Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: yNSm1d+DTGmosVsWiKnyxZYajvzDo7dyLL9zXp5EY4A=
Subject key identifier: E4:46:D4:E5:04:18:10:8C:8B:3A:36:0F:21:18:1C:71:E1:62:05:8C
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 0198D7057C3793AD040632D95BACA83C7F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 13:01:57 +0000
Manifest this update: Sat 23 Aug 2025 13:01:57 +0000
Manifest next update: Sun 24 Aug 2025 13:01:57 +0000
Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: NrXVuton6THMN8D98sZh3uNF8TPGmjxgBd4GRoDTc18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:7c:37:93:ad:04:06:32:d9:5b:ac:a8:3c:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Aug 23 13:01:57 2025 GMT
Not After : Aug 24 13:01:57 2025 GMT
Subject: CN=e446d4e50418108c8b3a360f21181c71e162058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:12:6d:26:ce:fe:4b:a2:b7:09:48:e0:c1:
ee:1d:af:11:98:de:dd:7c:98:e6:5c:b1:96:9a:f2:
a2:fa:3f:11:f3:9d:17:db:13:6c:1e:1a:a6:2c:ec:
86:64:25:91:e0:ae:32:81:f1:e9:1b:b8:b7:f4:cc:
fe:86:97:47:9b:f6:26:b3:c4:4c:d1:e9:08:ca:f1:
3a:f6:04:08:84:9a:73:4d:36:39:09:21:dc:dd:0a:
5d:94:87:dc:0f:b2:88:67:05:8f:df:51:f2:b9:7e:
c7:c9:cd:cb:d2:2a:d5:74:2c:cc:7f:59:4a:f3:17:
cd:f0:7f:43:2f:b3:a0:26:71:cf:28:10:f3:15:12:
44:43:73:6a:bc:46:07:5a:2c:c8:ca:e9:e9:b7:96:
a0:37:5d:05:fc:47:7c:28:e8:ed:61:c2:99:dd:bc:
5d:d2:66:f2:5c:bc:4f:58:f3:48:54:ce:81:b1:f5:
28:de:51:c7:50:c2:4c:3e:70:ad:c9:b5:2f:d7:cd:
17:fc:1f:5d:ae:e1:99:2e:f9:16:7b:76:e0:4a:eb:
e7:8b:27:25:f4:af:7e:15:5e:bc:ab:12:42:bf:50:
7b:09:86:16:6a:8a:5a:b0:55:e8:78:a3:00:5c:c2:
52:7c:fb:4b:40:76:62:40:7d:48:b1:c8:b4:24:62:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:D4:E5:04:18:10:8C:8B:3A:36:0F:21:18:1C:71:E1:62:05:8C
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:02:bb:ae:a0:92:c9:7e:ac:81:b2:e2:4d:e7:4b:34:4f:
d8:11:47:4e:67:a7:82:af:97:6c:cc:3f:75:ee:3b:f8:a6:62:
71:2a:75:b5:ff:75:81:17:81:80:a3:5e:d1:77:35:90:35:92:
4d:f2:fe:76:fe:76:fd:a5:00:6f:30:57:a5:a6:37:74:42:12:
28:c8:a3:29:8c:7f:1c:c0:a8:5a:a3:d4:4d:03:04:1c:54:c3:
52:2d:40:00:e1:a3:02:02:64:4c:f4:4c:4f:8b:0a:7c:f7:42:
dd:31:c9:cd:a6:37:0d:48:be:11:09:f9:40:7b:d1:9b:55:e2:
78:5c:01:1a:bc:bf:27:1a:ef:67:b3:df:99:2f:56:41:8e:b0:
0e:81:78:52:01:83:c7:23:b3:09:22:a4:d0:c5:32:73:9a:0c:
50:3c:7b:ac:35:76:eb:36:2b:cc:b6:09:16:cf:66:22:d3:eb:
a5:c2:cb:00:18:de:f8:6e:9c:a7:86:5e:ff:13:32:e6:dd:3c:
b8:4e:a9:0a:65:a1:c9:98:13:e2:b4:fe:45:19:69:d7:90:ce:
d8:91:66:46:d1:36:ae:34:91:1c:82:26:ab:d6:ce:18:dc:69:
cb:af:69:37:20:6a:6e:2e:0b:c1:a8:31:53:41:e6:93:d3:24:
9d:e3:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:26 2025 by rpki-client