Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json)
Hash identifier: xbthMzlfega+XgtvLxuqxwYWvvfSbd4pDG2m+UGaqo4=
Subject key identifier: 6F:FF:0F:0E:4E:87:49:15:60:EF:3E:1B:C5:FE:D3:20:78:0A:D9:F8
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 01988B0E67F095397266397CAE73E7E32A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
Manifest number: 03CE
Signing time: Fri 08 Aug 2025 19:00:33 +0000
Manifest this update: Fri 08 Aug 2025 19:00:33 +0000
Manifest next update: Sat 09 Aug 2025 19:00:33 +0000
Files and hashes: 1: 2TZgxnjJF7qDIIxEY-THpPbZMQA.roa (hash: 0yx1MB4qhr47LhIlbMqbHpvd6J1nBsWh1WvKzMD4atk=)
2: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: D7fgg+TqJaylxc0nUVqiYb8kn+7/20II+lwxTqXcFwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:67:f0:95:39:72:66:39:7c:ae:73:e7:e3:2a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Aug 8 19:00:33 2025 GMT
Not After : Aug 9 19:00:33 2025 GMT
Subject: CN=6fff0f0e4e87491560ef3e1bc5fed320780ad9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:68:09:4c:8f:cf:dc:20:85:d8:0c:46:cd:a5:
f9:75:37:9c:09:14:07:55:85:c5:94:91:0e:b5:d0:
96:55:57:31:20:5a:5c:df:c0:21:78:a4:d9:b1:25:
50:55:f5:31:52:8c:ae:e3:8d:f4:84:22:5f:5e:85:
c5:c3:b1:7f:f8:a6:be:6c:d7:50:99:38:6d:35:3d:
1c:4d:29:f9:b3:96:e4:05:85:f6:e1:9d:e5:a9:d4:
a6:bc:42:db:33:d8:58:e7:2c:54:74:bb:78:27:8b:
75:4f:7b:ec:e3:b7:53:7c:fb:15:4c:c6:ab:f2:17:
3c:df:cc:e4:42:55:43:77:29:6c:a3:62:1f:0f:66:
94:ed:8b:58:d7:dd:62:62:f9:c4:6f:e0:07:4c:b4:
7a:d0:ac:07:4c:fc:35:9a:48:d7:b7:f5:e4:9e:44:
21:cf:06:37:29:8d:a9:c3:e4:a6:2e:49:09:42:e4:
4a:23:a0:98:3a:af:0f:f2:96:77:31:9b:da:89:c6:
7c:da:b5:a1:1f:9b:20:05:c8:13:42:b3:b0:82:67:
0a:cb:a1:c7:67:72:09:e1:25:19:94:8b:c3:4d:14:
6a:71:ca:00:c1:58:37:9d:62:24:90:fb:8e:39:99:
c6:1d:ba:19:70:f1:de:bf:98:d2:62:f9:1a:7c:1c:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:0F:0E:4E:87:49:15:60:EF:3E:1B:C5:FE:D3:20:78:0A:D9:F8
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:db:a1:88:4d:cd:b1:2e:01:cc:5e:ff:71:ca:08:5c:1f:31:
0e:57:41:7a:c5:a2:a8:4d:e9:93:9c:26:7b:20:a7:51:e5:b8:
7a:9f:d1:1d:45:c8:3e:56:c7:02:b7:a1:8b:bb:85:84:3e:ab:
3d:53:9a:49:65:b6:f1:1d:5b:d4:84:28:d1:67:b3:79:4d:ec:
b7:b3:c1:a4:ca:be:c2:a6:7b:4c:89:f2:05:44:bf:6c:e9:c1:
c3:4e:93:ce:34:7f:c3:96:9e:fe:7a:5f:4f:f6:0e:f9:00:83:
2c:da:a7:c0:0e:c7:66:e2:03:90:5c:9c:e1:24:a3:15:7a:4f:
86:fa:92:f0:85:1a:5f:95:1b:51:67:20:b8:0b:99:57:d1:a2:
81:74:7d:a7:9b:89:37:03:15:88:ac:5e:76:f6:27:59:29:5c:
4e:14:ca:aa:42:f3:65:91:cb:a8:82:7c:7f:a7:de:11:2c:87:
43:0c:8a:55:a4:69:96:48:cb:93:99:2c:11:dd:19:e3:a1:5c:
eb:09:a4:77:be:b0:8a:7f:dc:11:6d:c8:38:6f:74:88:f2:c2:
7c:8d:ba:fd:2f:57:84:77:9f:a9:cc:d8:3d:96:d6:64:d2:2a:
ca:d2:c9:71:97:70:eb:31:ed:71:16:82:a6:5b:42:50:57:bb:
74:d2:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:25 2025 by rpki-client