Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: oCB7ZHZYfdBnLqfllRHv7+yU2s9VL6laXud4gvk3iPM=
Subject key identifier: 6F:81:CE:C1:15:35:B3:62:7B:43:90:D8:A7:02:51:00:DB:46:8E:EA
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 01987FE691794898CDFAF704AE15A45CE139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0CB2
Signing time: Wed 06 Aug 2025 15:01:13 +0000
Manifest this update: Wed 06 Aug 2025 15:01:13 +0000
Manifest next update: Thu 07 Aug 2025 15:01:13 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: 3ICbeEDb+huHhsEWB8IEw3I1hECuZWumwdDQp22dIGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:91:79:48:98:cd:fa:f7:04:ae:15:a4:5c:e1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Aug 6 15:01:13 2025 GMT
Not After : Aug 7 15:01:13 2025 GMT
Subject: CN=6f81cec11535b3627b4390d8a7025100db468eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:52:c9:ee:70:a9:06:95:67:39:72:7e:29:
08:1f:9c:cd:a0:45:0b:1d:8d:4f:5d:da:1b:63:ae:
8b:e6:c4:93:f2:70:20:02:f8:30:d5:1d:e4:8f:a1:
ac:c0:1a:18:bd:4b:30:7a:46:a4:a2:8a:14:d3:e1:
cd:9c:b5:c2:eb:0e:ea:0c:02:1d:19:ff:dc:17:9c:
f6:14:6f:b9:ee:b3:3d:f8:4f:f2:56:59:ab:75:3a:
09:f5:0c:8d:b8:c5:f9:be:ad:23:f9:9e:14:d2:e3:
fa:3b:a7:57:ff:d0:9b:9c:9a:03:12:d0:4d:a7:eb:
13:e1:e0:5b:90:ad:3c:17:db:b8:d5:90:af:f1:b0:
07:12:35:ee:f9:69:8f:89:af:8f:23:04:9f:3f:74:
ee:8e:fb:40:91:49:b5:96:fb:47:2b:41:6a:33:f0:
b9:ba:82:c2:61:4a:55:54:3b:19:e3:52:40:17:f0:
1a:e3:80:6a:b6:9e:21:fa:7e:f0:06:9d:6c:e5:5b:
23:b9:ee:2a:3c:5f:8b:a9:33:e7:8e:28:87:b1:08:
90:b7:d0:c6:38:7f:ac:f8:4d:51:79:53:55:21:50:
66:96:ef:f6:2f:b1:c0:e0:4c:91:f0:66:d0:a9:2e:
04:41:a9:87:10:ba:6d:8c:15:0e:be:7e:ab:c1:b7:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:CE:C1:15:35:B3:62:7B:43:90:D8:A7:02:51:00:DB:46:8E:EA
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:47:7b:ac:ce:a9:ff:6d:ef:f1:bb:c7:06:46:97:21:9b:a4:
c1:45:30:a1:da:62:5b:71:af:3c:8a:7b:50:2f:fb:1d:1e:dd:
cc:e3:18:6f:0d:26:06:f7:ed:b5:f2:71:c4:91:e5:4c:89:fc:
0e:70:78:0e:17:a0:f8:73:06:d2:c4:04:bd:fb:d1:62:75:cd:
42:d3:84:51:55:3c:51:93:13:2a:d7:1a:fa:c2:1a:ab:20:42:
da:77:e1:23:5e:b3:6f:7d:a4:27:6a:01:5a:4c:21:86:3a:c5:
a8:a6:d4:6e:4f:c0:54:c3:df:63:5a:75:ad:7b:57:7d:d0:cf:
b4:b2:e3:94:a6:dd:75:9c:97:f5:32:6d:9e:ec:b8:85:c4:2d:
1d:77:da:20:37:41:fa:5c:aa:67:6f:a4:23:71:7b:98:7c:f5:
08:76:48:89:fd:cb:36:2d:d3:82:98:43:95:4c:3e:ba:eb:73:
d7:78:7d:2e:46:c1:22:78:0b:69:d0:c1:ff:79:f7:8d:5c:3d:
e3:1a:7c:8d:f7:96:7a:2d:3a:72:1f:26:e2:54:d4:c2:6c:a9:
38:ff:24:5b:50:2f:2a:af:f4:95:0e:66:59:d6:02:89:e3:b8:
ef:47:51:d8:e3:56:47:0c:5c:9d:52:ba:79:6f:f1:e7:d8:2a:
67:8e:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:39 2025 by rpki-client