Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: 7+QDkTKkbv61elTf5wYS5EJS8WNmKDzgBCj5+XaksDs=
Subject key identifier: BA:04:3E:2F:8C:2A:58:85:0B:E9:B3:EA:C8:1E:D4:F2:B6:CB:00:FE
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 0198D65FF14A22EA4FC94690132983AB9190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: EA
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: 6K5A9bU6jFPUmt686G30nsobREvkRnOCEb7l3H1azXU=)
2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f1:4a:22:ea:4f:c9:46:90:13:29:83:ab:91:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=ba043e2f8c2a58850be9b3eac81ed4f2b6cb00fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:45:5c:99:33:0b:6d:f5:d8:c0:42:ef:f2:
4b:1e:2f:19:c8:60:28:fa:dd:08:04:4a:25:17:3a:
83:3b:74:2f:56:ec:12:b0:41:45:6f:fa:9d:25:c6:
31:35:1a:71:25:9d:f7:b7:c8:fe:7f:f6:d0:12:ac:
65:69:ad:80:7a:16:d5:40:12:05:bd:c9:d4:03:44:
77:2e:99:af:8a:92:68:b9:88:1a:b0:c9:a9:82:8f:
b4:01:71:e6:73:1a:3a:b9:92:b5:4d:68:20:3a:5d:
37:ac:7f:a2:e4:06:51:01:0f:73:43:f8:3a:dd:d8:
76:56:78:25:b2:e5:25:30:ae:dd:8e:ed:07:8f:91:
c3:bf:00:cd:f4:f4:b0:e4:c1:f9:69:f9:e5:93:cb:
93:87:aa:13:9c:f4:78:e1:57:b2:5c:16:65:61:d6:
8d:44:23:27:96:de:65:1a:cc:52:4c:5a:55:23:3f:
1b:62:75:3b:bb:6e:50:81:fc:8e:a8:4c:b2:97:a4:
71:6f:f2:b4:18:6c:88:49:dd:10:5c:89:46:d2:4e:
6d:79:a3:8d:e7:23:ee:66:43:d4:1f:a3:57:1c:19:
64:f2:5c:d6:5a:08:48:0e:04:8d:19:39:46:cb:6b:
e3:9c:4c:8e:06:db:b0:13:2a:c3:67:3d:1b:59:03:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:04:3E:2F:8C:2A:58:85:0B:E9:B3:EA:C8:1E:D4:F2:B6:CB:00:FE
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:94:11:12:5b:41:12:dd:2e:6e:92:f7:b3:f9:7a:42:9a:5b:
76:38:b1:df:6f:61:98:de:ae:5f:24:10:13:b1:b5:ff:f1:e1:
c6:34:25:72:e3:0c:95:e5:1d:66:f7:a8:e5:81:8d:30:7c:65:
0f:85:01:3f:43:25:2b:c6:03:fb:85:f1:4f:81:6e:b3:08:1d:
ed:05:71:5e:3b:88:67:58:4b:c5:b0:1d:8a:e2:9c:c9:5d:ab:
fa:ab:af:ac:44:df:b0:6b:b0:55:9c:76:84:9e:f3:39:28:1b:
cc:3b:c5:52:44:2a:b5:fd:96:3a:8c:ce:df:cb:a7:9e:a8:a3:
f0:a1:b2:c6:20:91:97:b9:53:87:65:93:11:80:c4:50:42:86:
76:2c:e0:29:98:e8:b0:54:cf:ac:52:f1:81:dd:86:52:45:ca:
cf:89:a8:22:49:cb:dd:3b:a2:a4:1f:41:3e:75:9b:a0:60:12:
00:d6:85:46:52:15:9f:b0:8a:3c:99:86:aa:78:c2:78:74:75:
ef:a2:d1:18:fd:6b:05:7b:8b:ea:7f:5a:c9:04:eb:ee:3c:fe:
7d:4f:b6:50:42:b4:08:1d:a5:9d:10:74:70:22:f2:f5:38:dd:
90:be:32:36:75:41:16:07:86:62:a1:a5:09:44:d7:db:b5:cf:
a8:ce:3a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:37 2025 by rpki-client