Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: 9LF3AgcF/BiMRUJq9Hj544Jr6Fyag58JKiw/j3Gg/2g=
Subject key identifier: 49:87:FA:02:E4:C7:48:4B:B1:E0:65:16:6D:F1:43:92:4A:A7:33:B6
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 019896DBDBC96A3008FCCA15C454AC838C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0BFD
Signing time: Mon 11 Aug 2025 02:00:47 +0000
Manifest this update: Mon 11 Aug 2025 02:00:47 +0000
Manifest next update: Tue 12 Aug 2025 02:00:47 +0000
Files and hashes: 1: 9DaFft1ZRBebRPooZGGkOPjqAbQ.roa (hash: lYC82jjgh3RxcDkcuO3IXX6eKV+DE4TIh12Xui9zOW4=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: E1t/IoSJjRjdM5j42MfBkoCrgKkpfef2om/8M3qqM6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:db:c9:6a:30:08:fc:ca:15:c4:54:ac:83:8c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Aug 11 02:00:47 2025 GMT
Not After : Aug 12 02:00:47 2025 GMT
Subject: CN=4987fa02e4c7484bb1e065166df143924aa733b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:d3:6a:cb:18:78:17:4e:70:a9:c1:74:e1:
0d:93:66:ff:3c:29:f8:70:22:f4:24:5b:23:1e:7b:
df:98:05:06:2a:22:e6:b8:4b:96:85:ba:b9:6a:b2:
ff:f1:e7:8c:ae:41:c7:72:9f:8b:72:f9:09:66:4a:
2b:b1:1c:9c:cd:2b:b4:6b:a2:1e:b1:d5:d8:22:94:
50:f9:22:d9:76:88:58:69:c6:9f:81:c0:76:47:9c:
ea:6b:2d:cc:27:f7:3b:dc:bf:4a:af:b3:d2:e7:f4:
3a:fb:8a:c8:07:e0:1b:fe:a7:f8:ca:40:69:5c:ae:
d4:13:ea:9b:8e:5b:88:37:a3:d3:24:3d:10:8f:8f:
10:24:06:a4:b3:91:d6:09:36:30:a1:1f:80:3d:8e:
bf:4d:6e:53:a1:5f:8d:f6:98:1e:b3:de:c1:8c:c0:
02:e6:4d:e1:58:d0:57:69:98:e4:a8:c3:6f:40:0b:
48:62:46:fd:b4:1d:04:d4:45:73:ab:86:09:9e:6b:
a3:67:af:90:f6:1b:22:27:b4:7a:7b:aa:1e:ff:d3:
6d:0e:a4:ae:e0:52:f4:39:32:c8:66:f6:16:c7:8f:
1a:3b:54:b2:17:8f:9c:aa:16:f3:59:53:11:46:e0:
8c:0f:51:46:da:4a:63:40:86:15:8e:aa:db:1c:16:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:FA:02:E4:C7:48:4B:B1:E0:65:16:6D:F1:43:92:4A:A7:33:B6
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:de:40:1b:9a:ff:8d:2f:c6:57:11:36:16:fe:7c:3e:e4:a1:
ee:ec:19:3f:ea:f1:69:18:6b:75:d3:7b:80:ce:e8:55:60:ec:
81:ab:cc:59:b9:1c:f8:8e:38:7e:de:38:83:e9:ee:42:2d:ca:
71:47:9f:dd:15:48:1d:1c:17:32:7a:e4:4b:16:29:85:d8:89:
05:5c:3c:51:e4:57:b7:10:fb:09:38:eb:eb:ea:64:98:c6:90:
63:84:8a:fd:f4:bd:19:7f:95:b3:d7:62:b6:18:ac:ce:b0:1b:
ea:43:be:08:2f:68:24:e1:52:cf:b9:d4:f9:e1:26:a8:90:47:
8a:1d:a0:59:28:f3:61:32:52:97:33:b4:88:b3:f7:e2:eb:85:
cb:ef:32:a8:fe:9c:a3:28:b2:4d:a9:63:46:c3:4a:cf:2b:96:
80:de:a4:34:4a:4e:a5:0f:b6:de:65:d1:03:23:b2:c8:4d:3c:
2f:b1:c9:f3:d4:6f:a7:51:21:73:da:c9:06:eb:61:d1:45:76:
b5:cf:9e:5f:4e:88:b0:b6:be:0a:f6:a0:0d:3d:75:48:cf:03:
11:04:0d:4f:24:99:11:dc:e4:d8:8d:f1:5c:05:17:f1:7c:09:
53:ff:12:b8:0a:c4:0d:8c:5d:c9:14:36:c0:eb:72:e3:1f:fd:
da:aa:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:23 2025 by rpki-client