Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: 4wIx4r6OSAFOPEcpVE4cmyGL3mXzuXWL9d0nQ2B+Yso=
Subject key identifier: 5A:73:B2:C7:25:59:12:A4:13:5C:B0:42:57:B4:7E:E1:56:1D:52:71
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 019874BE4548B8D2A8756E0BBC6472AC2BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0D07
Signing time: Mon 04 Aug 2025 11:01:22 +0000
Manifest this update: Mon 04 Aug 2025 11:01:22 +0000
Manifest next update: Tue 05 Aug 2025 11:01:22 +0000
Files and hashes: 1: QKrM64oQZvgTozlvljxPPFHYkTo.roa (hash: JywzKYRCgR+CIrIm87qZr7VxIAPOkPxYDUlzkHtRqEQ=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: 6lRadtFNHCJJ9xfVOE7/Wl5O0NNkXVkVYaGEy8GdReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:45:48:b8:d2:a8:75:6e:0b:bc:64:72:ac:2b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Aug 4 11:01:22 2025 GMT
Not After : Aug 5 11:01:22 2025 GMT
Subject: CN=5a73b2c7255912a4135cb04257b47ee1561d5271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:5b:7b:07:a1:9f:01:c6:80:e3:1a:07:81:
0f:ee:52:29:d0:9b:6c:ab:19:f7:84:c0:c0:b0:18:
73:8a:c0:12:09:5e:b5:24:a7:b0:e4:67:3b:f7:7e:
8c:f4:2a:20:a1:dc:56:ee:d4:e2:11:0a:d4:0b:eb:
6c:68:6e:95:a3:07:49:f3:0f:19:ad:72:b0:a0:dd:
c9:fc:ab:2f:ee:55:70:0b:67:70:5e:91:4f:ab:d3:
14:fd:56:87:4d:fe:7d:c6:64:c4:26:90:bb:a3:75:
a5:8d:5f:f5:c0:82:a8:40:ab:97:05:01:0d:81:99:
1a:64:f5:9e:aa:17:88:24:95:a9:45:90:af:c1:d2:
58:38:13:18:00:9d:22:47:ff:53:f7:b2:69:6d:26:
4d:e8:43:ed:4d:90:43:5d:bb:e0:c2:94:44:b2:9d:
0c:11:38:2a:75:ee:11:14:3d:7d:67:15:e9:c5:07:
a7:4b:9c:c5:0b:1f:22:ef:73:0c:5c:f5:92:52:c0:
10:1f:5c:f1:10:98:53:e6:6c:4a:e9:98:d6:52:03:
93:77:6e:49:06:74:47:03:57:7f:95:b9:82:3d:2a:
50:2c:a1:d9:4e:07:14:26:26:c3:6d:f8:09:71:e8:
2f:20:22:ad:7e:a7:75:94:71:43:82:61:b3:1a:cc:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:B2:C7:25:59:12:A4:13:5C:B0:42:57:B4:7E:E1:56:1D:52:71
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:43:8a:eb:0e:20:3b:ac:68:4a:e3:94:cd:aa:a3:37:30:35:
12:52:e0:05:85:c0:9a:d6:2d:87:21:44:82:ed:a4:a0:d3:14:
9c:f8:db:71:2b:6a:98:30:30:50:f7:26:2e:51:f9:6b:3d:ff:
d7:97:36:bf:5e:97:b0:43:d3:d9:b4:c5:e2:16:42:b7:20:3d:
12:53:5d:5b:ed:a5:3d:70:79:1b:3f:f8:0d:ea:5a:6c:b6:cc:
ea:8a:4a:44:b5:4f:a4:a5:70:57:9a:1b:67:c3:e4:fd:53:80:
25:ac:68:e7:76:32:a5:2a:f3:4d:68:f2:81:8b:fc:c9:7b:63:
52:3a:0b:82:7a:18:1b:dd:d5:b4:f6:e8:b9:9c:5d:69:40:c9:
ca:e3:ea:25:22:d5:25:fd:3a:ac:3e:89:97:7b:3d:6f:ba:ea:
96:9d:68:35:eb:f1:cc:6d:01:9a:3f:a3:4f:68:98:c3:3e:88:
75:71:2b:ba:ba:be:fa:05:89:e5:47:54:c9:3d:d4:56:fc:a2:
2e:29:a9:4b:88:46:df:6c:a8:06:fc:21:9a:31:41:1a:bb:c8:
98:67:d5:39:04:61:1e:39:65:15:60:e1:b3:7e:e2:63:f5:9a:
f0:7f:61:b0:31:4c:0e:8e:60:b6:1f:ed:8a:ac:2d:5c:3a:95:
b2:18:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:39 2025 by rpki-client