Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
File: Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft (raw, json)
Hash identifier: Dq3G8np5UDHeH+FErGNLZ798T9ggygcDCsc4M6+/B8o=
Subject key identifier: F2:5C:7B:69:65:43:13:A8:3D:8E:03:E1:30:E8:6B:A9:22:BB:DE:8F
Authority key identifier: 42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50
Certificate issuer: /CN=427df95ee10a2ad4eaf082dfac159838b37d3450
Certificate serial: 0198D4730F8F6E4186EAFD772DC082DBF207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
Manifest number: 06A0
Signing time: Sat 23 Aug 2025 01:02:47 +0000
Manifest this update: Sat 23 Aug 2025 01:02:47 +0000
Manifest next update: Sun 24 Aug 2025 01:02:47 +0000
Files and hashes: 1: BR-wwst0Mwoj4cW4aMMLkST0T08.roa (hash: KhuoTa1EwW+NDwJopflLn+SOxpsU8qTU0jm6Bsplu/Y=)
2: Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl (hash: yuE6782vw1V5z42XAC9PBUIClXX6fEiITNupsaRbKgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:0f:8f:6e:41:86:ea:fd:77:2d:c0:82:db:f2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427df95ee10a2ad4eaf082dfac159838b37d3450
Validity
Not Before: Aug 23 01:02:47 2025 GMT
Not After : Aug 24 01:02:47 2025 GMT
Subject: CN=f25c7b69654313a83d8e03e130e86ba922bbde8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:64:29:a7:e1:a7:18:68:0d:87:de:7f:17:4f:
37:61:10:31:df:f6:7a:b4:7b:a8:b9:7f:79:eb:91:
14:fd:23:d5:60:51:8b:61:30:8a:69:d5:02:1f:3d:
64:13:f4:f7:25:ed:08:19:91:dc:3d:c7:6f:9c:4f:
29:3e:0b:61:98:e2:8b:7b:9f:7b:29:cf:e4:50:d7:
ed:6e:fb:1b:bc:2b:af:3d:3a:53:88:11:6f:8e:e4:
67:a1:f1:56:09:5c:2d:7e:75:67:c0:b5:b4:12:b7:
aa:f9:4b:5d:96:1d:df:c6:17:55:a7:f2:18:bd:73:
7b:62:25:71:49:22:2d:31:c9:89:32:d9:a7:f8:81:
b8:53:39:9e:bb:6a:b0:b8:43:8d:b0:bd:42:18:d2:
e4:07:1c:fc:02:a2:45:d7:1a:06:bf:d2:84:13:f6:
d4:ba:3e:6f:c3:9c:94:5e:4a:d2:f4:b8:58:63:18:
bc:fc:ef:43:9d:11:90:84:9d:fb:b3:28:1f:30:2e:
7f:d7:29:c7:35:cf:f5:e9:5d:90:68:11:60:57:de:
5f:44:e8:56:b6:a6:1a:ae:60:4a:e8:65:0e:3a:ea:
f2:48:bf:90:88:ec:73:b7:ba:78:11:61:3e:e1:0a:
ef:e9:b9:98:da:cb:ba:7f:ff:0a:a5:66:6e:60:5c:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:7B:69:65:43:13:A8:3D:8E:03:E1:30:E8:6B:A9:22:BB:DE:8F
X509v3 Authority Key Identifier:
keyid:42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:14:f7:dc:9d:c2:65:f1:a4:18:c3:c7:50:90:53:b8:74:73:
d5:bd:a3:f5:c9:4b:86:90:b6:ac:6a:78:b5:6d:36:22:e8:8d:
b0:ee:f7:0a:f6:54:2c:21:5a:09:dd:ce:4d:6c:49:b9:a5:69:
37:15:09:79:d7:f1:a2:33:85:65:7e:c7:f2:95:b9:45:e8:b2:
3e:7a:0d:4f:58:06:2c:2d:91:9d:d7:a5:05:72:ce:6e:44:48:
34:a7:4b:80:ea:0b:84:a2:f6:e1:8d:a7:8f:33:09:4f:7f:70:
98:b1:51:f7:9c:a6:85:7e:6a:69:ea:97:48:0b:08:2d:b5:f9:
b0:7d:7c:ff:0a:c1:ab:f5:15:31:bf:30:c2:aa:67:34:13:18:
71:89:39:d7:b7:80:5f:39:16:07:15:f2:6c:74:6b:62:c6:15:
06:ef:aa:d8:33:30:00:73:64:aa:2b:69:2c:ad:a8:46:be:c0:
ca:ee:93:b6:5c:57:99:cd:27:97:de:c5:f9:96:44:4a:7c:f8:
5e:0c:79:ee:43:7b:ea:ee:bc:b6:dc:25:af:6e:ea:4f:cd:a6:
cd:8a:b1:0a:a9:21:09:a0:6c:50:49:71:60:fd:18:3b:af:7f:
00:1c:17:36:34:01:23:7d:42:da:60:85:a8:bf:dc:a8:43:dd:
e1:96:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:35 2025 by rpki-client