Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: rGH2B6ihf0iqYC80HxiWj5RoCEsgSIKWnarJN2xUtgI=
Subject key identifier: 1F:D9:02:49:E9:E8:58:92:98:8A:82:8C:32:79:61:97:44:83:8D:71
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 0198D4E0202161BECCAA2BAD204BA6E31744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 1330
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: 6kFNpI1DWXExW/s1kAwl01PuihFfF/zoqO7gH78tiT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:20:21:61:be:cc:aa:2b:ad:20:4b:a6:e3:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=1fd90249e9e85892988a828c3279619744838d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:af:20:82:f6:c4:61:e0:fd:f7:30:bf:73:
e5:a5:b3:da:81:27:9a:67:00:52:2e:61:e4:0b:3f:
a2:04:5e:89:f1:13:79:b3:ba:8a:74:27:5f:d3:7a:
c0:56:d6:37:a3:1b:f6:b0:15:ba:84:c0:d1:b7:73:
d6:3a:0b:8b:42:95:11:83:86:ae:c9:94:dd:5b:84:
32:54:4f:fd:d9:04:2d:d3:bc:37:6b:d7:0a:94:4a:
94:17:10:dc:f0:04:5b:70:1a:a7:69:e3:91:99:c7:
7d:9a:44:fd:46:3c:29:01:7a:08:14:f7:f2:74:d7:
2c:f3:db:9a:bc:9c:1e:4c:dd:a4:4f:d7:39:d7:9d:
ae:53:8d:ce:ef:61:fe:7b:97:4f:10:68:7b:d1:45:
0f:48:52:66:22:af:51:13:ce:1a:6a:7d:5c:89:2c:
fa:1f:4d:19:b3:f2:e7:2b:aa:b1:5b:35:49:a4:80:
31:88:f9:e8:67:9c:cc:64:b0:37:bd:06:53:d3:d5:
02:55:c8:d9:7c:09:9a:94:49:53:c0:c6:64:ec:57:
ce:16:0c:16:45:a6:78:13:80:86:f8:d4:00:0b:0a:
39:d4:05:29:7f:9c:66:7a:ff:d2:f0:9c:30:f4:ff:
38:df:be:2c:5f:d5:f0:47:90:ce:f9:c7:0e:4a:e2:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D9:02:49:E9:E8:58:92:98:8A:82:8C:32:79:61:97:44:83:8D:71
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a8:b2:0f:be:bb:89:e2:d1:56:b5:c3:c2:72:dd:b5:98:f0:
10:16:b8:95:08:c3:f1:0a:cd:7f:aa:78:ff:a8:e4:ff:40:e2:
2a:94:6c:2b:5a:c7:8c:47:86:7f:04:47:64:5f:5c:16:fa:76:
e8:b2:52:0f:86:fb:38:9c:28:d5:3d:a2:b3:6d:f0:cf:39:66:
8e:62:5c:7a:94:38:07:ed:81:78:94:46:3a:1c:86:6c:15:3f:
fe:59:46:d2:03:55:bd:7a:10:c3:72:e7:51:d4:5d:6b:14:fc:
3f:93:21:3d:f4:53:e0:25:f7:97:3b:a9:7a:29:66:35:22:d9:
40:51:24:19:01:a1:fe:65:1b:95:9a:de:c0:aa:18:c4:ac:af:
9e:37:21:3e:58:63:ff:17:26:fc:63:f4:87:70:49:05:01:14:
3f:23:f3:44:fe:1a:21:bc:9f:95:ed:f0:a1:95:76:2f:d0:87:
2f:83:0d:51:02:63:41:97:1d:70:47:95:9b:ae:cc:ae:b4:ac:
5f:83:ee:af:c8:09:4b:4e:13:17:f8:2c:72:e2:c4:34:f0:6f:
02:e2:5e:c4:12:9e:10:74:da:a9:0f:6d:5f:84:7a:49:c4:d7:
47:0e:61:7f:83:a7:c1:59:1d:b4:9e:6a:af:e0:ab:da:3c:74:
5d:83:54:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:59 2025 by rpki-client