Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json)
Hash identifier: PxexKiKnZBcc7rGQszfkWcYW2CCihaBlrKL/VlkVT9g=
Subject key identifier: 8A:17:42:1A:07:C6:D9:89:AD:04:E3:08:87:97:B4:63:3A:2E:57:CE
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 0198D69871BEFE0999734F59BBDD222052B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:51 +0000
Manifest this update: Sat 23 Aug 2025 11:02:51 +0000
Manifest next update: Sun 24 Aug 2025 11:02:51 +0000
Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: A6Y2s9BGIjR1MGdQzcPYqnvWmV36gcfrjkLoPIsBBjo=)
2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:71:be:fe:09:99:73:4f:59:bb:dd:22:20:52:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Aug 23 11:02:51 2025 GMT
Not After : Aug 24 11:02:51 2025 GMT
Subject: CN=8a17421a07c6d989ad04e3088797b4633a2e57ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:7c:00:58:ae:f1:18:d8:cc:6c:db:61:bd:
a4:1f:cf:98:46:50:de:c1:87:1e:c6:b7:22:2a:20:
13:9c:e8:96:88:50:40:e8:7c:fa:c7:f3:df:84:d6:
b8:d0:eb:01:a2:d8:1b:d0:c6:86:02:b8:08:63:e2:
7c:66:34:52:82:f5:47:5c:01:3e:18:bd:4b:a1:94:
85:e7:2f:32:d9:0b:9f:6b:c1:91:fd:42:0a:75:d2:
7d:dc:49:c7:37:0e:a2:a3:9a:f8:33:4c:f2:52:46:
cb:3d:91:57:8b:4a:b2:40:c5:93:78:79:49:d4:43:
9b:4d:e9:f2:78:1f:6b:1e:9a:80:d1:36:c8:b2:16:
d0:42:2f:9c:51:06:43:d5:53:f1:fc:54:f1:5b:0d:
ca:0e:e3:69:65:b4:11:72:a9:34:11:17:f3:d1:1d:
69:8c:d6:e2:c2:de:f8:aa:21:45:1a:cb:53:d5:27:
cc:d9:0b:00:88:ce:22:b7:8f:00:93:74:d1:2d:c7:
b9:98:f5:6d:3a:8d:dd:f8:1a:e9:f6:7d:93:23:7a:
c0:32:bd:9d:6c:f2:e0:83:84:1c:11:34:a9:07:20:
8d:84:74:66:dd:2f:f2:77:8a:f8:a9:97:92:f7:17:
a6:8e:79:93:9f:71:bd:71:f1:97:9b:c9:32:93:5d:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:42:1A:07:C6:D9:89:AD:04:E3:08:87:97:B4:63:3A:2E:57:CE
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4f:c5:91:dd:c8:2a:85:57:e2:82:e5:cc:86:08:cb:ec:61:
7b:19:c0:e6:25:65:96:60:e3:42:b4:a4:ff:0d:6c:dd:41:a4:
71:ef:0e:8a:3a:dd:8b:07:81:b1:2b:f3:25:39:78:e2:f1:14:
89:3a:d1:ee:ed:8b:f7:90:85:24:29:bc:b9:5a:d3:66:81:55:
29:94:40:af:be:80:6c:39:77:37:9d:b7:64:a8:2e:10:ea:3e:
a2:7f:60:e7:2b:12:77:9a:2b:09:89:e5:12:b7:90:77:b6:cc:
5e:26:df:33:19:c5:c4:47:66:44:84:01:cd:bf:b4:d8:5c:c8:
43:d0:da:58:9b:28:29:07:c7:6b:2c:0f:26:30:5f:b4:a6:ac:
55:64:8d:79:c2:be:fc:c3:99:ef:35:3d:99:fb:e4:f8:70:ee:
46:58:97:d2:34:03:ed:29:a1:63:b2:0e:06:ad:cb:49:b3:64:
5d:55:77:0b:4e:8a:57:ae:f7:90:ec:f9:ca:d7:57:d7:57:b2:
61:90:fd:7a:3c:16:d7:7c:67:2c:da:84:f9:30:23:d0:20:31:
27:3c:19:45:44:36:db:0c:5a:99:75:8c:a7:fa:1e:c5:72:17:
cb:fd:66:6a:22:8e:92:64:a2:4f:be:11:d6:8e:00:0d:c1:86:
e6:26:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:46 2025 by rpki-client