Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: vM40UKlmxsAPiHDeXXl/IKBL8csFGb5J46U9av8fcb8=
Subject key identifier: 4C:FF:73:C6:A9:8B:9D:75:A3:D8:A9:7D:6E:80:12:50:1C:13:CD:E2
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019873E3C201D66949C5A895A2FC32DE3436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 47
Signing time: Mon 04 Aug 2025 07:02:42 +0000
Manifest this update: Mon 04 Aug 2025 07:02:42 +0000
Manifest next update: Tue 05 Aug 2025 07:02:42 +0000
Files and hashes: 1: FxDzr4dkx7gP7-0QN9qS1QSuAFE.roa (hash: 2+R/DqRWvZVRETti21Zc43TNJBFDVQNiLw4+AXiQO7g=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: 4lkcuAtWnO9gpWTY88978No4EMuU1lbnGrERyXc5EkQ=)
3: aSbzflu2ueBH4HFc6DoptPDX5Rc.roa (hash: Ps8MiI9EyDzRjGBlJSLfyNG1HvPUvesSrz/Go0N5kKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c2:01:d6:69:49:c5:a8:95:a2:fc:32:de:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Aug 4 07:02:42 2025 GMT
Not After : Aug 5 07:02:42 2025 GMT
Subject: CN=4cff73c6a98b9d75a3d8a97d6e8012501c13cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:d8:0e:af:cc:98:a5:5e:53:80:f3:f2:71:
7d:de:ab:74:1d:ac:1d:ee:fb:b6:db:a0:04:2d:2e:
47:47:d6:f8:39:35:f7:3f:a7:c7:e3:78:a4:6b:b4:
2c:a7:e4:5c:a4:5e:f2:98:06:91:69:40:b0:00:78:
43:27:e0:25:48:26:bd:8d:e2:ad:df:57:55:bd:be:
cb:25:07:aa:d2:9f:02:7a:f2:3d:3e:30:fc:06:56:
9f:a9:27:b4:e0:cf:bd:2f:73:3e:0d:7b:2b:ad:c4:
7f:7b:b9:f2:52:60:56:e7:b9:d1:53:5d:29:74:d8:
ba:e4:40:5e:d4:10:9a:a7:9e:b4:7e:15:fd:11:84:
ff:ea:e9:ae:90:19:db:ea:9f:8c:fa:43:5d:4d:ab:
9b:8a:9c:14:20:53:ac:eb:94:b1:b1:5b:4c:25:a4:
68:11:c2:6d:42:21:f5:c9:1c:e4:14:56:b2:b6:18:
b9:36:16:be:96:1f:3b:a1:63:57:6e:18:81:19:44:
cc:38:7e:e7:02:5e:70:57:9e:b2:79:4d:e4:f5:48:
87:3b:c6:df:59:c7:ad:cf:c9:96:db:ca:9b:f9:a1:
38:c0:13:44:63:c4:8c:27:63:89:2d:4c:1c:9c:77:
ec:c1:0a:b3:9a:18:8f:bc:7a:01:ba:75:b4:9f:bf:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:73:C6:A9:8B:9D:75:A3:D8:A9:7D:6E:80:12:50:1C:13:CD:E2
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:20:55:20:10:29:6e:c5:78:50:49:b4:28:28:90:0f:18:2e:
11:bf:e2:f0:ef:90:1a:24:4a:b3:74:bd:25:5d:42:d3:a2:32:
ae:3a:df:18:f0:df:1c:06:54:fb:95:91:54:f4:49:d5:79:1a:
ff:1b:a9:45:2c:b2:16:5a:b9:36:5d:0e:da:4d:13:dc:44:ad:
b3:f7:35:16:e7:86:bb:23:b1:76:1e:9f:34:46:95:28:91:4b:
ce:a2:a0:bc:74:d0:42:4c:34:9a:8e:ee:10:66:17:90:b1:11:
4b:7d:4b:5d:50:26:35:51:35:d6:f6:8e:60:4a:51:a2:eb:03:
41:97:d2:eb:f1:af:d4:f9:fa:7f:8c:eb:99:80:31:f2:8a:5f:
15:7c:66:8c:aa:07:b8:c5:98:02:ed:6d:3f:b8:72:1c:79:1e:
61:96:48:b5:28:50:31:85:9c:90:50:9f:80:c8:75:84:80:42:
f4:8a:98:5a:67:aa:57:fe:6e:0d:09:d4:09:18:6c:70:1d:ee:
88:a5:cf:ca:05:67:56:45:b5:45:90:f1:cb:7d:79:af:39:e5:
e0:22:ae:b4:eb:ca:61:74:9a:40:f3:cc:9d:f0:fe:42:86:73:
32:f5:d6:48:77:5e:13:24:41:28:ef:8c:aa:06:cd:95:0d:cb:
b7:db:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:10 2025 by rpki-client