Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: mNRM3+1aibdgNX8k77pavqQLHAHBCokZQ2n7CBWgTkg=
Subject key identifier: 1E:97:1F:FF:AD:DC:1B:96:C6:A8:8A:ED:C0:D2:52:65:DE:72:1A:0C
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 0198D5BC1E6ACE1E0EEBC75408D45FC7A07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 118C
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: D02Vfah4yi+cu6yEi8KAfs15C+XIp6wN+tuyNsK0ei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1e:6a:ce:1e:0e:eb:c7:54:08:d4:5f:c7:a0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=1e971fffaddc1b96c6a88aedc0d25265de721a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:1e:f6:06:de:ea:87:2d:2c:5f:b6:5f:8d:
8a:25:10:43:30:46:ff:9e:31:f1:15:9f:71:8e:02:
59:06:ce:0d:83:88:0b:d2:57:d2:3c:a2:ac:cf:da:
e2:61:4a:4b:f1:7c:a9:48:5f:2d:c9:05:ff:a7:93:
0b:a6:e0:1e:3a:94:a4:a3:d5:32:54:a9:7a:fa:64:
b3:2a:15:ff:f1:35:92:f0:ea:54:08:df:f5:13:98:
6a:14:1e:b1:7c:a0:c9:b8:ef:a0:4e:bb:5b:c8:05:
bf:f7:27:79:0e:09:58:c4:31:df:d7:3d:d9:87:a4:
1f:22:74:4a:88:b3:b6:ea:d8:14:69:9c:a0:86:3c:
18:af:4a:dd:a2:9e:73:03:f0:d5:d1:a0:b9:87:b8:
41:94:58:c0:47:23:3e:ca:dd:bd:66:8e:78:63:b6:
59:4d:42:ac:fa:d4:11:f2:09:c3:28:2e:06:f9:d0:
59:56:67:eb:88:d4:55:f3:1e:ab:82:a7:11:17:0d:
31:f7:49:25:92:22:9f:4a:78:f2:9f:7a:f1:2b:ab:
09:5f:b6:b3:43:0b:f4:f0:51:99:6d:44:83:ea:c0:
b4:bd:e4:0d:cb:fe:1a:a9:21:c3:ec:13:35:6f:f3:
91:c4:96:e5:1c:c5:66:4d:64:44:d9:ab:94:86:ba:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:97:1F:FF:AD:DC:1B:96:C6:A8:8A:ED:C0:D2:52:65:DE:72:1A:0C
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:2d:4c:e6:4c:50:28:73:65:8a:e7:8c:14:71:fe:f6:dd:
57:b6:49:01:75:7f:8b:49:37:2d:4f:16:ae:c8:28:f8:cc:0d:
4b:1b:d2:8e:85:3a:58:7c:30:55:44:af:21:fb:60:8e:8f:0a:
5b:ca:04:df:79:01:e6:34:b1:bc:a8:ab:3f:cf:2f:bf:ef:a7:
38:11:be:f6:29:ed:7a:97:ce:b4:5e:51:e2:89:2b:1a:b4:e6:
1b:10:99:2f:23:0b:6a:74:f4:33:fa:92:dd:35:01:da:06:57:
c8:2f:f7:ba:3a:2c:e2:c6:f4:a2:28:08:61:45:cd:f3:e0:fd:
ff:db:8c:48:2c:ae:ce:bc:19:d3:85:4d:3f:1b:2f:b4:75:19:
2a:b7:e9:35:29:32:48:3f:9a:bc:37:cd:ea:f7:86:1b:b3:b8:
04:3b:86:91:be:cb:ee:29:df:ce:48:56:04:5f:0d:24:c7:e8:
c8:66:97:94:e2:9a:83:6f:99:aa:b8:76:e4:4a:e1:c3:19:51:
2f:12:7d:0b:36:b7:77:76:5e:0c:7b:5a:a5:3b:5c:87:bd:c9:
ec:93:d0:ab:6e:93:5b:45:9a:c3:10:e7:04:b3:58:db:4c:f7:
e1:e3:68:92:e6:ec:81:cf:33:c9:62:da:8a:21:c3:98:6e:be:
6e:5a:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:36 2025 by rpki-client