Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: KX5AhnsFQPw7DVuXdNWs5KviogzCIOZ27/+PuXu9Upg=
Subject key identifier: 3B:0B:E1:2D:91:D0:73:83:19:FE:A4:68:AA:1C:12:05:12:C2:66:1A
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 019874BE1CA0DB824C659476E1486B3F1770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 10FA
Signing time: Mon 04 Aug 2025 11:01:12 +0000
Manifest this update: Mon 04 Aug 2025 11:01:12 +0000
Manifest next update: Tue 05 Aug 2025 11:01:12 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: RwrHyAab+bT7P426ffbT8OdXlbozuovD119lB4Mi/J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:1c:a0:db:82:4c:65:94:76:e1:48:6b:3f:17:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Aug 4 11:01:12 2025 GMT
Not After : Aug 5 11:01:12 2025 GMT
Subject: CN=3b0be12d91d0738319fea468aa1c120512c2661a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:f5:f2:23:ca:4a:f4:e1:a8:29:7d:8f:c9:
d0:3a:a6:23:70:97:1e:70:39:df:d4:93:96:51:4c:
d7:69:c7:f2:3e:de:98:2b:36:d6:3c:ee:4b:09:24:
45:3c:3e:a3:c3:d8:1e:02:2e:0d:e3:fd:86:c1:ed:
7d:1e:94:f9:02:fe:e0:55:39:69:46:5c:02:8b:df:
39:9c:e0:09:16:d4:fb:82:6e:f2:3d:64:d6:5c:4b:
8d:45:97:2d:c4:9f:0a:ce:85:1d:01:7a:16:fe:b4:
e3:b9:f3:72:80:1d:54:90:00:cd:a2:b4:2a:0e:9e:
5c:06:84:14:a7:11:ee:25:9d:76:b0:88:52:10:65:
3b:aa:08:00:4d:05:75:59:30:eb:ad:88:e8:a8:8f:
b8:56:cf:51:d0:6c:b5:ff:71:a1:d6:24:b5:8d:1d:
a9:9b:05:2e:6f:b6:a3:f3:8f:da:10:7f:4b:b6:9e:
16:14:37:a3:ef:66:91:df:34:95:ae:77:91:07:01:
3c:3c:a9:c4:20:27:55:10:63:80:13:13:f9:35:83:
e8:b6:4b:88:55:f8:ec:97:00:73:c1:ac:da:bf:77:
aa:d1:e7:7c:25:9e:83:24:8c:90:41:9a:bf:6d:87:
ae:1c:4c:35:24:f2:e1:45:37:b6:22:ee:95:fe:45:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0B:E1:2D:91:D0:73:83:19:FE:A4:68:AA:1C:12:05:12:C2:66:1A
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6c:dd:72:13:e0:40:6d:52:83:9a:d1:31:a1:6a:6b:49:ae:
ed:d7:92:25:36:e2:43:fa:9b:f2:4d:34:ed:24:e9:f6:da:52:
16:32:1f:6c:0a:e9:c1:2b:78:12:b1:ea:f9:f5:0d:1a:9a:50:
7e:a6:6b:b1:11:59:48:23:c9:47:2e:31:db:52:19:39:aa:d9:
70:66:ff:00:69:c5:83:81:6d:7e:2e:66:b9:d2:e9:42:d8:e8:
61:40:e3:e9:e8:28:7f:97:82:87:57:f5:29:d2:e5:72:c5:4f:
62:94:1e:ab:ad:4e:5c:bf:04:ec:d9:f0:82:04:f5:0b:e1:c6:
ef:62:e8:e5:5f:cb:41:b8:e7:ba:bf:94:e8:68:d6:89:26:81:
2d:50:2a:e0:3f:32:6b:6e:82:b4:3f:e6:8c:f2:88:5b:43:ec:
c7:8b:fd:08:8c:89:73:3e:16:02:48:60:e5:f3:c1:30:f9:c0:
a6:a5:f6:53:c6:84:5f:f9:46:5c:ee:58:d4:48:e1:34:fc:51:
f2:8c:5d:5c:4f:48:30:04:48:f1:cf:79:eb:2c:ec:81:82:21:
27:e2:73:13:56:48:af:ae:fb:15:0d:45:53:8d:36:b9:c2:d0:
de:b3:5b:a5:2c:54:ca:05:12:11:88:01:c3:48:39:6b:5f:d4:
bc:bc:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:06 2025 by rpki-client