Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: R8QZ34sYl9Xp8RfjN0fSco9+Z13Sx9v+YBJ4eRY13Og=
Subject key identifier: 56:0E:7A:43:91:5A:20:15:27:35:FF:44:04:E9:35:AF:D0:1C:A7:AB
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 019892C9BDFDFCCDB28F029F4E077ED9DE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0A35
Signing time: Sun 10 Aug 2025 07:02:31 +0000
Manifest this update: Sun 10 Aug 2025 07:02:31 +0000
Manifest next update: Mon 11 Aug 2025 07:02:31 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: gmWDKUzHU2jIh0MatvdnzqKqRRoHz7PAUjzFevpA6R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:bd:fd:fc:cd:b2:8f:02:9f:4e:07:7e:d9:de:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Aug 10 07:02:31 2025 GMT
Not After : Aug 11 07:02:31 2025 GMT
Subject: CN=560e7a43915a20152735ff4404e935afd01ca7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:f2:7d:6e:02:74:1a:e9:8b:b2:ff:36:c0:
d9:3b:09:7b:28:6e:e4:25:e5:82:31:5e:31:ee:7a:
7c:56:f7:51:ad:61:32:be:d3:25:4d:ce:d6:dd:0f:
7b:30:43:b7:f6:cd:02:9d:38:8b:49:89:0a:ed:00:
c5:30:5c:7c:ee:7d:f9:e8:ca:ca:53:49:7c:05:42:
5d:02:fe:1b:78:1c:8e:25:d7:c1:24:33:4e:94:dd:
5c:cd:88:cb:39:bf:50:50:8f:90:17:fc:76:31:b2:
e6:c1:7c:cc:e9:e3:c3:40:e9:67:6b:62:79:ca:98:
ac:b7:0a:00:04:bf:a7:d2:14:84:f4:62:a3:14:ba:
78:ce:5c:5e:98:43:2b:c7:9d:31:fd:4d:7d:c5:3e:
cd:de:6b:5b:23:ff:f0:ac:f6:d3:11:d9:84:b8:26:
ea:38:fe:0e:0b:e9:8c:a6:57:a6:41:12:2a:a2:c4:
d6:71:45:82:d3:61:e2:32:32:48:1f:5a:66:08:73:
57:b5:56:d2:a7:b2:d0:d9:39:fc:e8:0f:0c:79:f9:
d4:f7:5e:c5:c4:42:8d:b1:ad:bc:16:36:29:52:5e:
18:71:33:ab:24:3a:bb:1b:1f:3a:75:99:63:ee:17:
62:00:cb:ee:c5:c3:a0:50:aa:81:78:83:0e:d5:e0:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:7A:43:91:5A:20:15:27:35:FF:44:04:E9:35:AF:D0:1C:A7:AB
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:bc:09:f1:63:9c:3a:18:72:ec:be:28:ec:bd:16:b7:3c:
8f:fd:28:09:2b:dc:cc:0f:85:e4:14:17:6b:f5:32:31:90:3d:
10:f7:c1:8a:a7:aa:12:ff:c3:ee:74:96:e4:78:b5:3f:17:08:
b6:ec:6f:06:6e:ae:2a:6e:52:ac:0b:d0:6d:3c:1f:ba:61:72:
88:cd:9f:c8:b1:73:29:2d:0f:ed:d4:f2:ce:fb:57:c3:c3:8a:
66:6d:fe:2d:7c:a5:29:7b:0f:92:c1:84:0f:80:36:ee:25:2a:
7e:de:a1:f7:ca:99:f3:3d:f0:70:cd:5d:5d:a0:74:cb:da:e9:
3d:88:36:d1:94:bb:94:38:09:f4:5a:ac:59:99:14:c3:f3:1b:
82:b0:9e:b3:37:de:b7:f5:88:1e:bc:1f:15:44:4c:23:bc:aa:
6f:55:b4:41:60:e8:a5:10:42:66:21:0d:77:12:c7:66:b0:d2:
66:c7:6c:14:0b:2c:e4:f7:40:70:b2:31:da:10:8f:e1:3e:12:
25:4b:b0:9b:94:76:1c:1c:27:3e:fa:44:8a:64:c4:95:b5:43:
19:ab:7c:73:99:56:34:c6:fd:35:a5:c3:8b:d4:15:bd:66:16:
06:dd:42:df:ce:e2:38:39:c3:62:a6:2a:9f:5a:c7:68:e9:a4:
86:29:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:38 2025 by rpki-client