Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: e7atXcYmQ4myHmoQlHOJUf0cow5cmDznv5ziuve8j20=
Subject key identifier: 94:13:FF:70:5A:67:B7:6B:30:A3:E7:7E:BD:D8:E2:2A:F5:CF:02:EF
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019891478A97C57F825B02114BABD057EDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0907
Signing time: Sun 10 Aug 2025 00:00:41 +0000
Manifest this update: Sun 10 Aug 2025 00:00:41 +0000
Manifest next update: Mon 11 Aug 2025 00:00:41 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: 5LWGkBKxRWvwlqdndNS2W8hiEpeYzxHv+2PgJVKiNzM=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:8a:97:c5:7f:82:5b:02:11:4b:ab:d0:57:ed:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Aug 10 00:00:41 2025 GMT
Not After : Aug 11 00:00:41 2025 GMT
Subject: CN=9413ff705a67b76b30a3e77ebdd8e22af5cf02ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:4b:bd:57:76:b4:e8:90:11:23:44:67:79:
ee:8a:12:0a:b4:5d:ac:4d:58:08:37:64:5c:18:ff:
15:d0:f9:94:e0:23:4a:f0:24:d8:f3:ac:a9:fe:f7:
2a:86:7a:c9:87:01:42:46:2f:4c:c3:76:43:ae:10:
2a:38:0d:f5:99:38:4e:f2:62:a0:91:8e:c0:a8:a8:
bf:a8:0e:d7:4f:90:43:a7:2c:12:8e:10:d2:9a:a8:
e7:0f:19:1e:3b:22:49:c6:78:83:24:00:2b:32:56:
da:b4:25:dc:64:04:66:dd:6c:d9:c9:22:ea:cc:96:
97:4c:35:3f:0b:5c:24:d6:76:64:f1:60:2a:1d:19:
40:ce:93:d4:14:14:d8:29:2c:3a:f7:7b:2b:65:98:
9e:52:57:df:86:55:24:75:a2:e5:9b:ee:af:00:ea:
fd:d3:d1:5b:be:95:6f:87:38:7d:65:06:cb:8b:03:
9f:4d:13:3d:ef:6f:77:f8:9a:52:38:89:28:e8:bd:
70:6a:22:52:98:8b:5b:94:68:44:5f:d9:2f:f8:85:
6a:9d:09:95:cf:6b:d5:d1:fb:cf:69:26:2b:75:4a:
f0:15:8e:84:b1:22:55:af:3f:a9:96:d3:0c:ff:5a:
b1:0f:06:dc:17:d4:ca:70:9b:89:b6:bc:83:bc:17:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:FF:70:5A:67:B7:6B:30:A3:E7:7E:BD:D8:E2:2A:F5:CF:02:EF
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:db:c2:35:0f:42:99:9a:31:d8:63:7f:f4:f4:a1:7d:34:e2:
b0:3c:b4:66:12:48:91:04:83:24:10:d6:81:f8:5b:a3:1a:fd:
35:fc:e5:3e:92:c9:f9:4e:c8:4d:29:26:d4:6f:94:93:8b:0a:
3f:42:f8:0b:bf:40:8b:83:50:10:7d:09:9f:9a:10:52:00:61:
4a:fc:ee:7f:cd:10:41:c8:5e:e1:21:e8:4f:88:ec:24:27:bb:
e9:16:c7:4a:f4:8e:69:84:c8:28:2b:58:bb:3d:1c:e8:aa:2a:
2f:c9:81:7c:9a:5c:fb:83:d0:52:6b:ab:ec:cd:e0:5a:d1:88:
29:5d:bc:ed:e7:86:c1:11:0a:d1:24:93:10:94:4d:f9:18:03:
ae:30:de:d4:1a:b9:9a:4d:b0:fa:bd:91:ee:16:4a:c6:a9:98:
57:c1:4f:3a:73:82:a1:75:b2:e4:03:b8:8e:81:0e:d1:d8:92:
68:64:d3:38:41:24:21:80:86:77:57:d5:57:21:8b:53:c2:c7:
d8:89:7e:48:89:5b:e5:a0:20:fa:e5:8f:ea:19:b9:e2:e5:fd:
48:f3:9b:ae:28:6b:a6:f6:34:35:b0:b8:8f:69:c4:f4:a5:fc:
92:c2:6f:71:4a:d5:11:a7:6e:81:df:5d:a2:f6:3c:06:77:5f:
91:4e:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:16 2025 by rpki-client