Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: fOaSKV1Tb7SSV/oe6mlSzfv8y4alid51sQ1m1npCF40=
Subject key identifier: FA:1C:DF:CC:F9:88:2D:E6:AD:EF:5C:C2:CB:38:37:EE:0B:45:7B:6E
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 0198D4A8210599F6136B35E7649DB9FDC3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 1362
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: D7IbZMa3P-hRRIAm78DqK4wNZ34.roa (hash: 3Rvd3MmyWPzVOpIFhMlT5LNPsKGSgahML9FUxKiCMwI=)
2: O7r63uTdFaICg1i90uf5cyEl-h4.roa (hash: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=)
3: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: cu4FjDIrLHWJFx7du6gY9i/WCRlf4rW5zTxYXj3C3no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:21:05:99:f6:13:6b:35:e7:64:9d:b9:fd:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=fa1cdfccf9882de6adef5cc2cb3837ee0b457b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:1f:5a:17:8a:91:76:55:8d:a1:5c:6b:05:
0c:86:d5:93:9d:63:b9:d7:27:93:41:ad:72:23:84:
cb:bf:e4:d7:c8:b9:93:23:8c:f7:7f:fa:02:10:32:
fe:19:b7:1b:b4:b1:b9:20:f4:a9:27:48:e9:e2:b2:
57:33:67:06:b2:54:b1:c3:95:39:93:dc:1d:e6:ff:
f4:46:31:2a:38:50:d9:15:de:a1:d3:e6:c6:79:2d:
3a:b3:6d:ae:f4:42:9f:b8:d9:1f:ac:fe:b6:3c:15:
67:63:1f:c3:58:db:ff:06:a7:fe:ac:ff:43:df:57:
0e:64:e4:34:54:ca:bc:bb:48:69:98:e4:2c:d2:5c:
66:1a:7f:3a:ec:86:08:c3:4f:67:a0:00:45:e5:8e:
f5:78:b8:d0:0f:20:58:a0:a1:27:26:b9:21:4b:33:
7c:76:a3:3d:dc:1f:74:6c:20:c0:23:cf:66:ac:e2:
7b:db:9e:09:87:79:22:fa:85:80:2b:04:af:95:3e:
e6:53:f4:92:a9:5a:12:32:f9:bb:38:8f:a7:7e:0f:
f9:27:1e:eb:4e:5d:4e:2a:03:68:10:71:99:8f:94:
c1:e3:86:45:b8:b6:3b:dc:88:b2:23:b7:39:11:9d:
cb:79:df:34:cf:ca:ee:49:ad:4d:4a:18:48:4f:a3:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:DF:CC:F9:88:2D:E6:AD:EF:5C:C2:CB:38:37:EE:0B:45:7B:6E
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:67:75:fd:9e:fb:58:19:0e:7f:96:db:3d:e3:dd:76:9a:23:
ef:e1:78:6c:64:38:b4:3f:e0:c9:ca:d5:2e:c6:3f:8d:60:4a:
29:7c:3d:d6:c9:0b:46:bc:0f:08:20:ac:c9:d8:34:be:db:8f:
8b:54:d1:55:85:47:60:b1:9e:b9:31:c1:49:52:c0:e2:9e:2b:
33:76:89:82:96:e9:c3:9a:d8:1e:94:18:b3:0d:0e:ba:81:2a:
d2:2f:53:31:de:a5:74:ec:ee:da:f6:ac:ef:a0:71:15:75:8a:
1b:80:75:c5:3d:25:16:ef:a6:7c:29:9b:ec:d6:48:da:da:7b:
82:13:86:3a:a7:f5:2e:f6:d1:3e:ba:17:3d:62:f6:e7:0b:63:
85:67:a3:3c:61:4f:36:2f:5a:e3:d6:21:d7:66:7e:89:2b:7f:
4e:20:eb:0d:1b:56:80:1c:52:27:53:53:88:26:d9:40:c7:db:
bc:93:c1:f3:38:3f:e9:1d:58:24:3a:8a:d0:c2:26:f2:90:a0:
1d:18:f4:c7:fb:fc:f6:1d:67:4a:85:6c:55:5e:bc:7a:a0:fe:
93:cf:26:65:61:2e:db:68:ac:2a:f0:df:2e:48:d8:8d:09:85:
b4:1b:df:8c:8e:36:64:f9:40:c5:df:04:b3:ac:ed:b8:5c:14:
81:37:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:08 2025 by rpki-client