Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json)
Hash identifier: Tb3k+gSORGTTMs72J6mCaYk7a6BWClf1NWlFsD5f5aE=
Subject key identifier: F2:96:45:81:41:8F:44:99:0F:48:96:7A:B1:7D:CB:49:D1:8E:A4:93
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 0198D705D4775810CCF379C9EAEB85819C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
Manifest number: 1045
Signing time: Sat 23 Aug 2025 13:02:20 +0000
Manifest this update: Sat 23 Aug 2025 13:02:20 +0000
Manifest next update: Sun 24 Aug 2025 13:02:20 +0000
Files and hashes: 1: Prl9jiIf5yTV5DsYzdlJSoaKLUM.roa (hash: Z5P6WiB+sh7qt8RUQthul2w53RzYUIGwq58APY2ZYXU=)
2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: rNe7lmvQFmJdcWntSjdOJVuzSPik4UdV34FBmosnXEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d4:77:58:10:cc:f3:79:c9:ea:eb:85:81:9c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Aug 23 13:02:20 2025 GMT
Not After : Aug 24 13:02:20 2025 GMT
Subject: CN=f2964581418f44990f48967ab17dcb49d18ea493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:9f:ae:d5:26:c0:78:1d:a3:33:38:16:3a:
0e:73:28:c4:f6:58:92:70:5a:e1:3c:3d:77:a2:eb:
9f:39:58:9a:c5:2d:f4:8f:4f:d4:d5:ff:a4:9c:b7:
45:17:61:bf:d7:1f:60:65:e4:e4:91:d9:8d:f6:45:
41:46:8d:06:ae:b0:7a:83:d5:0e:0c:37:af:df:2b:
c1:aa:95:a5:b3:65:7c:54:c6:e6:90:f7:8a:09:ea:
9a:e6:35:c3:93:91:c8:4b:71:90:c4:38:9b:ae:d0:
a4:87:48:43:4c:dd:d6:31:f2:d4:6d:3e:9a:da:44:
84:90:e9:1f:b1:c6:1e:fe:88:74:93:32:b5:38:8e:
06:f5:71:2c:c3:fb:7b:2e:0e:b1:19:89:ec:b4:d2:
3f:c8:37:4f:43:3c:32:5b:55:3c:50:5f:f8:2b:63:
b3:c9:0c:76:a6:c9:4f:c1:b2:1b:b9:df:d1:83:9d:
b2:68:d0:e7:ea:e1:0a:b4:f1:93:2d:da:62:3e:60:
dd:bf:94:2f:06:50:2b:24:b1:ef:9e:6e:f5:df:0b:
e7:be:5d:25:91:65:62:70:ef:73:4b:08:44:91:29:
17:0d:54:12:81:21:c9:be:89:77:9f:d2:74:e6:91:
66:61:bb:41:95:e4:35:f1:72:86:2e:34:43:44:9b:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:45:81:41:8F:44:99:0F:48:96:7A:B1:7D:CB:49:D1:8E:A4:93
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:63:ca:03:1d:05:43:f3:c6:8a:69:d2:59:07:10:c7:c8:4e:
94:50:7f:91:37:0d:70:b8:fb:f8:00:2d:3c:9a:4a:06:0c:fa:
0a:57:ed:e0:a8:8d:a8:4c:3f:e0:8e:c5:24:bf:7c:78:34:31:
2c:33:74:30:4b:1d:74:07:a6:a7:b4:36:ed:39:7a:31:77:5a:
7e:97:d8:ea:68:35:8b:c2:f2:75:d1:93:f5:2d:48:ce:37:87:
f8:6f:f4:f2:84:86:52:92:85:b8:43:65:e0:db:d0:6f:31:0e:
6d:33:44:20:8c:11:f0:1c:dd:e2:cc:a4:60:d3:a9:40:db:6c:
21:d6:bd:84:9d:81:52:9d:9c:6b:ef:b1:6c:d0:aa:f3:a8:a8:
a7:3d:93:d1:d4:e4:fc:86:49:fd:70:1f:8c:d9:95:63:44:b8:
a2:71:61:4f:eb:a7:6c:6f:52:2b:95:81:90:4b:13:e2:49:93:
fa:7d:72:34:55:aa:0f:59:e8:79:5b:f6:81:24:5b:c6:75:5f:
b7:cb:bf:f8:a5:3a:f3:93:40:c5:18:33:7f:dd:c7:2e:da:34:
5f:a2:7b:28:61:a1:da:6c:c9:0b:91:7c:8f:0f:61:fe:3b:22:
14:af:cc:3d:4f:b1:aa:ae:94:ee:d2:42:e8:c5:6a:43:b6:5a:
fd:db:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:50 2025 by rpki-client