Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: FBJ9SAF+tcvPk8HvtxeJ9D6DT8XWl3/4n5jXAlGgD3E=
Subject key identifier: B1:62:41:E3:37:26:7B:83:1A:87:7B:E2:C7:0D:5B:28:E6:C0:44:BB
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 0198D5BBEB5C3FFD7311E5B05CCABE7BB12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 054F
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: tJnXxF5D4E35a/cZ+7gXGoe/7lhZzPhD2NKE0eOKZUk=)
3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:eb:5c:3f:fd:73:11:e5:b0:5c:ca:be:7b:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=b16241e337267b831a877be2c70d5b28e6c044bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:a3:8e:cc:c9:b5:3b:91:0b:d7:2d:7a:6b:
fa:c2:a7:90:68:83:6d:bd:b6:34:0f:85:d2:ee:e8:
e9:f7:5d:b8:3d:91:fd:99:0e:4c:37:03:3a:f7:d3:
97:49:40:c4:22:29:f1:6e:1b:ee:c0:06:19:1e:6e:
d9:ae:59:74:93:db:e1:1f:47:45:90:22:bf:c4:e0:
56:8c:9f:69:78:44:d6:d8:d5:5e:33:65:94:72:1e:
c4:c0:33:26:f8:63:85:6e:19:bb:61:7b:57:d7:0a:
6c:a8:b7:53:42:ee:f6:1f:9e:89:b9:9d:1f:26:04:
8d:fd:62:18:d7:71:4d:24:e1:f3:96:39:81:9c:a4:
ff:95:9b:ea:b0:79:c4:2d:d7:13:4a:ec:f3:1f:54:
fb:b5:fc:3b:a7:3a:8d:f5:f5:da:93:ac:06:ec:d3:
f4:7f:92:23:d2:8a:4d:19:66:09:b3:d0:70:28:e8:
a5:c4:ad:88:14:2c:84:21:ad:5e:d1:21:7c:e9:6c:
6c:7c:85:ba:e3:dc:04:39:ff:9b:83:af:0d:63:e7:
5f:be:fd:e2:e0:ab:88:95:e8:8d:73:76:cc:fd:c5:
0e:bb:64:0e:11:b5:38:89:ab:e6:c3:34:8b:1b:1d:
a1:c3:fb:38:f0:ed:78:eb:55:00:c5:e4:0f:47:74:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:41:E3:37:26:7B:83:1A:87:7B:E2:C7:0D:5B:28:E6:C0:44:BB
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:85:23:cb:45:f8:83:4d:96:c2:ae:6a:7b:54:36:e1:6b:89:
51:4c:bc:5a:26:11:c0:74:65:e1:58:59:c5:70:6d:8b:34:5e:
b9:a4:95:71:a4:61:d2:b6:51:17:aa:1a:84:08:43:f7:94:58:
0e:4c:74:1b:7d:66:0d:47:bb:aa:86:ab:d6:24:f3:23:0f:42:
40:46:50:ce:bf:46:54:8f:73:f3:82:a7:06:95:ac:44:ab:a9:
c8:7e:48:1c:91:cf:be:12:36:37:93:2f:ad:a5:e8:7f:9d:a2:
b1:df:23:5b:5c:7b:0f:15:3c:6f:d3:04:ed:e7:c7:57:ff:d5:
c7:0f:27:40:3b:f2:4d:17:1f:7e:35:ba:6b:d4:b1:71:b5:18:
b1:07:fb:59:b2:ed:fc:20:dc:e6:95:da:03:30:e7:a6:80:57:
c8:36:09:f7:33:59:0f:1d:77:e1:f3:3c:36:f0:e6:7a:c2:24:
53:df:7a:03:b5:0d:d8:1b:6f:ea:1f:da:9d:c5:47:51:66:90:
09:56:cd:7f:3b:9a:6c:74:da:6d:52:99:7b:33:46:9c:46:98:
17:ca:3b:81:fb:c9:23:c2:6c:2d:a1:71:61:8c:31:3a:72:b1:
69:82:07:0e:8d:35:67:ab:24:fa:dd:98:af:96:2c:e2:09:d0:
0f:f4:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:57 2025 by rpki-client