Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: E+aG2gvdEJcMwZeRVinmgDdIGJqGzl/yHtB7w9yn+L4=
Subject key identifier: 4B:E8:49:E9:50:FD:CB:63:CD:27:D7:CD:FE:DB:76:10:62:25:14:CC
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 0198D4E05749CE5C4E298A80567E980CD06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 07F5
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: lYCvF9lhKh6g/onT8kd09zLhg33ir04DYHMgQQWwg/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:57:49:ce:5c:4e:29:8a:80:56:7e:98:0c:d0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=4be849e950fdcb63cd27d7cdfedb7610622514cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:c5:28:e8:30:08:89:2f:79:54:55:1b:0d:
a6:97:da:31:57:d0:91:b7:b2:78:6d:a5:dc:44:7b:
40:56:03:59:d3:1a:ac:20:56:ad:01:b2:5e:89:32:
22:1b:46:67:23:f4:93:07:99:5d:71:7e:f1:23:b4:
25:ab:73:66:a1:62:1b:41:8e:34:66:ca:55:d4:9c:
cd:98:dd:5d:3f:06:3d:80:e2:15:6b:0a:b5:b5:2a:
c1:3e:02:af:98:99:62:2a:e6:f5:c8:00:56:9f:9e:
a4:56:34:1f:aa:6e:0e:f2:e6:8e:92:db:20:ee:2c:
15:3a:d9:28:92:3b:65:bb:dd:70:ca:40:48:66:8d:
b0:e2:6b:31:8d:b8:e9:f3:84:7a:55:d0:f0:a3:90:
f5:72:05:7a:af:74:6a:f7:e3:d2:bc:0c:97:0c:48:
eb:24:5f:96:c6:b9:28:9a:31:0c:86:c5:44:06:7a:
d1:32:3f:f5:e3:9d:13:9a:9f:ae:32:d2:72:9f:1b:
08:bd:27:cb:c0:a5:bb:20:a4:ea:d0:23:95:ca:ae:
6b:13:32:6b:2c:9f:6d:e7:34:18:fa:81:c2:91:47:
ea:94:16:ad:81:08:f0:8b:16:e3:a1:85:99:b9:a3:
c4:55:c4:5b:3d:2e:fc:8c:ea:07:2d:28:0d:97:88:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E8:49:E9:50:FD:CB:63:CD:27:D7:CD:FE:DB:76:10:62:25:14:CC
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:23:6b:f4:2a:da:d3:75:42:68:90:bd:31:a9:62:88:79:2b:
93:c8:a5:fe:45:e1:f8:37:9e:ea:c8:5f:57:1e:a0:b9:0f:a4:
0f:5a:9d:d3:89:e4:f7:a4:36:8b:a9:11:18:d4:ce:43:a9:55:
a8:83:ba:12:46:ad:4d:f8:5f:59:56:27:88:73:b1:86:62:bc:
85:18:26:78:87:10:31:d0:b1:1a:56:db:49:f3:3f:6a:2d:19:
75:d7:88:ee:3f:20:61:28:cd:af:cc:b3:f4:ab:0d:88:a7:b8:
1b:d8:1f:66:5f:08:cd:05:c9:03:f2:9c:e6:fb:44:e6:31:9b:
34:b5:7a:c6:cb:91:58:e4:47:ab:51:33:04:05:58:24:f6:ba:
c1:01:dc:21:dd:e2:f5:a8:4f:35:71:36:24:39:73:fb:61:42:
a2:46:a2:2f:3b:d4:96:25:54:1c:39:7b:a7:a7:2b:fc:6f:1a:
d1:1e:66:73:a5:7b:d9:53:33:7a:5b:d8:05:af:36:55:6a:93:
4f:3a:45:a8:fa:30:85:fc:5e:11:67:26:4a:c7:2c:31:09:85:
b2:f7:ac:fa:d9:70:09:67:52:45:d9:42:5b:04:b0:15:7d:16:
98:ec:51:0c:c6:77:99:91:25:f1:c6:dc:81:4d:b8:05:43:d1:
ca:e1:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:50 2025 by rpki-client