
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File: qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier: fJLfsveKi1LC9WWFu8ZRNt4B0CCjqvYRybymeoM242M=
Subject key identifier: 98:29:D1:C5:8E:77:A8:71:7E:83:30:45:F7:B6:50:AE:1A:E1:29:A3
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial: 01987C09CB1B2B0DAF5F22A23ACF32E1FB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number: 08D1
Signing time: Tue 05 Aug 2025 21:01:13 +0000
Manifest this update: Tue 05 Aug 2025 21:01:13 +0000
Manifest next update: Wed 06 Aug 2025 21:01:13 +0000
Files and hashes: 1: Ln1C_YgxE2WGWgP1KdQJY5Zikas.roa (hash: 3EUFd8IxwHmwZnC3ljBW7KIOpmaBqqwxBLml7yaPCxE=)
2: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: hG140u0ym4OYkhbccQL5UfL4Itba0o9RXLxPuCXmrf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:cb:1b:2b:0d:af:5f:22:a2:3a:cf:32:e1:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Validity
Not Before: Aug 5 21:01:13 2025 GMT
Not After : Aug 6 21:01:13 2025 GMT
Subject: CN=9829d1c58e77a8717e833045f7b650ae1ae129a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:a4:25:b4:b4:78:6d:c9:55:c9:ad:9f:0a:
ea:6f:fc:9c:c0:65:4f:0e:89:73:d8:85:9f:29:58:
a7:a2:38:9b:0a:28:80:ec:0e:ac:d4:af:74:74:1b:
e0:24:c1:3e:15:80:27:f9:c4:bc:69:76:ed:83:7d:
e6:c0:68:cd:ac:81:f3:dc:90:1a:9a:ca:09:2d:7d:
3d:06:79:74:41:e8:c7:57:82:59:b5:a2:0d:31:26:
8c:33:d6:15:63:2a:93:e5:a0:77:c3:e2:3e:b7:2c:
9c:ff:6f:62:df:2b:c8:eb:1f:ef:32:eb:97:7c:fb:
38:1b:bc:32:a9:a0:e6:3e:e6:25:a5:f3:62:23:d1:
0f:72:4c:de:be:b1:b9:41:34:9d:66:cd:dd:40:e3:
31:32:24:ba:6e:61:52:2d:17:68:6d:69:4f:db:be:
b9:9f:31:2f:c2:b1:4c:d7:f2:f1:99:1d:8c:5b:3a:
7b:df:a4:61:ad:32:9b:cb:53:9c:05:27:14:43:79:
94:be:2e:e0:4a:6f:cd:8d:56:65:ec:37:31:63:21:
ee:21:af:c0:90:5c:f7:ff:ac:fd:ec:97:d2:e1:05:
ee:20:d6:e2:39:92:2b:7f:2c:41:a4:f5:29:a7:6c:
56:12:5a:f8:24:d7:81:de:2f:a7:24:a4:2a:75:98:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:D1:C5:8E:77:A8:71:7E:83:30:45:F7:B6:50:AE:1A:E1:29:A3
X509v3 Authority Key Identifier:
keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:85:a3:f1:dd:df:71:ce:71:c9:c6:59:d0:24:41:50:8f:
7f:84:43:55:f1:aa:a4:d8:ab:a0:6c:a2:7d:74:ba:4b:45:4e:
93:a0:46:f5:64:a3:07:c2:e3:c5:1a:86:ab:65:7d:d3:98:e1:
55:23:11:43:ea:eb:0c:3d:6c:ad:ad:cb:74:2e:1c:08:5d:cb:
a4:cf:4b:76:c4:93:d4:0a:67:f4:c8:f1:2f:e6:ca:5d:55:a9:
7d:e5:02:6d:8f:2f:c9:98:70:14:c6:85:4a:2e:30:34:cc:83:
43:bc:3d:96:80:62:0f:a1:d6:4b:03:54:02:28:17:02:d2:47:
64:62:f0:b5:14:50:bb:1d:13:f7:f4:25:0b:e6:80:47:39:ad:
b5:91:67:90:e6:d0:d5:8e:de:4d:69:ab:0c:d8:71:82:ea:11:
64:b6:47:f0:af:ad:75:6e:23:73:72:5a:22:e7:fe:7d:f4:92:
92:5c:db:d3:1c:5c:cb:99:a5:c7:a7:78:0a:9d:4b:cd:24:c8:
03:09:29:c4:d2:b6:20:da:e5:fa:80:45:bb:66:49:b5:25:ef:
3e:6f:85:f9:7a:ed:07:ea:9b:6d:ad:85:39:e8:a5:e1:25:63:
e3:f3:7d:0e:4d:35:6e:b3:4f:af:2c:f5:f5:45:08:35:74:f3:
85:12:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:29 2025 by rpki-client