d:
a5:ae:8d:77:f0:12:48:42:32:bb:50:89:af:52:7b:25:af:56:
09:b2:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:16 2025 by rpki-client