Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: mg5ckWEoFvkBQnwXgE8WaOD10yeO7guCFMXJ4WvfoWE=
Subject key identifier: 43:B3:68:02:2C:87:9E:14:75:C1:23:D5:C7:72:02:C5:87:39:3B:9D
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 01987BD2E02760BFA44ED06F287D105194BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 1014
Signing time: Tue 05 Aug 2025 20:01:14 +0000
Manifest this update: Tue 05 Aug 2025 20:01:14 +0000
Manifest next update: Wed 06 Aug 2025 20:01:14 +0000
Files and hashes: 1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: SNaA8+ugXQ2n5nWcV5+U8SRho+lTk4jVuUqyDdaRB0s=)
2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:e0:27:60:bf:a4:4e:d0:6f:28:7d:10:51:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Aug 5 20:01:14 2025 GMT
Not After : Aug 6 20:01:14 2025 GMT
Subject: CN=43b368022c879e1475c123d5c77202c587393b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:4e:9b:7e:fd:35:ef:d0:19:2a:01:42:6f:
aa:fd:07:65:62:9a:06:24:8b:69:e8:b8:f9:0f:7e:
4a:b9:83:5c:95:dc:d0:0e:52:20:2e:01:8b:e1:71:
d0:db:9d:1b:75:37:37:1f:84:62:96:bf:f2:68:1a:
2e:9c:81:69:36:50:06:a8:17:66:c7:32:13:94:88:
07:a5:d2:20:3e:2c:6d:ed:82:86:8f:b4:ab:cf:7a:
41:c7:43:8d:64:a8:3d:3a:e5:ea:d5:ff:81:a5:af:
35:16:b0:99:c9:d1:c6:02:9d:58:f4:66:1a:07:ea:
5c:22:59:b7:f5:9c:c7:40:64:38:40:7a:0e:e1:41:
40:ec:fd:07:81:59:96:bf:4d:a7:12:64:2c:b4:bf:
58:5e:f7:7c:f4:0d:8e:4b:db:37:53:ce:98:e8:de:
52:e1:67:62:2e:53:0b:b1:f2:f3:e0:be:0d:ec:43:
ec:d8:fe:41:aa:1b:ba:53:cb:fe:ef:9c:d7:84:e0:
75:e0:4f:7c:42:3b:89:00:ab:f6:86:e0:5e:77:2d:
9a:91:3f:31:ca:fb:9c:3b:48:a9:15:cc:8e:12:14:
6f:69:8b:96:6e:db:54:ca:50:13:9b:78:cb:71:7a:
f3:dd:e0:0e:81:a5:70:ec:74:52:04:38:ac:51:2b:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B3:68:02:2C:87:9E:14:75:C1:23:D5:C7:72:02:C5:87:39:3B:9D
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:72:b7:0e:27:d2:12:ef:77:15:19:95:a7:f4:16:d3:d2:26:
62:90:f4:24:f0:b7:43:b9:6e:fe:cf:c8:92:e9:60:48:a9:94:
20:02:30:f1:0c:f0:8d:4c:67:bc:58:c1:9a:d0:65:32:b0:8f:
88:6a:ba:c7:e8:45:5b:83:64:9c:73:b1:fe:f2:42:99:51:ca:
65:0d:db:83:85:cb:64:39:2f:01:b9:4b:21:f5:23:b6:66:9d:
45:60:28:9c:b5:ee:8b:59:d4:d4:32:33:c9:09:cd:f6:75:a5:
b9:5c:e2:75:a2:fd:b9:7f:97:ab:64:98:87:64:55:41:25:5b:
f6:5c:59:e9:76:9e:f7:62:22:b4:99:a2:eb:34:ed:5e:12:bf:
b2:06:93:f6:60:9e:ba:58:10:ca:2b:f2:c2:4c:d9:e2:da:7d:
bb:37:d9:ac:99:6b:a4:b8:2a:ba:c0:50:95:d2:e0:4a:23:0a:
5c:88:31:ee:78:23:39:fc:fd:3d:a1:9c:71:91:ff:31:ac:ab:
1e:ec:df:d4:f2:df:8f:90:4b:6b:ab:4f:0c:22:cf:90:7f:1e:
b7:84:3a:3b:0f:36:07:df:50:e2:44:d9:16:e5:80:38:33:f2:
ad:5d:00:45:55:a9:46:ef:d4:4f:17:93:f8:c9:23:21:5d:a1:
7e:04:4d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:36 2025 by rpki-client