Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: rOpKO3PwLOmH8uCI37TeQaSwvG2waHRdS6HPtN9a1mg=
Subject key identifier: A7:7D:DD:84:9D:A3:A7:07:4F:3B:E0:2E:B3:E5:C2:34:F4:DD:CD:37
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 0198D54DE78EC31E2BE9F37C34BFBB534ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: gqmnVH4gxQWGZRaHK5Df4s18puiPTGPr9p8iP9z2zGI=)
2: ymSnyZ91fxVC39LRAlSHciRZ46Y.roa (hash: 9upse4LtnCnU7pMyWCgkPTtYXe3IQqerCyozn8qome0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e7:8e:c3:1e:2b:e9:f3:7c:34:bf:bb:53:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=a77ddd849da3a7074f3be02eb3e5c234f4ddcd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:ae:4b:ff:1f:9b:81:82:5b:f8:18:cd:72:
18:3a:49:39:c3:b7:79:78:1a:7b:b5:82:f3:64:bd:
e8:56:1a:d6:f7:dd:5e:b2:7e:0e:33:df:04:12:d0:
4c:02:25:74:ae:17:4e:22:cf:07:7e:8e:8f:69:03:
ab:79:4e:bd:6c:36:58:52:d4:1c:bb:d3:af:24:b4:
6e:e1:0d:39:9c:aa:d1:29:ea:c4:11:68:49:a5:06:
55:4a:3c:93:1e:d1:0b:a7:f9:26:49:80:4e:5a:36:
8e:f9:9a:04:ae:ee:ea:2c:ba:1d:67:94:03:92:3c:
21:20:a8:02:e6:79:ea:55:9e:a6:3d:5b:a3:b9:9c:
b3:b7:34:12:7a:36:04:7e:b0:03:ab:15:c9:3d:06:
1c:eb:68:46:85:12:6e:ca:ab:26:ac:6d:fd:c6:77:
40:b7:c7:65:83:38:f2:ef:6d:94:c3:dc:8d:eb:59:
95:f9:09:61:92:ad:77:16:f0:55:75:9f:94:41:07:
e7:b4:bb:94:5d:15:61:f9:f4:e4:51:23:e6:8e:64:
ab:3c:37:84:24:47:55:77:c8:c8:50:2a:aa:69:77:
c8:0a:31:60:f9:5f:ff:fb:5e:ea:36:0e:a3:d6:3d:
d6:23:22:da:34:92:16:a3:18:72:36:5f:a8:22:40:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:DD:84:9D:A3:A7:07:4F:3B:E0:2E:B3:E5:C2:34:F4:DD:CD:37
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b1:4c:88:d9:23:a2:68:e2:d5:6d:6c:a0:ef:ee:10:86:86:
fb:a4:d5:4c:87:da:f1:b3:f2:83:49:65:49:b0:6c:dc:63:e5:
d7:b5:67:ee:22:56:f7:d2:e5:4f:2a:21:a2:23:83:83:ca:bc:
ef:69:dc:08:b7:87:fa:73:01:7c:35:a0:a1:7a:b6:39:7f:f2:
9c:1b:91:8d:1c:92:3e:e3:b0:6c:1c:83:bc:2e:7a:8e:13:7e:
55:6b:2f:39:88:5c:67:e6:8a:2b:0e:71:81:b7:28:18:25:4e:
2d:03:86:32:fb:36:78:48:96:a8:0e:8e:28:2e:a1:11:c7:d4:
13:2e:b9:a7:61:c2:eb:0e:6f:31:c3:d4:4b:b9:d9:1b:0f:19:
1e:4f:49:40:81:d0:1f:c8:a3:ba:d6:d3:9b:b5:d6:f0:c4:c8:
72:db:b5:08:ed:97:9c:3f:3d:dc:e8:30:36:9c:64:72:60:78:
17:5d:13:fe:e6:96:b9:cd:6e:91:f5:aa:78:17:d0:6f:c1:70:
e7:0d:3d:9c:fe:45:25:d8:99:ab:7e:16:a0:06:38:f5:a4:e7:
ef:ce:b3:46:7b:65:c5:61:9f:79:f8:2a:c4:6b:8d:37:62:fb:
58:05:57:9b:5d:2d:a2:b9:81:1a:6e:98:c4:5e:e1:92:a5:bb:
5f:0f:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:42 2025 by rpki-client