Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: sM6/KqUkC1+h3f5BQZz0PFzpWXxvZRgUJFnlEzEMxLg=
Subject key identifier: 78:D6:0E:64:1E:DC:0D:26:97:5E:96:63:2C:C5:0C:76:8E:C6:89:E3
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 0198D7058ACE571E08044A5828340F56CE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 153B
Signing time: Sat 23 Aug 2025 13:02:01 +0000
Manifest this update: Sat 23 Aug 2025 13:02:01 +0000
Manifest next update: Sun 24 Aug 2025 13:02:01 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: /313gJoI2Jr6Y2XTVv3fLsccgvgdI4t0uTj5ksjm23c=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8a:ce:57:1e:08:04:4a:58:28:34:0f:56:ce:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Aug 23 13:02:01 2025 GMT
Not After : Aug 24 13:02:01 2025 GMT
Subject: CN=78d60e641edc0d26975e96632cc50c768ec689e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:a9:18:8f:ae:12:d0:47:42:36:e0:50:fb:
fc:4d:da:c5:cb:f9:83:57:bf:71:62:df:62:15:84:
57:9b:03:41:bb:be:0d:35:02:7c:1b:3f:a7:01:66:
4f:85:1b:45:c0:87:4c:3e:6f:a2:53:cd:a4:83:7e:
05:b9:47:46:0f:5e:78:5c:d1:1c:b9:ca:27:ff:6e:
57:f3:e4:99:01:28:e6:b0:5c:1c:09:6f:93:da:46:
bf:c3:47:f5:ba:48:ae:b6:80:55:f8:13:fc:c2:d2:
d4:35:1d:8c:76:e3:64:37:81:ee:64:5e:b2:62:d6:
45:d4:05:12:4d:52:da:1c:f2:e0:44:89:4c:5f:e0:
93:d4:c8:57:45:a8:2b:00:0b:18:00:2a:65:9d:db:
14:b9:a4:07:a8:9b:78:4b:bd:f4:0a:5f:7d:06:f1:
cf:fc:ef:20:f0:5d:d7:6a:c0:81:1f:79:7b:9c:45:
44:b4:50:df:f6:be:be:b7:69:bb:5c:1b:43:05:45:
8a:50:b3:61:d1:e1:c5:4b:40:ef:00:02:26:ed:76:
9f:d2:95:54:e7:d3:92:00:6c:33:a4:04:39:0a:b7:
f7:f4:2a:1c:02:9a:cd:7b:6a:84:09:d1:e9:6f:f7:
01:32:ca:b8:15:79:e3:56:73:8d:99:ce:24:03:c2:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:0E:64:1E:DC:0D:26:97:5E:96:63:2C:C5:0C:76:8E:C6:89:E3
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:b4:a8:98:24:20:f7:a9:b7:53:a3:4c:b3:56:6d:88:1f:
79:0b:ba:97:30:c5:5a:b7:2f:63:4d:2c:31:91:b3:9b:6e:4a:
7f:44:51:36:a1:d6:20:13:e9:09:ca:fb:6d:e2:a2:94:2b:a4:
68:4b:09:dd:b7:ec:7d:50:40:46:8a:a2:f3:df:cc:c7:1a:57:
ef:93:b6:51:e7:30:e7:29:ef:38:66:87:00:72:60:a5:d9:eb:
07:39:d0:69:8c:3f:d5:66:48:c9:a5:57:42:ec:c8:bd:b6:7b:
bd:09:13:75:2d:28:41:f9:bc:ba:06:f0:c0:07:3a:8f:2d:29:
61:e1:4d:e5:d0:55:0c:73:8d:c4:9f:75:c6:58:97:4c:f4:bb:
42:12:83:c4:46:bd:ef:05:1a:0f:2b:b6:e1:fa:ab:ca:fd:84:
a5:07:5c:d2:54:8a:63:a1:ca:a0:7c:a9:12:2f:12:b9:49:e7:
03:a0:48:22:e8:a6:22:0c:90:4d:05:29:f7:d7:75:1f:aa:59:
7f:3d:a4:24:24:26:11:7c:a0:57:b9:f7:96:6c:44:e9:e2:d5:
c6:44:72:d8:bb:3f:9c:33:10:ce:a5:21:23:c6:04:7c:3e:48:
38:c6:3b:af:8e:e5:87:2f:f9:31:dc:73:b6:a0:58:be:e1:5b:
6c:40:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:54 2025 by rpki-client