Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier: 4sQVCEkG7WYIzSojLdawg7go93AsHb0iUncG8Etfufo=
Subject key identifier: 98:38:C6:CD:9A:68:08:BC:99:A5:B0:CF:8A:98:75:49:B4:FC:E8:E2
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 019888B224533A2401F5C1F057BF0D5D8907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number: 040A
Signing time: Fri 08 Aug 2025 08:00:32 +0000
Manifest this update: Fri 08 Aug 2025 08:00:32 +0000
Manifest next update: Sat 09 Aug 2025 08:00:32 +0000
Files and hashes: 1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: MxfKat6MZta+FLWKsLPBkTNQd2APGtSWxl6qA/CHCtE=)
2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:24:53:3a:24:01:f5:c1:f0:57:bf:0d:5d:89:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Aug 8 08:00:32 2025 GMT
Not After : Aug 9 08:00:32 2025 GMT
Subject: CN=9838c6cd9a6808bc99a5b0cf8a987549b4fce8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:5c:05:d5:6e:eb:8c:d0:85:02:50:62:39:
ab:9d:6f:5e:f2:b6:5f:bd:d9:9f:68:e6:56:22:44:
4e:e9:15:9c:ea:69:0a:88:2d:62:b5:c6:13:06:35:
4b:08:89:f9:d5:17:4d:3a:05:6e:43:7e:7a:a7:0f:
c6:90:68:37:dd:29:23:e4:92:7b:d6:14:a6:27:00:
55:c0:6a:3f:ee:0a:60:7f:85:9a:8e:0f:a7:b2:e0:
1a:24:12:66:af:59:79:4b:b4:12:e6:85:74:1b:8c:
f5:2f:f2:d2:0e:bd:70:ba:c1:93:8e:6b:f4:0d:e8:
74:cb:d0:9c:9e:a0:6e:ff:b9:fd:eb:15:f6:4a:69:
5a:d3:00:3e:de:61:9b:f7:25:b6:dd:e1:0a:f3:1e:
1c:98:99:b3:f8:a1:fc:88:96:ae:f6:d6:56:34:3c:
ae:46:8a:99:22:29:ff:24:b1:9a:66:14:6d:0d:7e:
a8:4a:7e:d1:43:aa:ec:76:88:25:41:f8:33:d6:5c:
56:f4:f7:63:57:b2:97:32:64:7d:f3:0b:3e:d4:42:
26:0a:8a:a2:81:21:6c:ae:71:a3:a8:68:11:85:93:
34:3e:ec:20:3b:a9:85:99:08:a7:4f:0f:43:7d:c2:
f5:ab:6b:b2:cb:e4:18:f2:31:b5:c6:6a:35:3a:08:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:C6:CD:9A:68:08:BC:99:A5:B0:CF:8A:98:75:49:B4:FC:E8:E2
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:af:a1:73:13:44:93:0e:32:23:ed:90:b9:31:8e:10:ba:d5:
a7:db:5a:7b:ef:41:16:bc:e8:5b:7a:18:04:36:e7:ac:14:a3:
e3:42:48:bc:60:dc:62:74:a6:30:77:dd:6e:96:08:54:96:1f:
00:78:73:2e:09:4e:41:a2:c3:bb:07:b8:f5:5c:b0:35:43:53:
43:97:42:db:93:6d:1d:1e:10:6e:1b:f8:54:22:33:96:6e:ee:
d1:aa:e0:83:eb:4c:96:30:27:36:f5:47:55:41:2b:2c:87:9e:
36:aa:55:32:e8:a6:b9:b6:c8:46:ee:be:13:e7:12:64:ab:d7:
94:e3:68:81:d1:b4:b9:b8:15:cb:55:af:d7:bf:7c:28:b6:79:
a1:4b:36:a3:7e:08:32:fe:b3:fa:a3:71:43:ef:70:23:67:d1:
02:11:9d:7d:6b:78:5e:86:05:f4:93:1e:03:24:c2:d3:c1:18:
b0:f0:a8:86:73:44:83:94:72:14:dc:26:65:62:18:90:c8:11:
c2:c2:c9:f5:7e:0f:65:a2:aa:38:00:16:33:e3:90:06:36:8a:
4f:64:5e:18:fa:8e:43:09:18:9d:57:f0:85:ba:e6:c0:ea:20:
07:e2:6b:ac:0f:6e:65:1a:4a:4b:ba:38:b3:1d:ed:9b:92:b5:
37:d3:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:37 2025 by rpki-client