Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: 3a3qgSJH1AnARE8zwEm7fc+vc3K9G8bzoPFL5Ulg/D0=
Subject key identifier: CD:E3:FD:2C:7C:96:10:99:54:42:5E:F4:37:B0:31:20:8E:44:1D:8E
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 0198898E65DC823AC8D226B4027ECED027F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 1116
Signing time: Fri 08 Aug 2025 12:01:07 +0000
Manifest this update: Fri 08 Aug 2025 12:01:07 +0000
Manifest next update: Sat 09 Aug 2025 12:01:07 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: QR95fZwNgqScRIeOcTHIVxcTf8VlIe/sbsAfJAaE+Es=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:65:dc:82:3a:c8:d2:26:b4:02:7e:ce:d0:27:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Aug 8 12:01:07 2025 GMT
Not After : Aug 9 12:01:07 2025 GMT
Subject: CN=cde3fd2c7c96109954425ef437b031208e441d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:b0:c7:43:d9:e7:00:a3:28:a3:cb:05:29:
50:f7:b4:dc:9a:f9:8b:2f:06:13:2e:fa:03:25:89:
44:e5:bb:11:16:59:43:ef:87:33:1e:41:05:84:c9:
9b:e3:2f:8b:ed:30:92:7d:5a:90:1d:0e:06:aa:38:
e9:49:e3:bf:f1:38:68:41:6d:cd:58:e3:3d:e5:58:
46:0f:af:4d:4d:29:37:57:37:a5:78:82:e8:a5:a1:
49:5d:20:f8:e1:9a:ec:62:24:64:20:17:3a:e7:be:
2b:9c:13:e7:af:78:63:bd:5b:5c:47:d9:c7:ec:14:
d4:4d:29:40:0a:61:01:7e:d5:71:7a:71:40:e2:99:
df:7c:a1:90:3a:b5:8d:27:06:40:fb:57:13:cf:a2:
7c:54:8e:4b:55:68:be:67:cf:fa:38:22:9d:90:44:
ce:31:cf:e8:32:d7:38:a3:da:90:96:b3:80:53:9f:
57:3c:41:05:d8:9e:76:b8:7b:93:9e:9b:f2:6c:ac:
61:e4:53:ed:44:61:61:99:f1:52:f2:ef:9f:83:46:
e8:ec:46:49:1b:20:15:90:ae:a7:2f:87:c7:4a:f5:
cf:43:bb:68:d0:59:4b:a4:9c:fa:48:16:1b:43:9f:
af:a4:39:45:68:f5:b0:3e:5a:a3:9c:79:d2:0c:91:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E3:FD:2C:7C:96:10:99:54:42:5E:F4:37:B0:31:20:8E:44:1D:8E
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d8:44:c7:7d:e5:dc:1c:43:3c:d0:87:cf:4f:eb:bc:89:5a:
11:43:8d:ac:c5:ed:7d:9f:1b:cb:b7:f1:e7:d3:b1:4e:54:86:
ad:af:93:b3:19:d3:8a:63:95:d4:d9:90:12:f2:66:c2:7f:35:
8c:1c:25:91:95:24:79:6b:02:ba:e0:63:f2:9c:77:b0:3a:79:
cc:cb:d3:09:26:94:f5:89:59:d5:0d:ae:7f:d6:22:7d:a7:d1:
8b:1a:57:f1:5c:a7:72:7c:54:af:9d:3a:29:ec:c8:e4:24:07:
fe:70:c2:d6:1d:08:cc:0b:a7:b5:12:ac:b2:bd:53:c8:38:35:
45:de:d7:87:94:ce:7f:b5:cc:0f:00:88:1c:99:10:7c:3d:0b:
8c:6f:a6:68:7c:8d:ad:c9:38:33:b6:56:a9:00:ec:ea:26:0b:
ef:2e:c2:0f:ea:5b:30:af:42:c9:27:08:1b:aa:d1:a0:31:6f:
5a:b0:6f:80:ad:3a:00:74:ce:7a:52:84:db:1e:6a:56:b3:eb:
58:61:57:91:65:06:69:07:0b:87:4e:07:e7:2e:e7:ca:9b:e5:
71:d2:5b:79:0d:bf:3a:c1:7d:0c:e8:09:c3:d2:6f:4e:8d:2c:
2c:1a:61:b8:3e:c4:ba:b2:75:09:ab:da:f8:15:d3:90:4f:f3:
c8:d8:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:47:27 2025 by rpki-client