Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: bfwKa8d4tHNcaBuM1sj/HcapYapx+cXwnqbYyEJzEPk=
Subject key identifier: 9A:39:C8:A1:24:84:85:19:6D:1F:35:FE:B9:57:CD:D9:1A:89:F7:06
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 0198752BEA6E897A823922CC93725AAF9BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 051D
Signing time: Mon 04 Aug 2025 13:01:08 +0000
Manifest this update: Mon 04 Aug 2025 13:01:08 +0000
Manifest next update: Tue 05 Aug 2025 13:01:08 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: aA7zheucGG/cF+/kA+MzB8BwwKp1lAE8VKlAdeWc34s=)
3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:ea:6e:89:7a:82:39:22:cc:93:72:5a:af:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Aug 4 13:01:08 2025 GMT
Not After : Aug 5 13:01:08 2025 GMT
Subject: CN=9a39c8a1248485196d1f35feb957cdd91a89f706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:66:5d:04:18:d7:3e:2a:22:0f:24:2e:9c:
9d:dc:39:c6:23:7c:0f:9b:be:b9:00:fa:8c:7e:52:
2c:86:f4:49:c3:7b:c2:d1:72:6f:59:c9:87:0b:97:
ba:fb:e1:20:2a:ac:db:3d:a2:ba:52:72:b6:9c:e1:
65:4e:57:6f:3b:1d:10:1c:26:91:7d:e6:99:ee:89:
fb:71:34:66:0c:2d:28:c9:e0:00:29:c9:1c:c3:5e:
f6:2b:47:1a:0f:80:d3:ca:1f:05:05:8a:b1:99:2e:
15:98:a8:61:12:ad:b4:2f:a7:79:6b:8c:6e:3c:84:
d6:37:d6:af:c3:5d:9d:0d:43:b2:22:1d:18:5d:0b:
92:18:4e:d4:4d:8c:fa:1f:19:0d:e8:9f:d7:82:47:
d3:ff:36:12:50:d6:93:aa:2b:98:b4:54:ef:21:b1:
35:6d:e5:74:af:9c:2c:b5:1b:af:85:ce:07:06:fa:
6e:8e:03:cd:81:4c:f0:96:f4:f9:e3:71:a3:df:a1:
2f:aa:ff:2b:72:a9:1e:24:ed:34:46:08:da:0d:28:
2f:e1:95:2a:91:12:d8:16:31:84:53:14:15:2b:6e:
1d:9b:d3:1d:4a:e2:43:da:3f:11:1f:73:7b:00:af:
eb:7b:5a:e7:d8:a6:a3:5e:d0:f8:25:00:06:99:6e:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:39:C8:A1:24:84:85:19:6D:1F:35:FE:B9:57:CD:D9:1A:89:F7:06
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:58:7d:7c:84:08:f6:89:83:cd:31:e2:d2:c5:5b:25:ca:c7:
bc:d7:65:82:61:bf:f0:7a:fb:e2:f9:85:37:bd:dd:06:f9:6c:
22:ef:0c:87:30:4a:a0:44:c8:18:d9:fb:92:7c:e7:eb:44:76:
d1:ae:2e:10:a3:90:a4:18:0b:4f:09:8e:31:ca:2b:da:4d:4b:
87:dc:28:f1:1b:b2:53:7e:a4:90:0e:2d:b2:b7:60:e0:6c:94:
aa:00:19:d6:3b:79:b6:af:45:14:de:4b:fd:ac:96:15:eb:ec:
78:e3:bd:96:bf:81:6a:17:94:66:8d:1a:56:33:4a:96:6a:2f:
36:61:a6:cd:60:9f:31:ea:cb:0f:10:08:7b:90:f5:81:e1:3f:
2d:f6:05:fe:3b:ae:60:0f:83:7c:f4:9a:10:fd:85:00:66:fd:
34:32:63:35:60:ad:83:d8:9b:65:2f:a5:23:15:9d:8d:60:08:
5c:2c:d2:6b:de:95:7f:4d:48:48:a3:e7:a9:f4:6d:d7:ed:5f:
e1:06:37:42:4a:5e:26:6d:f8:88:03:44:fd:e1:ab:b3:c7:02:
3f:f4:93:da:0a:82:90:76:3a:87:44:bb:83:19:cc:d3:cf:b6:
03:85:31:2a:ba:55:5d:d0:fb:23:01:50:3c:83:0b:e0:b6:1a:
4b:4d:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:08 2025 by rpki-client