Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: 2uhsbnAiu8gFyMihdXeJ+0BhxEM6XMGQIGHhzYxE9To=
Subject key identifier: 50:0F:18:96:AD:04:F6:25:63:00:21:25:84:E8:61:F0:8A:BF:F2:F6
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 01987F788756967600386D7BBD06881F7C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0C4F
Signing time: Wed 06 Aug 2025 13:01:02 +0000
Manifest this update: Wed 06 Aug 2025 13:01:02 +0000
Manifest next update: Thu 07 Aug 2025 13:01:02 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: gJeOE6QGYMroy1FDXAFq19DygwsKGo2ckdq3DYhcqwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:87:56:96:76:00:38:6d:7b:bd:06:88:1f:7c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Aug 6 13:01:02 2025 GMT
Not After : Aug 7 13:01:02 2025 GMT
Subject: CN=500f1896ad04f6256300212584e861f08abff2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:83:f5:8e:27:93:23:d5:7a:0d:0e:78:b6:
b4:bb:ce:67:59:75:05:3d:34:80:ab:39:e9:77:d6:
46:9f:e0:44:ae:e4:21:09:29:08:c0:72:d3:01:d3:
63:c9:f8:e6:44:60:c9:bf:52:09:fc:51:14:4f:bb:
bd:e5:d5:4d:aa:df:87:b9:34:ef:35:37:dc:35:20:
31:5e:ba:ba:86:6f:ce:bb:b0:5b:da:dc:30:a3:5c:
28:04:1f:c1:e9:df:10:29:71:86:18:0a:28:23:a0:
68:b9:29:27:40:8a:4c:a1:03:02:74:99:b4:94:cf:
70:ba:74:06:b1:8c:2f:af:e8:57:5c:f6:55:6c:df:
03:71:01:a3:f1:cd:23:e2:3f:e7:1d:53:12:12:91:
29:f2:99:06:5e:94:fd:06:07:1f:bc:28:a9:97:27:
75:e6:03:04:49:68:65:dd:b2:4e:08:3e:34:46:17:
90:b2:5c:63:2a:a7:7c:93:57:cb:b8:d7:57:3a:8a:
16:00:4e:c2:5b:cc:19:9b:ea:25:97:55:3c:ef:31:
14:c5:f0:3f:fc:48:79:82:9c:45:1f:a0:ce:f2:a0:
61:03:d7:05:0b:09:a4:72:42:65:f9:c3:b3:23:e1:
80:44:f7:47:39:3a:6e:3a:46:3d:13:67:24:ed:d5:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0F:18:96:AD:04:F6:25:63:00:21:25:84:E8:61:F0:8A:BF:F2:F6
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e5:16:55:79:16:a5:5f:48:16:26:1f:db:e4:0e:3f:36:48:
19:59:9c:d7:78:e8:1a:31:83:40:1e:36:f9:85:9c:76:12:b4:
08:b3:95:e0:5f:d0:f3:05:0d:a5:38:09:1e:b4:23:d2:f8:3a:
50:02:e8:ed:19:81:0b:e6:9a:89:5f:5b:f8:77:a0:f2:65:54:
27:4f:f7:cd:0e:5f:73:08:25:66:51:0e:e6:d3:76:26:bd:af:
50:1c:ff:bb:c4:01:ed:69:3f:2b:3f:5d:ca:1f:e3:04:f8:43:
50:d7:74:8a:31:a5:72:53:4b:7f:38:31:4c:e4:76:df:76:6b:
69:bd:4c:b5:f3:72:ef:d2:38:f0:72:f8:c2:9a:0e:26:bd:48:
05:1c:7d:6b:5c:70:66:58:5f:6e:22:a5:bc:eb:a2:46:69:5a:
3a:65:c5:01:09:9a:cd:72:30:d5:06:e6:c0:48:54:5c:02:28:
3a:2e:84:f7:4e:7f:79:f6:0b:e1:bd:ea:af:c4:46:59:73:01:
4e:eb:41:9d:fa:2e:99:f7:8a:52:3c:8c:6c:fe:6a:9a:54:36:
ee:20:13:48:fa:46:77:ab:02:92:e0:2b:e0:f8:82:84:a5:d7:
e2:e2:1a:6a:da:3c:62:c9:af:d7:2d:b6:5d:91:2a:50:68:be:
16:2b:f7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:57 2025 by rpki-client