Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
File: _QB9d6vr_l2GsInvuT4C3NMASsY.mft (raw, json)
Hash identifier: +EPRSW0Xh/tWMU0FMsb2dBD80e1Pk1+fuapkhh/amfo=
Subject key identifier: 68:F4:D9:85:FF:9D:CA:5E:4F:FF:52:DF:84:2E:55:F9:9B:46:60:CA
Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Certificate serial: 01987562E6A30E8FA3CE61FDF704770B8447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
Manifest number: CD
Signing time: Mon 04 Aug 2025 14:01:12 +0000
Manifest this update: Mon 04 Aug 2025 14:01:12 +0000
Manifest next update: Tue 05 Aug 2025 14:01:12 +0000
Files and hashes: 1: _QB9d6vr_l2GsInvuT4C3NMASsY.crl (hash: lMnkf0UaUFREMJ4RENB9PHCxfGwqQse4ug31gv51itY=)
2: bWo1p2kvLDaN2hfsArhL9srtb9s.roa (hash: UWHNEgib/6NKUlAE0qvnRy4yH/056aCyLvDBcALH7NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:e6:a3:0e:8f:a3:ce:61:fd:f7:04:77:0b:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Validity
Not Before: Aug 4 14:01:12 2025 GMT
Not After : Aug 5 14:01:12 2025 GMT
Subject: CN=68f4d985ff9dca5e4fff52df842e55f99b4660ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:0f:db:41:ea:69:3b:2c:d5:94:f4:0d:fd:
bd:49:2e:0a:12:a3:33:43:32:b6:0f:3a:41:a6:56:
d7:a4:97:73:c5:8e:09:a3:7e:57:5e:92:bd:bf:bf:
4d:93:3f:f2:1b:7d:49:b7:38:57:6f:e7:eb:53:c0:
11:eb:11:f4:f3:0d:a8:f2:ec:4a:71:33:79:6c:ca:
16:45:e3:b2:69:01:97:aa:6b:bd:dc:0c:5e:45:6a:
b7:15:b7:2d:e8:da:d6:c7:95:49:b3:40:b4:6c:60:
3b:1f:8d:a4:e6:3f:af:66:f8:8b:1c:ac:6d:a6:dc:
b5:16:e5:c9:bf:ba:d7:18:8f:7d:9a:7f:f9:6d:57:
4b:66:3c:b8:7c:42:68:75:57:a2:55:6d:a6:e5:ce:
80:88:99:94:30:68:08:a9:ef:fe:68:18:bb:cc:93:
63:11:34:ad:9e:38:db:ed:6d:13:8e:1c:45:74:90:
91:61:6a:6f:52:6a:d8:10:d6:34:2c:5c:29:86:7d:
c3:19:d7:da:0e:b3:3b:d7:86:92:1d:ae:b1:72:ff:
bb:19:14:3f:5f:40:d6:2a:38:f5:b5:9f:c6:61:38:
4f:c0:f6:cf:af:62:a9:30:64:47:c2:ec:53:12:f5:
f7:91:a8:8f:80:28:ad:6b:3e:ae:8f:58:7a:e0:d6:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F4:D9:85:FF:9D:CA:5E:4F:FF:52:DF:84:2E:55:F9:9B:46:60:CA
X509v3 Authority Key Identifier:
keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:51:ef:1d:00:70:08:09:c1:7b:b2:8d:d4:3d:58:9d:37:51:
a1:9e:19:0e:3c:46:48:bf:fa:b4:be:a1:bf:5a:0f:81:ce:df:
ad:3e:c4:65:37:44:bd:e5:44:2c:33:a2:27:18:30:92:a1:28:
2b:6c:39:81:77:9f:ab:90:55:2a:eb:ba:12:94:e3:eb:4f:6c:
5d:59:df:14:31:00:e8:f6:5a:52:58:86:c1:8c:f9:23:fa:ff:
1e:2e:e0:d5:d4:41:2b:e2:06:dd:4d:49:9a:a5:46:9b:be:70:
cb:a9:cc:7b:95:0f:a6:42:37:07:a0:a2:d6:f0:60:ce:28:8f:
c4:fa:45:46:72:39:e9:74:bd:1a:d7:dc:a6:17:26:96:e5:f7:
6a:71:6f:a9:c8:1d:ad:07:ee:2b:86:cd:01:ff:e0:74:a5:a5:
f7:2d:f3:91:e5:34:89:a6:1d:2b:67:e4:1b:52:eb:f5:1c:e1:
3d:4a:3c:16:02:71:14:b1:17:98:32:ab:ac:1a:38:54:61:3e:
d8:5f:66:1c:0b:a7:5e:db:1d:53:00:20:59:41:35:d9:fb:53:
f5:53:dd:45:19:d6:6f:32:bc:3b:4c:7b:16:aa:07:57:2a:00:
a0:6c:64:17:07:d0:9f:d8:7a:b3:bb:fe:d5:62:07:66:5d:77:
1f:e1:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:46 2025 by rpki-client