Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: gF1F1ZZjhDz2AwYFrc4jQzSilxWEPBhO3I2DIYfBbjM=
Subject key identifier: 5F:60:09:13:6D:D5:8C:2D:F9:DA:9D:5D:9B:1F:80:EF:83:3F:20:6E
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 0198D473443E3F7C1F3B608BEF7EB7FA340E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:00 +0000
Manifest this update: Sat 23 Aug 2025 01:03:00 +0000
Manifest next update: Sun 24 Aug 2025 01:03:00 +0000
Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: /FkJyOWaDA4x3hECHkABD1BMvDd9818XGX3VsJT+WFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:44:3e:3f:7c:1f:3b:60:8b:ef:7e:b7:fa:34:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Aug 23 01:03:00 2025 GMT
Not After : Aug 24 01:03:00 2025 GMT
Subject: CN=5f6009136dd58c2df9da9d5d9b1f80ef833f206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:65:c0:13:4a:69:4e:2b:8c:d2:30:60:7b:
8e:b1:a1:e3:40:26:66:03:38:d6:08:35:61:04:f0:
d2:f5:27:56:6b:00:71:81:31:05:25:96:11:73:a0:
2e:15:bd:1f:6e:29:e6:53:03:cf:3a:dc:6b:65:9c:
ed:68:f3:a9:b7:47:1e:96:cd:35:c0:a8:4d:44:f7:
0f:8c:4c:11:2b:45:1d:af:fc:bd:d0:79:e7:8c:b9:
6f:aa:d6:2d:d3:0e:9e:ff:3c:b4:3a:d5:58:65:26:
0b:2a:80:c7:83:c3:02:85:e7:2b:a0:6b:76:f7:5f:
bd:08:1e:b7:34:44:d4:21:13:c5:8d:24:0c:43:a6:
58:22:6a:e0:09:89:bb:fb:8f:ae:54:81:0a:c0:03:
a5:83:60:e3:2f:4a:a1:33:50:18:5a:9a:56:4e:d9:
37:51:49:6f:1f:f4:1a:e3:fb:c9:77:8b:51:a7:41:
af:71:5a:ba:77:28:8f:7d:24:e6:d2:db:fd:19:d0:
f7:25:8f:30:45:72:33:c5:d8:d0:e2:20:d0:f1:c4:
f1:b2:9b:7b:e9:4f:7d:1c:ba:ba:16:95:3c:08:ba:
48:a7:c5:25:27:4c:04:98:88:3f:03:f7:49:7b:79:
c3:aa:20:c0:15:8f:2a:34:33:ed:e8:d0:2a:e1:b0:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:60:09:13:6D:D5:8C:2D:F9:DA:9D:5D:9B:1F:80:EF:83:3F:20:6E
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:30:28:91:9a:6b:3b:ec:5e:e9:75:82:ff:22:2b:57:f4:8a:
2b:a0:fc:07:11:50:8b:72:10:f3:89:85:e9:75:4d:1c:a0:3e:
aa:2a:95:de:2c:6c:e1:d3:e2:03:5c:72:01:3b:08:a4:ff:0e:
80:a5:52:6d:fc:6c:41:59:0b:b2:4b:58:75:e7:6f:0a:61:85:
6a:75:68:d2:5e:af:49:c6:f8:b2:af:95:a2:04:a8:5a:3e:6e:
e0:f6:20:e3:43:ad:fb:20:47:77:bf:a6:23:76:d5:9f:85:e6:
58:8b:31:67:f2:3f:de:10:49:cd:7a:62:37:50:a7:3c:51:0c:
8e:77:ed:70:ee:8e:fa:ed:0b:15:4b:d8:90:3d:20:b6:8d:98:
4a:26:f7:28:d0:f0:59:f2:cf:70:b8:01:be:75:bc:79:39:50:
1f:ee:b2:2d:5e:95:05:f3:2d:3f:1f:88:d3:48:52:d4:44:b7:
40:a6:c4:08:bf:66:43:99:73:79:fb:22:8e:76:f0:f1:20:f1:
8e:8a:a5:35:18:e5:9a:fd:6a:5a:80:7b:7f:af:a5:cf:31:c7:
76:71:03:0a:9d:55:a1:a9:8c:7f:14:83:f7:f6:e1:52:95:7e:
81:7f:c3:16:1f:e6:7d:77:e7:2b:1f:1c:78:4c:f3:bb:0b:b1:
92:79:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:33 2025 by rpki-client