Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: zSNFXrQwPyN0W0gH0pGylhssOcSHR3J3Cl8VjDh8pZU=
Subject key identifier: 5B:D0:5C:7A:B7:DC:21:E5:13:D6:D2:E9:0F:8B:ED:31:60:02:25:FD
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 0198D4E082E05EF3F1E2B4EB709AF264D391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 02AE
Signing time: Sat 23 Aug 2025 03:02:20 +0000
Manifest this update: Sat 23 Aug 2025 03:02:20 +0000
Manifest next update: Sun 24 Aug 2025 03:02:20 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: N/tRsbwWY+TaxofcNr5BmwSlOjG8a7AifuM7h0Sjl94=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:82:e0:5e:f3:f1:e2:b4:eb:70:9a:f2:64:d3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Aug 23 03:02:20 2025 GMT
Not After : Aug 24 03:02:20 2025 GMT
Subject: CN=5bd05c7ab7dc21e513d6d2e90f8bed31600225fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:35:87:ae:9d:9a:55:07:94:58:0e:ba:52:
a0:99:b5:18:c9:b3:a6:fc:15:02:7f:1c:ed:68:8d:
50:af:96:05:66:26:bb:d9:f7:0d:99:57:a9:d0:82:
6f:e5:46:e4:5f:a2:a5:01:c8:4d:fa:60:fb:ba:ae:
97:6e:67:a5:20:8f:95:80:ae:2c:9c:44:ba:d7:26:
e8:94:3b:1d:84:4a:ed:b8:27:fa:01:f9:ab:b6:7d:
5e:25:39:b1:e8:cb:19:c1:d9:90:f3:1c:fd:3b:b9:
00:6c:fd:63:ed:47:b7:0f:2a:ed:9a:b8:72:11:2f:
92:7a:01:38:30:a7:6b:e1:7e:f7:9c:eb:7f:e6:5e:
01:ad:37:69:87:c2:7a:67:0c:a1:f1:93:8a:02:f6:
ff:96:62:0c:ac:b9:df:6f:48:f8:2b:18:d8:b8:9b:
5a:4a:f3:c7:7b:7f:d6:d2:2d:ed:f1:df:22:8f:7b:
74:d8:61:c4:00:87:a4:04:3c:bb:1d:a9:74:14:2f:
03:46:24:96:3d:9d:99:aa:15:5f:ba:b9:20:fd:fe:
ee:f0:50:19:75:11:2a:80:4a:8d:80:f9:9d:c8:d3:
d8:dc:8c:6d:2e:ee:42:4b:f8:9a:74:16:a8:fc:2d:
a2:86:b6:d3:d5:62:47:39:70:85:82:c4:18:5e:63:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:5C:7A:B7:DC:21:E5:13:D6:D2:E9:0F:8B:ED:31:60:02:25:FD
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:24:82:a1:74:40:19:d3:7d:f0:a9:4d:8c:d2:11:5f:2e:b9:
e7:11:d5:bf:b6:58:9c:66:65:42:06:61:51:84:93:5e:5a:50:
98:71:1c:17:01:53:e0:d4:af:d6:04:ce:6f:6e:13:ea:9f:50:
f2:b1:9d:69:f4:f0:e8:05:48:bb:6f:cc:0e:67:52:b8:da:37:
c8:f6:61:02:7c:2d:46:22:d2:62:c8:26:7d:d7:c5:cb:2c:18:
d4:89:df:9d:0e:49:62:d7:bb:e9:de:df:d4:4b:ce:70:d8:e0:
74:e0:42:d3:c8:45:02:ee:0c:be:f4:7a:d8:89:10:c1:85:87:
07:65:2a:04:94:27:fd:0f:17:5d:f4:96:28:9c:6e:60:bc:f1:
08:6c:bd:f7:0b:2b:f9:c2:21:30:8e:94:e7:0b:e5:65:4d:49:
20:fe:3a:a7:0c:a1:03:d7:a6:0b:a7:d5:c1:bc:10:1b:81:b9:
ac:db:7e:4f:ab:34:a2:e9:a6:a7:ad:e5:86:92:3c:d5:c5:8d:
e4:02:0f:1d:0a:bc:a8:7a:ca:a6:4f:a4:4e:44:c0:f9:ec:f1:
91:04:7c:17:04:70:fd:7f:79:e6:d9:2f:ff:80:7b:72:e4:7e:
fe:dd:18:e3:f9:a7:39:9e:02:bf:7e:1d:6f:60:44:84:10:66:
67:be:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:37 2025 by rpki-client