Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: 2vMFCz8goY8raJIC4zEYw4fpMq8/ju9B8aSaGvYqaHE=
Subject key identifier: 25:D0:D0:D8:44:F7:56:57:EC:97:1D:C7:A0:19:84:F6:18:CD:20:FF
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 0198A04E77A5DB9CB72FD96865DA15B4D3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 22:02:33 +0000
Manifest this update: Tue 12 Aug 2025 22:02:33 +0000
Manifest next update: Wed 13 Aug 2025 22:02:33 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: or8Lu6KVgyICgqRUdldiT0MvMttGIAtj6z5i/+rCPSY=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:77:a5:db:9c:b7:2f:d9:68:65:da:15:b4:d3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Aug 12 22:02:33 2025 GMT
Not After : Aug 13 22:02:33 2025 GMT
Subject: CN=25d0d0d844f75657ec971dc7a01984f618cd20ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:2b:59:4a:ba:18:a4:2c:fd:bf:02:00:a0:
16:9b:15:ef:50:2f:ae:45:56:fe:d9:54:d8:2f:4b:
1d:1c:cf:67:5d:fa:01:f0:ac:58:5d:bf:91:35:c6:
e1:d3:9b:ab:d9:16:e9:68:02:b1:b3:d1:1a:dc:95:
3b:42:a9:f6:08:6a:06:dc:53:25:19:b6:13:f3:d5:
2a:a9:9d:55:1d:ef:ed:ac:e9:82:d0:e9:72:b7:3b:
ee:9b:f2:b3:13:68:79:df:b8:66:3e:dd:14:80:9b:
18:32:70:c4:e3:15:85:4f:de:f2:07:4c:ea:46:8a:
bb:3f:6e:4c:b5:24:c6:86:1b:a5:b2:82:3a:c1:eb:
d5:61:16:6b:2b:b0:06:8b:b9:6a:b7:f6:7d:d9:18:
e2:a1:fb:fc:2a:58:04:f0:8a:0c:d5:2f:c3:17:f0:
71:e9:f9:93:77:c1:85:35:a9:a6:84:6d:2c:f9:b1:
a5:06:a4:db:84:bb:17:24:05:49:89:60:35:9a:73:
69:bc:a3:61:87:57:85:b3:cc:56:18:07:a3:89:43:
bb:df:43:12:15:11:75:db:fb:d0:2d:12:14:1f:61:
0d:0b:20:5e:82:3e:7d:57:8a:07:cf:78:9d:7b:50:
dd:6b:01:6e:e8:32:2f:5f:2f:82:02:ee:64:1b:40:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:D0:D8:44:F7:56:57:EC:97:1D:C7:A0:19:84:F6:18:CD:20:FF
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:3d:b6:6b:37:bc:de:42:d8:b9:49:df:da:4e:5e:7f:fa:
73:ee:e8:58:79:b6:36:66:23:26:53:e8:71:87:26:43:f0:1f:
ff:a4:0f:39:11:83:40:a9:d2:cd:1c:5d:97:e2:c9:27:d2:4c:
2c:f4:2e:32:9c:1b:17:bf:51:9a:95:6b:05:bc:a1:7c:82:16:
0e:e2:5a:82:38:4b:54:57:02:f9:e3:c1:d2:8e:53:dc:4d:15:
28:fd:7d:07:48:2a:f6:96:fd:40:75:29:d0:fb:bc:bf:e3:6c:
6f:18:8c:6b:b6:e9:58:b6:72:2f:4b:28:7a:cb:50:59:cf:a2:
db:bc:85:cf:6b:ae:35:d5:44:b5:1b:4d:06:ce:55:1c:7f:b7:
7b:8e:e4:c1:93:75:46:4c:de:9e:d5:0f:41:47:44:26:a4:ea:
53:70:88:93:39:1b:74:f6:ca:61:05:18:e5:68:8b:3c:7b:fe:
89:24:bf:65:f1:0a:d7:cd:96:13:c5:ad:2d:ca:1f:4c:65:58:
bb:bb:d4:70:c6:ae:ed:f7:59:23:91:60:1f:40:11:48:85:8e:
a6:6a:2e:b4:d7:26:ac:8c:c4:d7:41:fc:88:02:ed:59:97:ae:
9f:66:51:7f:66:b7:86:2e:40:1d:24:33:91:ec:d7:1d:47:2a:
8d:eb:87:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:56 2025 by rpki-client