Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: 6WUu8/SOUyQlhUiA6NYnRqStVGRsU7Bnij54Ss8rHoc=
Subject key identifier: 3E:89:85:B6:F6:0C:4E:0F:3D:73:32:46:A6:0E:37:DE:DE:EA:75:C6
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 019880F963C64401D08159272E7040550F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 0FCA
Signing time: Wed 06 Aug 2025 20:01:24 +0000
Manifest this update: Wed 06 Aug 2025 20:01:24 +0000
Manifest next update: Thu 07 Aug 2025 20:01:24 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: tBKEzRtypB+eOOK0V5qnyx22pl1mBnzxixewHu4a5Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:63:c6:44:01:d0:81:59:27:2e:70:40:55:0f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Aug 6 20:01:24 2025 GMT
Not After : Aug 7 20:01:24 2025 GMT
Subject: CN=3e8985b6f60c4e0f3d733246a60e37dedeea75c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:53:ab:c2:69:aa:16:27:77:14:18:8f:5f:
a3:49:41:13:59:b9:3e:e1:52:2f:88:45:0e:73:33:
cd:b7:ae:db:7e:ab:6a:90:68:0a:73:f1:30:66:8a:
43:bf:bf:e1:97:54:2d:c7:f8:5f:44:aa:70:4f:b3:
5d:96:a8:61:f7:c5:bd:9d:dc:70:aa:0c:6e:e3:ee:
48:6e:ea:39:29:bc:04:f2:a7:ac:8f:9f:60:44:08:
bd:c5:e7:2f:83:e2:2b:42:cc:63:80:f4:22:66:72:
a8:7a:8f:6a:cb:60:c6:dd:c3:90:ff:04:6a:86:bc:
7f:4d:32:30:c8:e6:42:17:fc:e9:d5:06:ea:97:27:
7f:ff:10:bd:cd:dc:f2:7e:f4:a6:65:08:8f:24:48:
6d:79:ef:26:69:49:87:9b:2d:b7:07:64:ef:ef:38:
ef:f2:57:b7:8d:46:76:bf:04:08:c4:37:77:65:70:
7d:0c:eb:c6:96:a7:73:00:ba:1a:9c:0e:22:6a:9a:
80:62:46:ba:ed:0d:98:40:ab:80:64:f6:3e:6d:dd:
19:ce:53:70:cb:25:bc:ab:6b:bf:06:82:86:bb:bd:
20:6d:45:f6:23:f7:86:dc:5c:9a:b1:80:14:ce:0e:
6b:63:fc:08:aa:8f:56:53:33:6f:ff:30:00:e8:09:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:85:B6:F6:0C:4E:0F:3D:73:32:46:A6:0E:37:DE:DE:EA:75:C6
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:df:95:8e:da:88:9a:86:49:db:79:83:97:ee:ac:cf:57:
08:f4:f2:62:c8:91:b5:cf:57:c8:cf:2f:1c:77:33:b6:9f:f4:
57:91:a5:b8:25:1a:f2:c6:81:34:f5:2a:6f:c8:86:05:2c:69:
5d:26:45:10:2c:c3:8e:a6:29:9f:a0:35:e3:af:12:96:b7:e1:
ac:8e:4e:ba:6e:6f:ca:77:94:38:8d:e6:bb:60:45:5e:d8:3e:
06:bb:41:02:87:3e:89:c9:f9:a7:b6:38:67:00:22:4b:90:af:
97:df:e9:ad:76:ef:e9:f7:61:6c:13:ef:5f:cc:ab:78:c7:7f:
7c:5f:e3:13:ac:2e:de:53:62:ec:98:9a:52:81:77:9a:e7:87:
96:c6:80:57:7a:ed:a9:de:2b:09:3c:59:64:45:83:23:40:f2:
49:49:b3:10:9a:17:25:bf:42:42:bb:d9:6e:ee:50:0c:8a:96:
81:58:0a:14:72:66:f9:0d:12:3b:6b:f3:87:ae:3d:5c:e3:f3:
be:d6:78:8d:1d:21:ee:08:6d:66:73:a4:64:fa:39:f1:9d:05:
f2:e8:d6:17:ea:66:50:84:6b:c1:af:f9:22:9b:fe:af:c8:22:
d4:ea:45:9c:08:b9:b9:38:20:a9:83:dd:a1:48:4e:a4:f1:1e:
57:5a:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:11:11 2025 by rpki-client