Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: 8vkFqeUMukrLk+v7gtiH1NXzEwxyLfXFM5f5kusEChQ=
Subject key identifier: DD:59:9F:98:F2:98:4D:2D:8B:06:FC:51:31:39:3B:0C:B1:21:15:09
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 0198D5BC61322629724C42D9C38E1C8A66AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:29 +0000
Manifest this update: Sat 23 Aug 2025 07:02:29 +0000
Manifest next update: Sun 24 Aug 2025 07:02:29 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: R74cIhydOzUQuXz45YOfaJBAVQLLfCrHxdWWJXfHzus=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:61:32:26:29:72:4c:42:d9:c3:8e:1c:8a:66:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Aug 23 07:02:29 2025 GMT
Not After : Aug 24 07:02:29 2025 GMT
Subject: CN=dd599f98f2984d2d8b06fc5131393b0cb1211509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:18:e3:87:3d:83:e8:3d:97:65:bf:22:24:
74:39:1a:29:5f:72:3a:0e:b1:97:8e:42:de:c8:aa:
96:31:17:44:e5:72:45:02:e1:6a:84:f3:c8:fb:1d:
ac:9a:2f:11:14:0f:dd:66:36:f6:2e:5d:c9:ce:18:
0e:5c:09:2a:15:f8:0c:c8:7d:44:67:d4:ee:9d:63:
f2:c0:24:44:de:94:48:47:43:d0:7e:c9:a5:e8:2f:
40:ad:fe:8c:7d:e7:e0:c1:e1:e8:df:ca:8d:be:6e:
65:28:10:82:49:59:2a:3c:71:d4:c1:b7:9e:6b:3f:
b7:d2:4d:0d:80:3f:1f:90:25:41:aa:2e:20:8b:f7:
bd:cc:bd:c4:10:9e:fc:42:ed:5c:d8:21:5b:be:99:
86:a5:e4:c0:db:a6:65:9d:2f:d9:8c:c6:48:98:00:
96:b0:5b:2f:f3:e8:df:09:bc:3f:01:91:cd:3c:05:
a7:9d:18:39:9a:c1:0b:fc:e4:96:3b:3d:b0:62:ef:
98:7f:51:c1:d9:f8:63:54:be:cc:c2:18:0e:ec:54:
50:24:47:20:57:84:55:f4:52:a9:91:ea:95:16:af:
92:4a:31:da:e2:95:01:6b:ae:d7:2c:d9:50:83:6d:
51:7c:27:8c:de:b8:15:ff:00:ee:43:e6:71:77:4d:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:9F:98:F2:98:4D:2D:8B:06:FC:51:31:39:3B:0C:B1:21:15:09
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:63:f6:05:73:25:4d:dd:e8:50:f4:b1:85:e7:1d:6b:b3:f7:
5b:d9:dc:18:65:9b:76:e4:14:5f:16:82:ed:f2:95:e1:2a:f9:
a0:85:78:3a:f0:41:fc:e5:59:e6:76:7c:be:e6:bc:e8:62:53:
96:21:6c:65:3b:92:79:c7:87:1f:1c:dc:fc:ae:ab:9e:95:f6:
7c:3a:de:3f:da:33:1e:92:b6:7a:21:6b:b3:28:e0:c2:7e:bf:
c3:be:23:e5:1e:8a:02:38:eb:94:4a:0b:09:e1:f0:34:a4:29:
3f:cf:61:13:42:d8:a4:33:20:73:09:4e:f6:1d:c9:4a:ae:50:
e2:5d:41:85:a3:db:1b:47:05:19:7b:70:7c:7e:96:72:48:0f:
f7:62:33:e7:af:02:fd:e2:d2:72:f8:6d:61:26:9e:cd:33:9a:
df:b1:c1:97:51:4f:77:26:44:a7:7d:75:a7:e6:a2:25:41:6d:
cb:fa:00:3e:b4:28:08:4c:a9:56:96:7b:65:cb:4e:35:0a:dc:
19:2f:0e:41:c9:ba:51:9e:c8:f5:3d:58:9d:67:80:0f:17:14:
a2:55:4f:fc:af:14:f0:ae:56:2e:c0:62:01:7a:84:fe:50:9f:
7b:d7:16:7f:6e:3e:20:10:b8:fd:0b:32:47:87:b5:1d:bb:a9:
d5:5f:aa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:16 2025 by rpki-client