
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier: lABrFGOCxyxp3nd+Z1HwDnoIMEFmqDgCgD6cZ9/jov0=
Subject key identifier: AA:4A:37:BF:C9:8C:B3:E9:88:B3:B9:C6:06:E7:48:33:C9:30:AB:76
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 019893A417A6E39764FC8F8A41B660F3D1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number: 09CC
Signing time: Sun 10 Aug 2025 11:01:00 +0000
Manifest this update: Sun 10 Aug 2025 11:01:00 +0000
Manifest next update: Mon 11 Aug 2025 11:01:00 +0000
Files and hashes: 1: 0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa (hash: k+6IIDKqJuYMt9/EhXM2bPBbRQ5u5Kv99iIIWzz5/2A=)
2: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=)
3: SAABZkEQbTfeoiZylh7IAj2UKJY.roa (hash: tT5S9auXfqJCWExDbLcMxXWvB7zI8R71Em3Ix9poLF4=)
4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: 1A2eSXp6JUfw2TNW+cSavx0KUV0kxL5VcQSrogARDbk=)
5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:17:a6:e3:97:64:fc:8f:8a:41:b6:60:f3:d1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Aug 10 11:01:00 2025 GMT
Not After : Aug 11 11:01:00 2025 GMT
Subject: CN=aa4a37bfc98cb3e988b3b9c606e74833c930ab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:b4:34:9d:4e:1a:b5:06:e6:73:7e:19:4e:
17:68:7e:71:b0:c7:8b:e7:19:ff:7b:d4:bf:4a:7b:
21:f5:cb:21:30:23:1e:d2:91:80:5a:4b:43:77:a4:
40:30:14:e3:f9:65:8b:4d:71:c9:5f:da:fa:bc:97:
bd:b1:28:39:48:d2:2e:db:17:da:1c:f5:d7:c3:4d:
d5:27:fc:ee:13:fd:f1:35:e3:d1:ef:c8:fc:bc:1a:
f9:8d:08:68:75:d3:21:cc:e0:6c:41:3b:87:6a:62:
b6:35:76:69:8d:25:18:03:0d:e8:9f:c8:57:40:1b:
2f:15:13:19:e4:36:40:89:a9:b9:1c:2b:47:d4:05:
bc:7a:8c:95:bc:16:56:51:3a:78:7b:ea:50:d0:73:
ce:d9:c8:71:bd:85:a9:ec:f4:a4:bf:41:8c:d4:6d:
c5:92:da:f1:df:2a:77:66:85:8e:7d:3e:a4:67:8e:
e0:2d:e8:ca:d4:7c:ed:d4:8d:95:ff:e7:0f:f5:de:
5b:f9:4d:0d:86:16:7e:be:df:3e:d5:5d:48:3f:cd:
aa:cf:4d:52:28:f7:35:f3:66:9a:3f:4c:73:13:75:
14:73:63:04:0d:44:ee:ea:7e:8c:ba:24:6e:3c:fb:
30:2d:53:3f:f0:54:8b:e4:88:49:d4:82:e9:0c:5b:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4A:37:BF:C9:8C:B3:E9:88:B3:B9:C6:06:E7:48:33:C9:30:AB:76
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:74:e1:19:0d:44:ac:d2:84:8d:4f:8f:46:2b:f6:ec:25:c7:
24:ff:38:2d:65:f7:d9:6d:f3:71:df:91:83:8b:cf:f7:76:10:
c2:9e:56:66:a8:5e:fe:af:52:4f:e5:7c:f2:31:5b:71:18:9d:
ea:4f:0b:5b:38:da:21:2a:f3:ea:d3:05:dc:d5:b4:98:90:8b:
ce:a7:a5:62:59:7b:b7:95:d8:fc:a0:86:f6:76:56:02:da:41:
ce:0c:73:6e:9b:78:19:c5:e1:ed:4d:a3:7d:fe:d8:98:24:14:
e9:a8:f1:2d:fc:17:94:3b:41:ac:91:87:e4:f4:7e:cc:df:3d:
09:22:b4:e6:9b:b1:e2:89:41:69:88:43:50:bd:80:40:a1:d6:
77:29:e7:50:2d:a6:e6:45:32:21:af:55:df:21:2c:4d:fc:0a:
96:2e:68:ae:59:a1:e5:34:64:a8:2b:01:01:57:f4:34:b3:61:
9e:d3:81:26:0a:cc:59:11:77:1f:06:ca:69:ab:e8:5d:83:56:
8b:64:ec:8c:aa:0d:d6:aa:37:58:32:e0:01:62:0d:84:5b:d7:
5e:4a:ce:fc:38:5e:2e:93:9d:a7:60:2e:94:cf:38:5b:dc:3f:
e9:07:5f:0f:49:ba:e5:5e:ba:28:9d:85:93:7e:2f:c8:84:14:
32:75:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:05 2025 by rpki-client