Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: qSMetQ6PEOx/Oc62hKBcpoNMwsCtxS8PyRMRZy2Cbdc=
Subject key identifier: 9A:15:3D:54:22:FB:55:74:4D:89:D6:D8:64:2F:6F:C8:E0:41:AB:2E
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 0198D4A7BE6030F39BC7E053421F5BB336A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 0660
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: p3+MtwioG0tM1oMI1igZIjLffGt2ro1b8KFHly1HJeE=)
2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:be:60:30:f3:9b:c7:e0:53:42:1f:5b:b3:36:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=9a153d5422fb55744d89d6d8642f6fc8e041ab2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:a9:c2:f5:9b:0a:dc:c2:1f:ac:1d:f6:e3:
c1:8d:00:52:90:39:d3:9f:44:a2:aa:41:61:6c:ec:
d5:c4:0f:25:de:19:3a:22:13:93:b2:42:df:bd:89:
ec:b7:53:d1:f8:f5:41:fd:b4:07:d2:4e:35:43:2a:
55:be:22:0f:c8:aa:ec:38:46:89:8a:3d:29:74:3d:
ad:9c:fa:ef:b0:18:a8:c9:c2:6c:10:fa:f7:26:db:
fb:e3:5b:15:a6:25:be:9a:58:0b:95:df:bb:e9:56:
34:c5:20:61:1c:33:ec:e6:ba:e4:a0:b9:ee:c1:f2:
08:df:6e:43:28:cd:e2:19:22:68:8e:29:7c:4c:63:
ce:fd:4e:0d:d0:1d:3a:92:7b:71:b4:60:65:57:dd:
a6:e4:7e:a5:c9:49:f9:2c:d3:56:38:20:91:7f:9b:
05:a9:2e:f7:26:d2:82:45:f0:e6:1a:86:6e:5b:6c:
57:3d:ac:7a:47:d2:5d:63:2c:69:de:5c:d5:a1:2c:
cd:5e:d6:b8:9a:2d:b2:7a:88:7d:25:08:7f:41:e5:
77:31:eb:0e:7c:d3:df:e6:3f:82:49:e8:8b:9f:08:
43:5b:68:a5:92:ad:fe:72:68:37:f1:a1:6a:10:46:
12:92:c1:33:02:18:ce:18:c6:9f:9d:fb:e8:33:d8:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:15:3D:54:22:FB:55:74:4D:89:D6:D8:64:2F:6F:C8:E0:41:AB:2E
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0b:d9:af:de:d3:dd:85:45:a9:44:91:28:2d:a0:4f:5c:2b:
cc:ab:bb:9f:db:bc:8b:0c:7e:2f:93:5c:20:c2:8b:2b:04:3f:
30:41:54:3c:eb:16:d6:a4:04:ca:76:f5:be:b7:da:f3:76:86:
00:cc:70:f6:e9:68:9c:3e:d7:ef:f4:76:6a:d0:03:2d:1c:af:
54:96:a1:ef:a9:50:df:bc:f5:3d:89:e8:6b:78:82:ec:23:10:
f8:89:38:eb:b6:60:e8:b8:3c:4b:e7:9a:d7:f8:36:6e:aa:35:
58:fa:3a:9b:c4:ba:52:05:fb:69:e0:e6:9e:cd:1e:0b:3e:6a:
e3:8e:51:c0:10:19:aa:f4:7d:37:e5:ef:bc:91:da:5c:84:ab:
bb:e4:24:b6:d9:7a:e6:c5:64:03:d1:69:93:87:3c:d2:ed:36:
05:21:82:d4:a6:3c:4e:e1:4c:5d:58:d6:ca:21:00:b3:87:f2:
a2:b3:c5:16:60:f5:eb:55:8a:60:89:f4:9e:ee:c9:16:f3:74:
17:1d:2f:7a:f4:eb:8e:21:af:b2:46:36:7c:de:da:5b:0d:a2:
a7:13:fe:c4:b2:a9:60:a6:4d:dc:02:a8:7b:7f:a2:bc:32:e0:
b2:71:07:03:58:95:6c:2c:ba:98:81:4a:fc:4c:7f:47:fc:b0:
7e:0a:89:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:45 2025 by rpki-client