Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: oLzp1uD198j8ZKgFo/2dzJp0kBv6Nzt2807XDXXOEYA=
Subject key identifier: 31:70:B4:82:2C:A6:E7:15:DF:60:8E:34:40:EB:AC:9C:D4:10:F6:72
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 0198D472A397B645FFE3AADBC43B1FE13FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 01:02:19 +0000
Manifest this update: Sat 23 Aug 2025 01:02:19 +0000
Manifest next update: Sun 24 Aug 2025 01:02:19 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: ykAN/zVuTtWIpp/nXfWAlCw9bW0rKyTQHz+3u0cXV/k=)
2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a3:97:b6:45:ff:e3:aa:db:c4:3b:1f:e1:3f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Aug 23 01:02:19 2025 GMT
Not After : Aug 24 01:02:19 2025 GMT
Subject: CN=3170b4822ca6e715df608e3440ebac9cd410f672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:26:8e:55:a8:97:a3:49:d7:f9:03:cd:4a:
15:64:f8:e9:00:b0:59:47:01:9b:6f:58:5b:54:50:
ca:2f:3b:59:29:3a:84:0b:c2:57:92:ff:a6:f0:a6:
8e:8d:56:ec:86:fb:a9:64:95:0d:4a:84:bd:b5:e5:
aa:1b:c9:70:f6:92:35:38:89:12:90:ff:ab:12:20:
83:29:16:11:7b:70:d6:30:a4:ed:bc:c5:e1:3a:21:
68:7a:8e:e9:4b:09:69:a0:e3:9e:25:6a:84:ea:f7:
77:8a:bd:6b:45:44:f4:d3:13:de:83:c1:eb:ab:db:
f6:41:df:98:8c:ff:9b:f9:48:f5:a8:be:09:58:cf:
66:cc:c2:02:0b:e3:41:d0:f2:66:34:51:1b:97:5f:
36:2c:5d:92:19:36:c0:3c:e9:b8:97:28:b7:fc:1e:
5f:05:78:71:f1:6b:75:7d:02:65:84:ef:ae:c0:d9:
79:b4:e9:ba:28:16:e3:fa:13:98:2a:c7:df:42:4c:
c1:0f:f7:e0:d3:38:15:58:ca:2e:18:66:55:e8:0d:
d7:b7:c6:94:22:93:8f:1a:34:2a:87:0c:aa:19:96:
8c:e9:1e:fb:10:33:41:b1:12:f3:00:ca:73:30:a1:
90:ed:f6:6e:eb:f7:33:59:8a:76:3b:57:55:35:69:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:B4:82:2C:A6:E7:15:DF:60:8E:34:40:EB:AC:9C:D4:10:F6:72
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6e:fb:fc:6f:9d:f4:fd:c2:44:17:42:2f:1a:f4:07:d4:c0:
16:a5:29:b1:f4:f6:5a:68:90:3e:6e:a7:cb:4e:d3:27:3c:66:
f7:7f:82:38:14:d2:bb:b9:66:78:a8:15:b8:7a:3c:0b:4d:6e:
58:4b:2b:6c:14:d8:cd:a6:99:16:0d:c3:1e:b3:83:9f:94:65:
9e:23:e0:75:7f:65:7c:67:bf:07:26:0f:ee:df:a8:c3:bd:ed:
da:0c:5f:c7:cf:89:bb:d5:2d:ce:76:14:df:76:4c:ee:b3:c4:
8b:eb:9f:2c:67:cf:34:ab:93:d2:a3:da:a2:8e:87:4e:7a:b9:
fc:52:7a:c2:52:26:ab:7a:5c:4c:64:44:ac:53:f4:dc:64:c4:
16:7a:88:c7:61:10:c5:61:fd:cc:94:ff:65:24:78:1b:d1:05:
14:09:fa:f5:31:4d:18:3f:78:b7:89:a9:b1:80:4c:de:63:5d:
35:5a:50:d0:9d:fd:7a:fc:d4:1c:dd:c7:f8:3d:11:cb:d8:08:
f1:27:e0:d9:80:7c:b9:93:2f:68:8c:de:86:60:5a:b9:61:5f:
d1:44:92:98:ca:43:d2:32:34:6a:98:c7:8d:b2:4e:a5:2f:0d:
14:c0:af:55:f6:fd:5b:14:86:87:76:a5:0d:78:26:47:c3:75:
99:be:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:14 2025 by rpki-client