Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: PahDXQ57IE7CXnMfwDQyWar/2nEVayaa7eaG6JWa9YQ=
Subject key identifier: 5E:AF:2F:F5:B0:58:F9:B5:FC:8A:36:28:34:C4:A2:41:95:74:0C:9E
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 0198D5BBF72FA80781D38997DD41F3F0A51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 15D2
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: Q2tZHxcnTfsijpne_PaEOT5dOKg.roa (hash: FVNO2p4hWZxlSs3+Rn7ouc28IBioq9Skdi74miEeHBs=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: R+zw6OIWZZ5kzziFoodr9WIF0Jq9Lrooprx/ZUWe5P0=)
3: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)
4: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (hash: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f7:2f:a8:07:81:d3:89:97:dd:41:f3:f0:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=5eaf2ff5b058f9b5fc8a362834c4a24195740c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:55:4b:cb:bb:b6:6e:c0:b3:d7:2e:ce:a6:
12:50:52:e6:43:b7:ef:56:1f:2c:96:ea:bd:2d:7c:
b8:ea:c2:d7:88:50:dd:42:a5:db:8b:ac:09:e0:8e:
b3:95:3d:23:23:e3:47:a1:ba:5d:6e:6d:1f:24:57:
2d:b3:26:13:60:8d:7b:57:bd:3f:8f:e7:42:cf:8e:
38:8f:9b:ab:47:e5:10:d2:4d:df:aa:99:3b:98:38:
ad:79:6f:c0:31:41:7d:d9:e7:a7:92:d1:5b:e6:71:
51:1a:a4:39:5d:e0:0b:99:9a:71:87:c4:67:10:12:
a8:b0:f3:ea:12:bb:1a:ef:6e:f3:72:a8:bf:26:ba:
db:64:79:6d:63:6a:00:c3:ba:06:c2:21:d3:7c:72:
2f:55:37:30:aa:f4:45:0e:a5:db:46:43:08:8a:f8:
44:0f:50:ab:9c:22:cf:86:48:2b:13:2a:03:8d:7a:
32:ac:06:76:28:8f:6e:21:c5:ce:9e:11:c4:e6:bf:
4f:17:9c:cc:3c:1e:bd:0f:87:26:be:f1:88:cf:aa:
a5:af:8d:7d:56:4d:bc:dc:3e:0d:db:49:06:87:68:
74:92:20:8d:98:0c:f9:ae:37:3e:87:b9:cd:97:78:
84:bf:74:44:a9:dc:21:4b:c1:79:f9:e0:28:5a:a4:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:2F:F5:B0:58:F9:B5:FC:8A:36:28:34:C4:A2:41:95:74:0C:9E
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:91:6a:a9:33:cc:bb:4e:d1:14:d4:a2:27:cd:4d:b7:7c:5e:
b7:ee:a4:75:e4:fb:52:b3:f8:a3:26:a6:3a:d1:d3:8f:2c:71:
9c:bf:74:e9:7d:cd:b9:1a:08:dc:bf:aa:7c:8b:b8:fb:3b:4e:
95:a9:d7:cd:fb:8b:0b:42:c0:a3:0e:32:68:6b:cf:19:ea:90:
3b:92:53:b2:a7:f4:63:e6:a4:97:86:b5:0d:67:6a:b4:9c:0b:
a3:40:69:f3:f9:bb:2f:27:6f:55:f3:70:9e:c3:f9:18:5e:4d:
19:41:d6:66:c3:0e:2c:8e:d2:7c:5a:eb:7a:71:69:ef:1d:fe:
17:00:40:63:17:06:99:76:5a:8e:2e:c2:ef:06:31:bf:01:0a:
00:9a:37:57:dd:be:6f:ff:f3:ad:7a:19:62:c7:f2:55:5f:02:
2b:28:8f:9f:b3:f1:67:3d:c0:99:fd:5e:7e:f7:b1:ee:e7:fd:
b8:fb:60:4d:cd:8c:dc:ae:a2:2c:d8:86:f0:65:1e:1e:3f:fd:
d6:13:22:24:1a:51:cd:c5:4b:73:47:f4:5e:4b:1c:3e:59:2b:
ea:a4:12:c3:d7:a0:06:36:5e:fb:32:78:bd:d6:d5:51:2a:44:
b6:db:dd:19:48:5c:b5:8e:4b:60:07:46:ca:89:dc:8b:83:6b:
a3:93:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:29 2025 by rpki-client