Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: fBuXTn3MUCS9DtxwADuFr0kYZLDfcj66KKghbK6BTls=
Subject key identifier: A2:19:F6:D0:26:9E:52:C3:0C:9E:A5:33:4B:2D:2C:24:1D:5D:59:47
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 0198D5BB919AEDD4522E9D9BCC7BD05BD9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 0A1A
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=)
2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: AgGvTtMJnuEWXjIZuZCI25TCcCGwk6cEbppOEKTdWMQ=)
7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=)
8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:91:9a:ed:d4:52:2e:9d:9b:cc:7b:d0:5b:d9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=a219f6d0269e52c30c9ea5334b2d2c241d5d5947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:38:7e:61:6c:21:03:00:8d:64:70:84:72:
fe:05:62:4f:42:bb:10:06:51:8b:c9:79:3e:bf:50:
b9:5c:99:da:54:21:91:f3:9f:0a:16:44:0b:5b:28:
16:9f:6e:19:cc:b6:0c:da:fc:31:03:04:8b:8f:b3:
e2:59:6f:c6:77:3d:e8:5a:2b:64:2e:33:56:6b:9b:
ba:36:62:40:e7:88:86:09:cf:1b:8e:6a:d7:6e:b6:
a5:e8:1a:01:42:e4:ac:06:ef:02:e7:e3:98:71:0a:
74:b5:f1:9e:5e:a1:f7:db:9b:71:f4:87:75:ed:b9:
17:b1:a7:d9:d5:f8:74:fe:e4:0d:a5:7c:00:87:d2:
fd:70:c8:e0:2e:6c:68:f4:64:3a:70:f0:bd:06:06:
f7:8e:72:6d:65:d5:be:24:04:88:3e:68:7c:33:f8:
83:dc:6f:01:e2:6a:10:19:32:7c:9a:40:3b:be:fc:
ec:8f:bd:97:c6:37:0e:52:bc:41:ac:e8:6a:ad:f8:
f7:1b:98:43:24:e0:a5:1b:6c:54:f8:11:dd:47:ca:
d9:2a:58:4b:db:10:1f:1d:c0:73:3b:68:77:1e:8e:
91:9c:d4:f7:e4:b0:6a:43:02:ff:52:42:d6:dc:e1:
e3:0d:87:d2:5c:3a:b2:8c:43:dc:c7:27:47:5a:40:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:F6:D0:26:9E:52:C3:0C:9E:A5:33:4B:2D:2C:24:1D:5D:59:47
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:54:0f:ff:a6:7d:7d:0b:64:42:91:6d:ff:4f:b7:21:64:e3:
a9:02:b3:2a:8e:cc:a4:ff:fd:0c:0e:3d:90:c3:1d:1b:62:9d:
e3:42:b3:2f:f9:0f:56:e2:a8:f4:7a:3e:37:97:58:02:cf:58:
83:e6:86:f3:92:dc:18:7d:f7:70:cb:36:dd:81:03:fd:d4:8b:
80:8f:1a:ac:92:27:5b:5d:63:94:a9:c7:93:8e:55:f1:99:fd:
19:8a:c9:04:20:e5:df:fa:14:55:da:27:24:ac:b4:c0:e6:c5:
80:f2:d2:59:32:c6:6e:60:f4:d8:ca:b2:dc:1d:d6:2e:b4:74:
fa:32:f2:51:f6:0d:26:67:a7:69:42:34:4f:09:0b:5b:d6:ea:
e0:9b:71:de:14:2b:a0:ea:f8:2a:e8:76:ce:03:28:2b:e2:40:
f6:d9:ae:aa:98:e1:ec:b3:48:67:89:f5:76:fb:2c:e3:51:b7:
e7:44:63:d2:57:97:89:35:7d:9c:6c:fb:e0:84:75:5c:50:7c:
46:cd:28:d8:1c:d1:dd:e1:51:4f:a6:11:bc:f0:1a:af:f3:65:
c2:24:95:30:48:79:e7:a3:fa:8e:df:61:ce:66:a9:46:9c:92:
27:c4:f0:14:0f:7a:ee:58:b0:4b:8c:f8:70:52:a2:b5:1c:73:
83:01:bc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:21 2025 by rpki-client