Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: u89Bq8Qs0BHcMhf8KyK/KS8ZpA070BdmVjeuWQIzVTs=
Subject key identifier: A8:B6:D4:6C:F0:ED:CA:3B:95:16:94:AB:94:A9:DF:ED:FD:5E:D8:0E
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 0198879FE753AF326C1D9B09B4BFC0F74C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0E40
Signing time: Fri 08 Aug 2025 03:01:00 +0000
Manifest this update: Fri 08 Aug 2025 03:01:00 +0000
Manifest next update: Sat 09 Aug 2025 03:01:00 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: +HOZXSO5k8XUdTb5lU5irD111/0ZkWFmbjH0TrHX1Ok=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:e7:53:af:32:6c:1d:9b:09:b4:bf:c0:f7:4c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Aug 8 03:01:00 2025 GMT
Not After : Aug 9 03:01:00 2025 GMT
Subject: CN=a8b6d46cf0edca3b951694ab94a9dfedfd5ed80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:8c:26:25:20:a9:93:90:14:4d:a8:58:91:
0a:d8:2d:d8:a2:e6:50:58:81:cb:8a:93:ee:1b:ae:
59:9f:ed:61:55:c4:09:e7:07:2c:de:46:53:2e:7d:
8d:08:15:56:86:b2:80:35:d5:2b:3e:cb:4b:04:e6:
fa:6d:b3:14:66:6e:41:1c:22:b9:7c:bb:e4:74:80:
25:2c:cd:c9:e5:4c:ef:7d:ed:f1:bf:9d:88:c7:4d:
ac:09:a9:d4:5f:34:7b:de:64:d5:7e:1d:72:c5:05:
09:28:6b:40:f2:94:53:47:e3:1a:bb:17:56:93:b7:
4a:1a:d7:b8:56:37:ab:f3:bc:de:07:65:d6:e8:c7:
26:23:3d:ff:5b:87:9e:48:54:59:95:b0:8c:23:b3:
c3:3f:62:0d:47:e0:55:44:82:01:51:8d:af:af:77:
ea:bd:f2:3a:43:b4:6f:c7:32:62:6d:8c:e4:51:a2:
87:4c:1d:7d:18:86:86:91:27:ee:b7:84:e8:89:05:
8d:2a:da:3f:d2:14:8d:f0:1a:b0:4a:c7:de:ee:48:
a1:b1:eb:bc:c6:5e:a0:da:fb:49:79:e9:62:6a:25:
ec:07:36:ca:85:57:39:8a:9a:a7:e1:cf:f8:ad:94:
bd:1c:0b:a0:14:6a:74:89:a6:cb:a1:ef:c7:22:10:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:D4:6C:F0:ED:CA:3B:95:16:94:AB:94:A9:DF:ED:FD:5E:D8:0E
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:75:7b:bb:3f:6d:80:a7:fa:f4:f2:04:a2:1e:c2:c4:47:86:
e2:4a:d9:06:cf:dc:71:05:19:cd:a5:48:9c:b1:26:e2:ea:e5:
40:ca:fa:34:e1:96:f6:f2:b3:2f:c1:9a:26:17:44:8a:84:da:
b2:5b:b4:44:3c:05:b6:21:74:6f:ad:02:22:a2:6c:83:4f:aa:
ca:94:32:13:76:e9:d8:23:aa:6d:23:1a:a1:b2:ce:a8:6d:13:
03:b1:95:eb:75:ae:3f:98:59:3d:e5:79:c5:76:93:6e:f9:44:
47:b4:cc:3e:7a:0b:2a:1f:d4:e9:cb:4d:05:da:41:7c:40:31:
ca:24:45:87:ac:4d:79:c3:da:d6:be:42:1d:d4:40:f1:d6:45:
55:e8:1a:c2:dc:b1:77:74:9f:6a:a6:87:32:e6:eb:46:29:ab:
d4:a7:79:95:4c:18:c5:da:e2:1b:17:d3:02:51:64:28:07:f7:
4f:11:f6:0c:94:dc:8d:78:ef:fc:5f:a0:00:c9:cd:92:8d:ed:
bc:e5:78:8e:74:57:8d:16:17:73:98:cf:39:d0:24:b9:1c:d7:
9d:44:e7:88:34:16:53:78:d6:6e:3e:6f:69:f1:17:61:73:bc:
c7:aa:dd:de:4b:2e:3a:14:29:17:61:b4:6e:0d:07:f4:1b:a6:
51:61:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:52:18 2025 by rpki-client