Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier: ISw5PlWd8+Ek3B1XL9AuxPfkc1YEoiz3GvjEihU311Q=
Subject key identifier: A6:26:BD:2B:F5:9F:C6:0F:2C:36:B7:2A:90:C3:85:F0:91:15:B8:E0
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 0198D4E02D8E363288E2793B047408B1CD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number: 0AFC
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (hash: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=)
2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: x8Uo1GoqomuSNt8wjOPTBhd/y9vuuklzalJoRygHY2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2d:8e:36:32:88:e2:79:3b:04:74:08:b1:cd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=a626bd2bf59fc60f2c36b72a90c385f09115b8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0e:2b:9d:c9:08:a5:e9:68:98:75:d4:4c:97:
27:69:9a:ea:ab:5e:36:2e:3b:10:05:75:38:d2:3b:
be:3f:14:83:f9:90:5f:0f:5a:9b:8a:41:69:6a:db:
4a:78:a8:94:27:e6:94:d5:53:73:7c:78:b0:e3:0a:
c4:55:41:4d:42:83:fc:d6:3e:44:04:9d:83:76:e2:
57:fc:0a:c2:ed:af:fb:46:1a:f9:fe:fe:9e:82:d4:
eb:0f:79:6a:fe:97:31:34:73:9d:17:9d:07:8b:84:
f3:d2:c8:4a:bb:c9:50:21:08:af:29:bb:0f:2f:85:
51:1e:1d:76:77:1b:eb:d1:4f:1b:7d:37:1b:c0:06:
14:06:1a:6e:ad:20:34:d8:4a:62:7c:69:6c:dd:6b:
9d:59:19:78:71:bf:9f:db:7f:dd:e5:e9:38:1f:27:
71:45:0a:3e:c9:e2:0e:6a:aa:95:6a:25:44:34:a4:
d7:7f:99:9d:c6:03:38:9e:95:17:82:60:4b:e6:0a:
02:08:cf:aa:47:9b:3b:b3:68:75:d2:b4:2d:05:83:
01:c0:8e:89:4f:05:df:7f:7a:07:56:f4:89:7c:55:
49:7b:75:e7:01:3c:db:35:ad:87:68:8a:d3:3e:e8:
d9:9e:2f:4e:25:a9:e4:bd:d3:a7:29:7b:d7:41:7a:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:BD:2B:F5:9F:C6:0F:2C:36:B7:2A:90:C3:85:F0:91:15:B8:E0
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ab:ad:41:e3:c2:98:b1:00:b7:45:d8:39:80:21:8a:44:95:
7e:72:3c:41:4e:8b:30:b1:82:6f:70:cd:94:1c:e1:6a:f0:1c:
80:2a:ce:16:68:88:8f:66:33:b7:2e:5c:77:fe:4e:f4:35:a4:
46:86:e2:9c:65:fe:f4:f4:18:97:e1:bf:53:c9:42:8f:40:3a:
ec:f1:67:f5:57:45:20:dd:b4:fb:18:a3:1e:3b:1e:cd:e7:7e:
6d:87:03:15:30:f1:3a:ba:5c:d7:9c:4f:60:8b:84:13:2b:6b:
2a:01:89:76:64:6d:18:14:98:97:6b:92:fe:03:47:d2:fc:76:
97:6b:a0:b7:8b:20:ec:57:f4:20:7c:14:c1:eb:79:70:99:e2:
96:70:50:43:5b:ac:be:88:19:8c:e2:a7:02:ce:85:9c:51:56:
fe:c0:d0:e0:8f:ed:f4:e8:77:f9:72:79:72:af:06:af:d7:5b:
a8:01:ad:d7:be:42:b0:6f:c2:da:e6:87:71:64:66:22:98:4f:
e5:36:61:24:ca:38:ec:d3:88:19:61:a6:55:5c:00:52:32:a3:
c4:24:14:0e:81:2c:8b:7b:7c:4e:14:13:38:38:a0:16:d9:0f:
d6:ff:7f:6a:a5:3a:ef:da:1d:45:5e:b1:d6:85:42:3e:e9:b7:
93:41:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:02 2025 by rpki-client