Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: 7sGxDTRXqhwe2NvWjqFbOiVGQg9MGkP5V6toPM6YgbM=
Subject key identifier: DF:92:D2:76:AA:27:11:43:6E:F9:34:F6:73:C0:C5:03:BB:D4:60:37
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 0198D6CDC8EBD8EA4F5577773C21961541EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 1225
Signing time: Sat 23 Aug 2025 12:01:06 +0000
Manifest this update: Sat 23 Aug 2025 12:01:06 +0000
Manifest next update: Sun 24 Aug 2025 12:01:06 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: l00ehanHLn9LNy6Uo2a864A9C79koi23r6lAU6utzuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:c8:eb:d8:ea:4f:55:77:77:3c:21:96:15:41:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Aug 23 12:01:06 2025 GMT
Not After : Aug 24 12:01:06 2025 GMT
Subject: CN=df92d276aa2711436ef934f673c0c503bbd46037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9c:e5:63:9d:e4:62:cf:0a:31:ad:87:4d:96:
9f:dc:9d:66:85:d1:ce:59:37:04:68:57:41:1c:be:
b5:fb:a5:10:21:3e:61:84:9e:8f:2d:59:ce:05:5e:
2b:30:80:cc:1e:ba:97:57:bc:2c:f2:f2:cb:4d:cc:
fd:e6:01:52:a5:97:0b:f5:bb:05:30:a3:19:8c:13:
fa:6e:e5:36:a8:9f:31:10:5d:82:4a:d7:06:9d:73:
87:14:be:32:0a:53:0f:0e:2c:0b:57:5b:88:86:a9:
bc:22:18:1c:73:48:84:2c:23:e7:dc:bd:6e:f6:01:
1c:7f:29:a9:0f:ca:19:00:f6:de:61:bf:57:96:4f:
da:ae:50:dd:1a:0f:07:3b:69:d4:94:74:44:c9:fa:
0c:5a:87:11:97:f8:5b:7e:7e:d7:ea:70:b0:30:e4:
b6:6c:9b:98:51:9e:22:d8:4f:79:4c:cf:6f:d8:03:
a1:0b:08:af:6f:59:18:d3:48:2d:dd:25:b3:12:87:
bc:b1:1e:43:4a:c6:e0:0c:97:1a:59:07:c1:62:5f:
70:3e:61:9f:bf:8f:8e:fb:a1:1e:a3:fa:b5:66:2d:
3e:b7:92:2a:99:3c:e8:37:65:0c:7f:b1:ec:88:3d:
1f:f0:6f:20:ef:23:be:d6:04:46:48:aa:bd:7d:7f:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:D2:76:AA:27:11:43:6E:F9:34:F6:73:C0:C5:03:BB:D4:60:37
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:69:85:82:6a:c2:65:67:dd:8b:50:62:c2:c1:6e:7d:15:a0:
dd:94:a8:f8:de:2a:cf:c4:09:c6:bc:b9:c5:2f:3d:48:ee:25:
6c:14:1f:6a:89:0a:9d:d4:1a:b2:98:04:34:28:eb:0e:a4:02:
bb:f7:ba:81:2a:4f:bd:90:b3:5e:4c:59:72:7b:c7:0a:98:95:
f7:2b:bd:7c:2d:6b:12:1b:60:d4:97:fe:f4:56:4a:b0:30:d6:
7c:85:2c:32:87:78:c7:cf:38:6b:46:49:3b:06:68:d5:b5:53:
3c:76:68:54:e5:7f:c1:a4:02:b7:83:02:6e:61:59:9d:b8:54:
c5:e5:33:91:d1:9b:92:0a:83:c9:a2:16:0b:37:c6:ac:99:5e:
6b:9f:b3:8c:b1:44:c7:e3:88:d3:23:bd:5f:d2:06:22:28:de:
36:d9:70:fd:d3:ef:86:ff:34:8b:03:dc:d3:08:ab:8f:51:d9:
92:dc:b9:b5:63:df:42:b3:94:c7:9b:cc:bd:52:d8:fe:2f:35:
db:06:da:ed:1c:73:95:7b:bc:70:a7:bb:bb:13:42:ff:1a:07:
f7:f7:4c:11:79:b3:32:43:cd:27:75:13:12:cc:2f:7c:af:be:
42:3f:11:df:94:28:55:e9:7a:9f:91:7f:b2:5d:85:4a:fd:ea:
0a:41:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:25:14 2025 by rpki-client