Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
File: qreGFvOzntSCDQTOCY6nwgZVMUs.mft (raw, json)
Hash identifier: kMg+acFqFeP3KMeYl7o0MgaP2vw4MRb7b6Di5q/LRtY=
Subject key identifier: C0:D7:F0:55:FA:07:95:84:29:F4:FC:7D:0E:55:D2:9F:D5:8B:34:7B
Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Certificate issuer: /CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Certificate serial: 0198741928200B6F7EF50C91564BD96BFDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 08:01:02 +0000
Manifest this update: Mon 04 Aug 2025 08:01:02 +0000
Manifest next update: Tue 05 Aug 2025 08:01:02 +0000
Files and hashes: 1: qreGFvOzntSCDQTOCY6nwgZVMUs.crl (hash: CUSXN8fsEV3/05eyejTmsbY+cHp/+S9vNRWU06ioC28=)
2: rFCa92sZ57rbSlpDFnJkYc6lQas.roa (hash: F4iKR691e2AK34cFxmtOhRMANb+mE4me/fLCv0E4c8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:28:20:0b:6f:7e:f5:0c:91:56:4b:d9:6b:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Validity
Not Before: Aug 4 08:01:02 2025 GMT
Not After : Aug 5 08:01:02 2025 GMT
Subject: CN=c0d7f055fa07958429f4fc7d0e55d29fd58b347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:37:55:dc:56:de:0f:ba:6c:8a:f5:c4:78:
16:e0:89:57:d7:40:73:fb:5b:4a:ee:06:7f:02:b2:
60:d6:9e:0c:3e:cf:4c:d1:29:29:17:50:66:2f:87:
d5:14:43:d9:bc:f2:5d:f2:1d:02:51:ac:d2:30:52:
6a:85:27:12:54:56:c3:30:64:81:80:33:f7:ea:68:
7b:77:2e:f8:42:f4:da:4e:62:05:b7:9e:c7:ac:23:
52:20:88:cc:65:4c:24:ef:3a:f5:60:27:35:1f:9c:
81:ed:be:6f:1b:42:41:e1:82:95:a4:09:57:7b:1b:
e0:5c:78:9c:a0:f3:43:2c:a1:0a:94:0e:06:90:e2:
17:bf:8b:2f:92:dc:0d:7e:9c:49:b0:56:0c:75:58:
84:31:4b:f4:e2:f9:5f:97:2f:45:9f:6f:c9:08:5c:
90:81:cb:0a:01:3d:a0:83:e8:c4:45:ae:f5:b4:43:
79:6c:a9:74:64:cc:b2:4b:b5:41:6e:c2:56:bc:4e:
78:c6:6f:e4:a0:05:42:f3:36:e4:0c:dd:91:2f:58:
76:21:df:bd:d1:94:51:01:e8:30:c8:00:f9:b6:9c:
2e:eb:e7:fd:7b:66:e3:36:5d:ef:0f:45:79:fa:52:
27:0b:96:8a:7a:dd:3f:3c:4f:dc:8e:21:11:cc:e7:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:F0:55:FA:07:95:84:29:F4:FC:7D:0E:55:D2:9F:D5:8B:34:7B
X509v3 Authority Key Identifier:
keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:65:2b:8e:c5:06:82:9e:c9:20:35:97:b0:75:72:6d:36:
ad:0f:a2:66:52:86:c5:d0:14:52:fb:eb:39:81:8b:77:82:7d:
df:2b:ff:8d:43:09:a7:b3:47:79:3b:37:b4:d9:79:c3:82:67:
d0:dc:f1:59:c0:95:d6:b0:17:7c:5a:57:2c:4d:99:c8:5d:73:
af:d3:f4:f4:3f:15:d7:c6:b2:09:75:45:78:97:a6:6c:97:24:
2a:2a:b6:e1:b6:c8:78:ff:64:c4:ab:cb:1e:60:0d:e5:47:d0:
65:61:9c:85:a7:f5:79:0b:bd:6b:96:e2:0f:08:fe:88:65:42:
ca:4a:6b:c7:56:47:b8:af:68:62:8f:90:e9:b6:0b:44:6f:97:
0f:bc:bb:3f:15:3a:4e:96:25:df:de:84:61:55:9e:0f:76:42:
df:4a:69:12:0d:fa:be:c2:20:1c:09:88:00:d6:64:d3:8e:66:
75:da:98:0b:4f:78:52:44:f1:e9:07:b3:59:59:a1:26:35:41:
44:ef:85:90:36:ed:07:28:4f:25:36:69:50:4b:06:e9:18:04:
fd:33:1c:7f:38:14:36:46:40:a7:96:e9:97:01:ab:01:e6:38:
2c:16:82:93:6f:b9:8b:73:66:8a:4b:97:0e:3c:be:2d:d3:17:
7e:fc:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:40 2025 by rpki-client