Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: 5rVDtNLisdyAoqYVybuHiAeFaL3qCaD5E/fSW8X7zOM=
Subject key identifier: 9D:B3:21:17:29:E6:9E:C5:93:DF:78:54:EF:F3:C0:91:47:A7:08:65
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 019874BE4C8DD4FAA78643C2668E9B98D214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 098B
Signing time: Mon 04 Aug 2025 11:01:25 +0000
Manifest this update: Mon 04 Aug 2025 11:01:25 +0000
Manifest next update: Tue 05 Aug 2025 11:01:25 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: 7pdUDjCPFsJlwr9eCAmcQnkllM4m4PkWCClXONAecyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:4c:8d:d4:fa:a7:86:43:c2:66:8e:9b:98:d2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Aug 4 11:01:25 2025 GMT
Not After : Aug 5 11:01:25 2025 GMT
Subject: CN=9db3211729e69ec593df7854eff3c09147a70865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:5b:13:25:75:5b:34:81:a5:3f:99:84:50:
c3:11:46:0f:0d:2f:9c:6f:8b:64:29:3a:a0:94:6b:
64:db:bc:24:31:61:9e:12:ad:f4:03:a6:63:ac:52:
51:3e:a4:54:2b:ca:bc:dc:01:f3:7d:a0:5f:c5:12:
36:ef:b1:f5:2f:f6:0f:6b:3a:b5:80:8e:ef:3b:15:
bc:35:b3:62:ab:c7:0d:4d:6c:c3:8d:2f:29:8b:26:
40:ff:d5:1f:5b:90:2c:a2:8e:6d:f3:db:6c:cb:5a:
d5:d0:9c:2d:c5:29:80:12:9f:cf:3c:5e:e4:fc:10:
1e:95:52:93:87:c2:d8:c6:0c:0a:11:51:a7:95:24:
f0:d7:4a:3a:d8:39:5f:b6:69:b5:ef:c6:8c:d4:6a:
31:35:4d:ac:e8:df:8e:cc:a0:a5:94:eb:01:db:bc:
f3:77:77:83:7b:7b:70:31:a6:72:a3:3e:14:91:2f:
8c:73:80:03:7c:36:4c:ef:f8:80:65:82:a0:d1:4f:
67:dc:8a:db:8d:26:bd:76:0e:81:84:81:0d:73:93:
e7:93:7c:95:c3:c2:b2:aa:77:1c:4e:8e:63:c3:fc:
5a:3d:4a:a4:5e:da:d3:cd:43:63:f7:bc:3f:4c:a1:
eb:9e:9d:8a:fe:df:f1:fc:1a:1e:f6:5c:75:03:27:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:21:17:29:E6:9E:C5:93:DF:78:54:EF:F3:C0:91:47:A7:08:65
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d5:42:f5:30:dd:ee:46:6b:90:5a:77:66:eb:58:6e:e5:6e:
ea:21:e6:47:1b:a3:7a:0a:12:31:ea:6e:bd:fd:69:95:2c:31:
f2:36:74:c0:cc:12:23:96:a5:f2:c4:1a:dd:2f:4c:bc:58:61:
35:b3:22:2d:28:73:28:80:aa:0c:19:6c:ea:e6:35:3a:97:9f:
70:c0:e2:c4:0e:c0:b9:2f:77:fc:fd:91:38:cb:9c:d6:d8:81:
cc:8c:0d:83:df:b9:51:c2:d3:05:cd:c3:10:7f:c4:23:71:0d:
e5:7c:32:ed:34:bc:ac:3e:a9:ca:96:89:99:fe:fb:9e:59:a2:
28:0c:fb:b3:7a:32:82:22:da:5a:e1:2c:35:d1:ed:7c:7e:f3:
3a:8c:a7:eb:46:c1:b8:d9:71:29:e8:95:5d:c7:66:d7:35:94:
b9:38:4b:73:5c:01:04:50:6a:d6:6f:11:30:d4:76:7b:ab:ac:
7c:4f:77:57:c4:47:b8:79:41:a1:4a:54:86:06:80:8d:2f:2b:
29:f3:af:33:5c:bd:19:f8:ba:54:b3:b5:b6:a7:e9:98:77:09:
bb:18:ea:1a:b1:8f:d3:93:c6:61:19:bc:fa:ab:d0:52:fd:24:
69:74:70:93:2d:7a:ed:72:f3:9a:66:c5:93:39:59:d7:41:1b:
7f:40:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:08 2025 by rpki-client