Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: 7+9jcQw0CGNp+vJ87I8KYvMTyb0sPy/rgRUaYptaSmI=
Subject key identifier: 4D:35:12:4A:A2:CF:9A:A5:A1:64:FD:6F:4A:B9:BA:12:27:C1:0F:BB
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 0198D5F12FE38182537D8B92DE91A0258FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0A7A
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: vIiOrW/kEYWNme0KsWRELe5zuq+1CqpUxRbHNYh0DX0=)
2: VYdNzCUiezNHp2ipnAESpOT2GMI.roa (hash: eS/GCbx9AxDlVVMe7mfu+B9lQ77SLCep89Ufdacjmo0=)
3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2f:e3:81:82:53:7d:8b:92:de:91:a0:25:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=4d35124aa2cf9aa5a164fd6f4ab9ba1227c10fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:8d:e9:34:07:8e:31:37:68:ee:d0:9d:77:
3a:52:fd:2a:fa:ec:27:97:8f:f2:ec:3e:bf:e3:bd:
d4:3d:08:47:41:d1:aa:41:6c:be:96:8a:96:d9:e1:
78:00:8d:03:00:4f:19:7d:67:e8:2c:a8:2b:ea:d0:
6a:88:57:f5:80:f8:de:e6:e3:ed:7d:d2:ad:e0:4e:
4e:7e:07:99:0d:86:62:9b:f3:f3:d4:be:7e:a7:e0:
9d:fe:30:a4:4b:d3:2e:02:27:d8:ea:3e:2c:7d:07:
fb:ef:bb:0c:ee:13:66:be:1c:8f:50:bf:d3:55:63:
f2:3c:0d:03:9b:a3:39:8a:32:31:c1:ef:b9:ea:01:
43:d7:d4:f3:0c:cb:5d:d3:c5:f5:3c:14:4c:e6:4f:
9f:88:4a:c5:46:04:e1:3e:35:a4:50:12:31:b3:74:
3f:04:2b:97:5c:46:c1:87:d7:ed:9f:08:1f:71:75:
5d:66:8c:c1:38:db:2a:b2:33:d9:39:94:0a:7b:5d:
91:67:4c:89:00:2a:a5:28:5c:97:b0:43:fb:96:0a:
2c:d0:0a:63:30:b0:ec:a3:a0:9b:12:55:f6:33:b0:
bb:7e:46:c1:9d:8a:97:a4:5f:5e:dd:ea:7e:84:a2:
d6:4d:42:34:c1:f4:fa:d1:09:1d:81:73:9a:af:98:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:12:4A:A2:CF:9A:A5:A1:64:FD:6F:4A:B9:BA:12:27:C1:0F:BB
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:0a:6e:7b:e3:33:30:c9:80:e5:6c:99:b3:08:c9:10:a3:
67:fb:a1:5f:ad:1d:7f:ad:4b:f3:1c:90:83:c7:5d:e0:a0:32:
b1:3d:ba:11:c7:5c:1a:02:36:11:41:b7:c6:8d:2a:a1:59:7f:
c7:c5:9d:7a:05:d2:7a:50:a2:22:0a:02:12:ef:ca:5a:8c:af:
8f:13:3a:57:e2:91:26:96:84:9b:71:dc:d9:ae:62:b6:ef:50:
f8:af:57:b0:02:71:86:88:d4:f2:75:da:8d:75:14:b2:b0:4b:
df:48:d5:1e:04:dd:e7:e7:80:24:07:f5:f3:da:c4:aa:c2:21:
71:18:a6:13:4f:7c:4a:5f:ee:ec:4a:a4:b2:86:81:39:87:bb:
8e:bf:6c:7b:ac:22:df:06:fc:70:cd:6a:ad:5c:36:d7:66:ee:
57:ac:f7:4b:33:39:85:26:86:9b:b9:b2:f1:24:49:4e:7c:7c:
bc:aa:bd:05:29:c2:d8:bf:dd:16:c3:d0:69:ca:b5:29:4b:06:
91:63:07:04:38:95:7a:4c:fe:82:bd:d2:7b:02:30:71:01:cd:
4f:b9:43:2f:8f:0f:b4:96:a1:14:fd:0c:45:29:0d:d8:19:95:
2b:ca:d0:1a:f7:f4:b7:29:82:58:41:ed:81:53:d4:60:7f:e3:
d1:4a:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:40 2025 by rpki-client