Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: /TKOmy31zAZpLBcs7/wjx8H6nA7esonn6gS28NLUMog=
Subject key identifier: 03:F7:C0:72:CF:9D:DF:BB:0C:1D:49:20:3D:19:F8:3A:A6:B6:1B:CC
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 0198D583FDCD8AE2E20513186EB68F0BADD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:53 +0000
Manifest this update: Sat 23 Aug 2025 06:00:53 +0000
Manifest next update: Sun 24 Aug 2025 06:00:53 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: KvV6VhtAqFqJG7bV09M2L4vBgc76WQYeL0UQtaqYSQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fd:cd:8a:e2:e2:05:13:18:6e:b6:8f:0b:ad:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Aug 23 06:00:53 2025 GMT
Not After : Aug 24 06:00:53 2025 GMT
Subject: CN=03f7c072cf9ddfbb0c1d49203d19f83aa6b61bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:30:98:10:03:f9:4b:b8:b4:dc:cd:2d:14:
f8:b5:41:a9:f1:54:05:fa:0e:a4:40:ad:2b:03:a2:
ff:51:b9:c2:4e:39:2b:21:77:c1:ee:c6:50:ec:57:
ca:7a:89:21:54:53:c1:c2:ba:e2:07:76:85:f4:f7:
b5:e9:9c:a5:12:fe:d3:f9:02:92:9b:25:01:c2:25:
2b:40:7e:29:41:1a:f9:e2:6e:aa:b2:4f:8d:cc:14:
c9:48:01:de:c1:02:32:77:a2:47:58:27:62:8c:d1:
eb:4e:b1:2b:e4:0d:9f:54:96:67:df:b8:ba:04:35:
b3:b0:28:67:4e:6f:54:55:7c:0a:50:9e:86:0f:20:
df:bf:c7:23:52:ff:0d:05:6f:b1:dc:56:e8:e1:9e:
1c:fd:86:09:66:be:5e:09:88:ef:69:a2:f1:12:cb:
ab:eb:6a:bb:ee:45:1e:43:02:8b:10:1f:55:e9:bc:
a1:c1:ef:c0:ff:80:52:f7:f0:c8:fc:46:11:41:47:
c6:7d:a0:07:68:39:a6:7c:97:f6:41:60:8c:60:5f:
bf:1b:41:e3:a5:c8:37:39:e8:17:20:77:f7:87:86:
6c:d8:4e:1b:bb:e8:fb:70:82:cf:f2:e3:6f:23:18:
0c:1f:b4:8b:fb:83:7c:90:27:44:a9:f7:68:f0:07:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:C0:72:CF:9D:DF:BB:0C:1D:49:20:3D:19:F8:3A:A6:B6:1B:CC
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1c:4e:be:03:bc:3e:72:8d:ce:51:c2:ce:25:af:b1:70:15:
fb:3b:cb:87:c1:19:bd:29:64:7b:c2:e0:2e:63:a0:e6:cc:be:
d3:ac:f8:99:85:db:6f:b8:5b:b5:86:f9:bd:2d:1b:d0:eb:fb:
6e:43:6a:d6:45:a8:42:43:b9:ad:69:45:8d:4b:21:02:1c:31:
1a:d2:4a:73:90:66:4b:ed:d7:7e:93:1e:2f:23:39:17:16:71:
30:28:85:10:f1:5e:a1:56:03:67:f5:5e:cd:cb:f3:fc:68:b7:
d5:b9:52:6e:4b:7c:25:cd:e9:31:a6:ff:c0:7c:cc:73:e6:94:
51:cc:b1:a7:41:db:cb:12:d7:e7:d4:a7:cf:7b:6d:d2:23:84:
e0:11:85:c8:3a:f7:2b:d8:e3:11:4c:01:f9:71:ab:da:0e:40:
52:72:09:8d:93:f5:fc:8d:a9:c4:9e:70:a4:42:f2:f2:8b:e7:
f9:42:51:47:eb:c1:0a:be:48:24:02:90:f5:d5:6b:e5:11:24:
37:64:2a:92:47:d2:94:34:23:15:d1:ee:71:d7:c6:d5:8f:72:
54:af:9e:2f:26:28:4e:71:0c:e2:17:a1:55:db:a6:1f:96:77:
db:f0:35:b3:c4:96:cb:d1:af:5f:2c:34:ab:81:33:b3:8d:21:
52:08:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:14 2025 by rpki-client