Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier: HJ3N1lDT6sMSNO3fkiwYxBqrsCKMf6MF2Ssc7IsFbRQ=
Subject key identifier: 05:CB:86:35:3C:D1:60:88:F8:DC:E1:4D:CA:EA:BE:7C:2C:CF:05:C5
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 019887D6C3481A8176CB898B5294D60207AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 04:00:55 +0000
Manifest this update: Fri 08 Aug 2025 04:00:55 +0000
Manifest next update: Sat 09 Aug 2025 04:00:55 +0000
Files and hashes: 1: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: PKD+Xy7Jfefp5UAJmtqJS5RgahX8eo5HCL+X4fm4P38=)
2: Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa (hash: 4Yb+dRFpkkMPfeWzASwoM5NrRtcERhjg7Yl8jCZxXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:c3:48:1a:81:76:cb:89:8b:52:94:d6:02:07:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Aug 8 04:00:55 2025 GMT
Not After : Aug 9 04:00:55 2025 GMT
Subject: CN=05cb86353cd16088f8dce14dcaeabe7c2ccf05c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:cd:ef:4b:63:e0:37:03:14:9c:b8:08:80:
46:aa:fe:96:db:c6:43:5b:f5:97:d9:67:5f:39:7c:
4b:79:ac:de:fa:12:2b:ed:9c:84:24:5d:35:bc:52:
3c:90:1a:d6:b5:c9:0f:98:9e:ec:b9:5d:71:2f:d3:
63:c9:dd:01:4f:91:48:16:5a:5a:7e:44:09:4c:98:
0c:51:6c:53:db:5e:43:3f:4a:4f:9e:08:2c:d2:8c:
5f:06:83:c9:ad:75:f1:3a:ce:9d:52:48:f4:6b:f4:
fe:f2:f8:5b:ec:68:1e:08:69:28:db:aa:5a:c5:e7:
a3:fe:c5:81:e3:b7:42:90:3f:12:1b:0a:ce:0f:53:
8a:e1:27:03:dc:13:79:09:30:3c:bf:c4:d2:39:ed:
06:2e:4e:9d:d2:77:03:22:19:26:af:7d:e1:67:9b:
71:0f:c3:e3:38:b5:71:b0:a5:f7:ba:89:6b:c0:91:
a3:3d:d1:c7:f2:c2:04:69:d6:6a:72:cc:01:20:ae:
eb:72:1b:64:c9:56:22:86:14:f8:ae:91:e4:e9:96:
32:90:ee:d9:db:b5:af:b8:0d:e3:12:2f:08:10:9a:
64:f5:5e:3c:59:d9:2b:d1:70:a8:cb:21:65:85:39:
66:87:ef:67:44:f5:86:a8:73:f8:5a:0a:af:b4:77:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:86:35:3C:D1:60:88:F8:DC:E1:4D:CA:EA:BE:7C:2C:CF:05:C5
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b4:1d:f2:69:7b:16:df:e1:dc:e6:97:db:51:ba:14:2e:3e:
8d:a6:67:4e:0f:ca:07:ac:7d:8c:9c:2b:8d:aa:69:ce:1b:c4:
71:0c:9d:b2:25:0d:76:1a:be:76:b0:61:93:e3:e6:39:a5:2b:
57:6a:0c:b0:85:39:62:d7:1e:3d:1c:37:5b:19:c1:0a:1a:16:
4a:b3:3e:5a:76:56:2c:ab:11:50:fa:a3:c6:51:ab:ae:32:d6:
38:25:fb:84:1f:41:79:65:3e:cf:1c:7e:6f:05:28:75:3b:ad:
a2:4d:87:c6:29:2f:c4:ac:02:60:1d:3e:66:08:90:2d:96:8a:
64:96:c9:20:fb:f4:99:bf:00:34:70:5c:42:43:0f:dd:00:0a:
8d:9c:f8:8e:af:eb:ae:66:9b:0b:f3:81:1d:14:61:ed:ba:35:
cf:c7:d1:06:06:2f:12:e5:c9:df:30:3e:1c:b8:bf:a9:78:34:
91:5f:4f:59:33:bd:f6:fa:e7:df:57:b4:63:53:9d:c0:4d:fa:
19:86:bb:af:21:6b:a0:78:9d:be:b5:3b:50:de:c4:d4:2b:9c:
3e:d1:47:bb:2f:43:b4:da:37:8c:e2:5c:5b:48:13:ef:15:cf:
7b:94:0f:97:90:53:16:ed:af:99:78:c3:b4:6c:6c:70:8e:8c:
9d:b6:1f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:57:58 2025 by rpki-client