Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: VG1O99SzEzkWxysDzVciCx+kVnenc8jCov7goRUohv4=
Subject key identifier: 19:DD:8E:3F:33:06:A3:0A:F0:E0:C6:B3:9D:CE:E2:87:E9:87:AE:FF
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 0198D66025965FC5B1DF926749DBFFFC0997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: BjAQnisNrxKMSgpD9fdpIiGDoqduJUVm+ZTtCIHn7lM=)
2: A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa (hash: /JIMryvixQaluB5n97mezkD1EyPJinxMba0OGSdEKhE=)
3: vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa (hash: y1OFWyB3EPXzoJcEAkwbjykFdh6ALTnHBPCo+2KwzSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:25:96:5f:c5:b1:df:92:67:49:db:ff:fc:09:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=19dd8e3f3306a30af0e0c6b39dcee287e987aeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:f6:e5:f3:59:dc:f8:bb:14:4a:3e:7d:1a:
14:b4:72:ab:11:d2:fb:bf:c6:ef:1d:11:71:6c:28:
e8:c4:65:9f:e5:07:e0:e9:03:35:bd:9b:1f:df:b3:
16:0f:5b:25:ef:7a:09:9e:db:f9:27:78:da:fb:02:
c0:3f:20:10:4f:8a:69:9a:d7:53:f3:13:44:d3:fa:
e3:da:63:4b:52:b9:3f:e6:f6:68:66:e6:c3:a9:a9:
88:c2:20:91:e5:7b:05:ae:3a:3f:54:23:9c:06:10:
8e:3a:7b:b2:d5:bc:0b:b0:de:11:0f:e0:8f:b5:9c:
31:4b:fc:cd:9e:71:7f:d6:7e:a7:84:36:a2:36:01:
a3:64:a7:e3:9b:ae:bf:16:ef:c5:ea:aa:d7:61:c4:
d3:dc:55:e3:26:ba:6a:8f:e8:c8:81:e7:2a:2b:c6:
3a:7d:e2:08:54:64:c7:24:37:88:83:88:db:b0:ba:
9e:68:91:94:a3:5a:64:64:dc:0e:99:d7:82:d8:b0:
39:91:0d:be:fa:98:4a:a0:d6:85:c0:bb:ee:81:5b:
a1:51:33:b3:6f:a1:31:a8:d3:65:fe:20:3e:81:c7:
94:d9:18:bc:2d:2e:59:4a:79:ac:c8:d3:01:74:d2:
38:e6:37:f3:37:1f:bf:5e:0f:09:bb:2e:57:8d:f0:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:8E:3F:33:06:A3:0A:F0:E0:C6:B3:9D:CE:E2:87:E9:87:AE:FF
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d2:df:b9:69:85:60:9c:d7:26:aa:15:41:a5:24:9d:0f:5e:
d3:ac:91:0a:4b:83:f5:1b:00:79:06:7c:bd:da:c8:06:c9:8e:
78:54:6b:58:f5:96:6a:d6:11:10:0f:2a:81:27:c9:b9:82:70:
aa:95:5c:ab:7d:03:cd:70:fe:7c:94:98:5e:d1:23:c1:3e:a5:
1f:ec:35:b8:88:54:3a:26:5c:b7:1d:34:fd:53:9e:16:d5:1d:
b7:7e:73:ec:72:41:ab:18:c6:35:fd:b7:78:89:44:b9:4e:70:
d7:41:0c:48:0a:b5:da:cf:c5:ee:f8:97:d4:49:23:95:75:cc:
dd:dd:9b:7a:18:6c:fd:a9:2b:c6:f5:44:53:52:63:72:55:1a:
c9:95:24:db:12:c5:bb:19:ee:0b:18:47:0e:23:49:00:70:cd:
55:ff:a7:da:a2:05:56:ea:c8:8a:a8:6f:99:36:13:f0:fe:d7:
80:f9:bd:f7:82:35:02:6e:a6:02:00:04:a5:80:73:c2:b5:67:
b8:05:06:ec:41:3f:15:2a:30:a5:11:0b:04:13:32:ed:80:12:
b4:48:e5:bc:40:8b:d9:a3:2a:02:c4:90:b8:d0:25:cd:27:45:
a8:68:ce:97:fb:78:d8:d1:7d:13:e9:19:85:cb:9e:5d:03:50:
e4:72:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:43 2025 by rpki-client