Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: mZ0L9c1OpYD0VNdKTb77+dxo6zy7XUme4znPu8ihypI=
Subject key identifier: A7:56:65:93:B5:EF:82:A6:A9:80:90:6E:6E:C1:BA:E9:D1:10:02:55
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 0198D473894F9487268DCD4F738A1BFBC5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: C5vhE7j1u6AmDBMylAkZISalCLRoHsPNuO8f5u5Yibs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:89:4f:94:87:26:8d:cd:4f:73:8a:1b:fb:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=a7566593b5ef82a6a980906e6ec1bae9d1100255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:9d:4c:ef:6f:36:29:00:0f:1d:32:04:71:
f7:c4:32:1a:d1:6f:ee:43:8e:cc:b3:e3:86:02:1d:
f0:0b:89:0f:c1:64:ea:87:6b:f3:31:c3:b9:c7:a6:
06:5c:47:4a:e2:ac:30:af:6f:3c:9c:11:2d:32:41:
f2:7b:90:10:43:59:83:ad:c6:36:eb:c4:d0:a4:5f:
23:1b:c9:07:1c:fb:a7:bb:c3:9e:23:26:48:71:2c:
bd:4c:88:3c:e4:28:c2:59:3c:21:15:49:a8:35:88:
91:97:4a:93:00:2e:7e:96:55:1c:b2:ee:f4:91:fa:
7e:ff:e9:ec:94:79:d8:91:4b:d2:ca:a4:a8:81:07:
43:36:8f:3e:6e:35:87:d2:b5:cb:6c:fc:56:ff:69:
88:95:93:93:fb:c2:2e:56:c9:84:3c:8e:20:82:1d:
f9:e8:31:7f:34:47:8b:a5:80:26:e8:d5:87:e6:06:
ff:56:0b:7e:23:73:af:3a:93:d9:3c:e2:1c:42:0a:
fb:c3:9f:cd:b5:8d:48:b5:19:a2:4f:be:67:10:99:
a7:16:16:44:58:c4:aa:6e:f1:1b:1e:33:78:6d:58:
12:97:76:d1:74:f6:6e:dc:f5:dc:57:d0:4f:6a:3c:
f3:33:26:22:fc:10:31:54:f6:1a:39:66:7b:4a:2e:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:65:93:B5:EF:82:A6:A9:80:90:6E:6E:C1:BA:E9:D1:10:02:55
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:62:d4:ac:8b:71:2a:5b:aa:34:e4:95:5d:9e:ea:ab:97:cf:
d3:9d:b8:04:e1:c7:e2:b0:e3:45:dc:46:a5:17:30:8d:ce:38:
16:b8:f0:82:26:79:f7:58:89:34:f9:c4:5e:81:76:58:dd:bd:
c9:2a:03:86:71:37:94:6f:7b:e9:bb:d7:64:a3:11:46:85:f2:
42:53:f4:63:ed:93:2f:72:0e:0e:cc:97:b7:5a:0e:fe:04:0e:
d6:24:8e:b5:53:65:92:4e:b9:53:b6:f0:ad:87:3f:8f:af:40:
2d:da:ee:2e:b1:07:fe:1a:0e:ed:4f:03:5d:cb:96:d5:15:d7:
c4:6a:24:0d:d5:9e:ec:dd:33:76:66:7c:53:59:fc:d5:f4:f5:
86:08:0c:eb:41:82:47:8c:a1:0a:13:cc:81:66:0d:58:38:cb:
8e:93:c6:a9:29:c4:a1:f0:96:6b:cc:08:fe:9c:ab:0b:e4:81:
6c:76:c9:6a:2a:f5:fe:7c:20:45:24:f4:25:cd:ec:e7:8d:6c:
81:ba:fe:2d:ff:32:9e:45:1b:15:85:cc:2b:fa:8b:40:fc:15:
3f:32:fa:43:7f:a5:4c:f9:ae:e3:16:83:0c:80:6c:c2:43:c2:
9b:11:57:22:82:05:50:39:13:b9:b5:ed:4b:0a:e6:0a:59:84:
4a:9d:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:55 2025 by rpki-client