Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json)
Hash identifier: 7SY7/9sonvh85bhBN1Xuh7KVAsoIKWWrM/SfuPZhZKo=
Subject key identifier: BC:3F:B1:D4:F1:DA:53:BC:11:40:A7:52:5D:DF:98:56:EF:68:73:24
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 0198D6983C4C35D62B33E9663355A8DEFABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
Manifest number: 041A
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: Ol4H0Ofe0seTJhjp23zwbv14mcA.roa (hash: h0M7hTbR8JXwLU22tU4Fw/p8crplmJ6JisUg1rjxv0k=)
2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: lvl5W+x6xZkyJmvFI3ExnmMuVwL3uk6hnrbeW+fABi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:3c:4c:35:d6:2b:33:e9:66:33:55:a8:de:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=bc3fb1d4f1da53bc1140a7525ddf9856ef687324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:d7:72:47:7b:e7:a2:91:fa:3f:5c:ac:e3:
5f:d0:a6:2e:3f:ab:88:f5:a1:da:67:8f:e3:3d:b8:
42:ae:a2:72:13:82:d0:5e:e8:5f:2c:2b:60:7b:f1:
dd:e4:3d:30:de:31:18:f6:39:b0:20:ed:aa:27:ee:
10:03:9f:17:62:90:30:58:08:b1:a6:f3:57:ba:a8:
31:70:d1:82:2c:67:eb:d7:dd:59:8e:55:32:e9:cb:
18:31:57:28:eb:5a:3d:7c:24:2d:e8:80:bd:7e:42:
fd:fa:1a:db:78:b0:29:b5:97:82:7f:ad:4c:da:b2:
cf:a8:f8:7f:7a:62:2f:cb:f6:d5:d4:32:12:18:68:
3c:1f:15:69:fa:c1:99:27:89:79:a6:6e:e0:36:0f:
57:6d:56:84:5e:bf:9c:1a:94:f5:e2:3c:71:83:cb:
27:dd:58:67:c9:29:3c:24:3c:a8:81:26:1a:6b:ca:
44:44:39:81:6d:70:0a:b8:55:6c:3c:c9:9f:e2:c2:
2c:32:f2:59:22:6a:90:b0:6a:c8:bc:ba:7a:fb:08:
a5:af:2e:b2:d2:40:48:cf:9b:81:1f:42:1b:59:ef:
52:b8:6f:7b:69:02:33:1c:82:c3:65:40:12:ce:1f:
4a:44:43:2f:b1:08:ed:5a:f2:cd:8f:95:0b:5b:b6:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3F:B1:D4:F1:DA:53:BC:11:40:A7:52:5D:DF:98:56:EF:68:73:24
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:11:24:24:80:29:c6:05:49:cd:ac:42:4d:58:2c:cb:a9:7f:
97:15:46:db:68:79:d2:22:fa:a2:5e:b0:9b:61:b9:08:54:ee:
74:57:b1:3e:5d:0b:a5:33:55:fe:a4:35:f3:ec:71:d4:c3:fe:
8d:f3:b3:71:8e:c7:e6:13:ec:bd:3e:d8:d8:44:5c:58:95:57:
2b:8c:df:5d:d2:be:87:e0:c5:f5:48:d3:3e:df:66:eb:f0:fd:
45:be:70:c9:1a:eb:de:78:cf:a3:40:70:d7:39:b1:0f:02:f9:
06:24:56:8d:24:30:41:1f:ad:ef:95:a0:7e:3a:d8:92:7b:a9:
24:81:46:79:3e:b3:d5:f7:49:24:10:b1:49:87:e4:81:3e:5b:
fe:9b:8c:dd:70:63:22:be:35:c6:78:fa:19:bc:05:ed:fc:30:
3e:23:9a:ce:ba:2c:e6:71:9a:dc:69:a5:32:18:12:77:12:c5:
d2:bb:33:91:b7:26:9f:f0:d2:76:b6:5b:3d:cb:51:51:9b:fa:
b4:ce:c3:08:98:21:97:df:e6:89:8c:05:a5:fb:dd:7e:89:f9:
b0:87:3e:da:26:cf:05:8c:d2:a2:df:aa:d5:0c:2d:79:1d:88:
25:cb:8d:c0:f7:cb:7a:5a:8a:61:d5:ab:21:8a:68:fd:a7:6b:
da:9e:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:03 2025 by rpki-client