Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier: kh255IGQfrXPqB7xVu8pcfUFNXAMSmxoFOj/dFw2PBc=
Subject key identifier: 30:C9:61:42:4E:88:18:63:43:F0:4C:B1:E5:7B:F7:8F:00:16:B5:7F
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 0198D4E09D22FB3972E33E6DED0EDAD418FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number: 048E
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: W4IQGZO7MEbG62lXcUDdjKvm608442XUKahMBi0gIZ4=)
2: uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa (hash: jOMq+THXs6tHKVnh3usZCh/VkjmthWBocgL66TKhVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9d:22:fb:39:72:e3:3e:6d:ed:0e:da:d4:18:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=30c961424e88186343f04cb1e57bf78f0016b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:a4:f9:21:88:8a:e7:4b:a2:2b:fe:9d:c4:
31:94:f6:77:4b:ad:4a:de:ae:e8:da:f0:ea:48:05:
2f:82:c4:83:61:af:dc:f5:7a:3f:06:87:f2:65:ea:
e7:78:a9:41:3c:9e:bb:5f:cf:ba:f2:90:e2:6c:9a:
72:81:20:05:b7:6e:2f:99:a0:62:ef:11:76:8c:3f:
91:a5:b8:2c:6a:04:35:1f:51:80:ba:41:99:05:35:
70:0f:36:16:ab:ea:ef:19:70:07:52:97:ac:e2:76:
eb:a2:88:6e:a1:42:03:6a:7b:88:53:c6:fb:ba:d8:
a0:99:ee:bc:f5:37:c6:ce:54:79:3e:64:df:09:1a:
f8:fa:ab:e3:a7:72:e8:4c:94:db:f9:62:24:6c:c1:
89:52:5d:20:db:19:53:ad:98:45:75:94:4c:b1:0c:
5f:8f:8e:98:03:e4:19:6b:5c:38:a7:74:27:39:3f:
34:af:c0:d6:12:a0:6c:66:3e:24:b9:e0:b2:b9:97:
c6:b4:ae:aa:ec:b3:e4:1c:db:b7:f2:83:20:14:cc:
40:82:41:62:48:5e:ea:44:ce:fb:c2:05:ce:14:81:
12:b6:ab:27:9f:72:b2:b7:a1:98:b9:6e:3d:87:5e:
01:fe:90:c9:f1:7e:f8:7b:eb:59:55:41:f9:06:fc:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C9:61:42:4E:88:18:63:43:F0:4C:B1:E5:7B:F7:8F:00:16:B5:7F
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:87:30:24:85:2b:c6:48:fa:18:12:21:17:68:8c:a8:2e:
3d:9a:0c:d9:40:2b:14:58:60:5f:4e:b7:30:b6:11:a9:0b:b5:
2a:4d:ed:53:8e:2f:c5:77:de:de:63:68:a2:46:ea:5e:0a:a0:
06:7d:6f:c3:ba:2a:1c:e9:90:8b:ea:3a:50:f5:de:eb:10:3e:
93:8b:97:14:24:c4:8b:74:45:9d:9b:51:76:b0:97:7e:4b:ab:
91:a7:fa:33:12:ab:b6:fb:b5:cc:92:c7:b4:f5:bc:4e:2e:11:
ea:d5:0a:ff:dd:85:0a:d7:ea:73:b7:72:ae:db:57:7e:cd:1d:
d1:a6:33:44:38:0d:30:62:b7:b1:d3:ec:d8:37:2b:26:f5:06:
4a:db:af:de:72:95:fb:44:94:dc:bc:ef:44:66:6d:84:fb:3d:
a9:38:e5:c9:41:53:79:3a:22:83:ae:49:b3:14:5f:9b:f9:9b:
8c:e2:41:11:4c:90:d5:4e:b6:9e:32:ff:88:2e:03:07:11:5d:
8a:6c:e4:eb:66:4e:5d:ac:05:1e:1d:9b:1c:08:15:68:30:e7:
8a:0c:8d:df:87:ab:8c:de:38:35:78:2e:f4:bd:83:6d:0d:b7:
e7:7a:a7:cf:4b:91:97:c5:bd:a8:71:c3:c4:b3:15:1c:05:79:
11:c8:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:43 2025 by rpki-client