Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: XQDvOnmrPTXs20AsoLo4/Jfry2Mx3/hWCXG58vdWJwc=
Subject key identifier: B0:DC:D5:B5:C1:98:61:9F:EE:00:D3:3A:70:AC:D8:32:AA:D3:0C:86
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 0198D6CD320E6B4D95AC756CE544DCC9775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 0331
Signing time: Sat 23 Aug 2025 12:00:28 +0000
Manifest this update: Sat 23 Aug 2025 12:00:28 +0000
Manifest next update: Sun 24 Aug 2025 12:00:28 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: IJx4WdOPYh4xMD2FyU9MaBNIYwrLzXAJOFYT6OWCYlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:32:0e:6b:4d:95:ac:75:6c:e5:44:dc:c9:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Aug 23 12:00:28 2025 GMT
Not After : Aug 24 12:00:28 2025 GMT
Subject: CN=b0dcd5b5c198619fee00d33a70acd832aad30c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:a5:ce:e4:72:cb:f6:23:97:47:91:dd:0d:
f1:3d:67:66:4f:0a:96:72:7d:04:e8:6b:51:d5:10:
ee:58:09:86:11:a4:d1:59:68:41:d8:8c:ca:35:5d:
d4:61:a3:11:13:17:6c:16:05:59:7a:0b:c1:6c:8a:
4c:c5:07:97:8b:f9:de:0f:4d:2c:3a:88:36:64:27:
76:76:50:a9:b4:16:b0:11:34:70:6f:0c:19:29:ca:
18:dc:77:e7:cf:27:b7:7a:2e:25:de:5a:5d:d0:f2:
73:37:b3:7a:07:cd:ad:f9:96:a0:d7:1e:fd:85:01:
14:ce:50:7d:09:15:a7:99:a1:10:9e:61:a1:d7:aa:
72:08:32:53:28:20:68:2e:8c:46:06:ad:c4:98:46:
bd:ff:e0:c8:e4:4d:ec:d8:72:7c:b6:1e:94:c3:97:
2f:9e:cf:a0:79:db:5c:bd:82:83:2d:49:91:83:dd:
7e:da:46:3c:29:d3:05:bc:4d:97:8f:6e:26:ba:aa:
f2:12:08:0c:b4:bd:71:52:10:ab:1d:3a:04:8e:49:
91:a1:02:3e:3a:8a:b0:a8:1a:9d:d8:76:52:75:69:
82:32:54:2c:01:6e:9a:30:9e:94:96:ac:72:bc:40:
99:33:be:e0:ca:62:35:9a:82:8b:e1:1a:6d:cb:32:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:D5:B5:C1:98:61:9F:EE:00:D3:3A:70:AC:D8:32:AA:D3:0C:86
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0e:5a:64:e4:db:b2:94:10:fd:e5:7c:af:0a:5d:f1:d7:c1:
a6:ba:84:4c:1b:35:d3:b1:15:d3:36:95:00:4a:f7:f4:5a:64:
5e:65:78:78:dc:1b:6c:96:db:7d:e1:f8:93:63:fb:ee:d3:d6:
40:12:99:7f:e0:68:36:2d:99:f5:32:f7:06:71:46:f5:f6:77:
a5:fa:ec:de:0d:16:d4:cf:9c:55:0c:dc:3f:6e:8f:61:34:e1:
c9:13:7e:d9:7f:c7:9c:db:49:75:45:3d:ee:c2:4c:2c:6f:4f:
38:1a:e9:01:32:7d:ab:bd:fa:ef:8a:f0:2f:cc:77:c5:38:5f:
6d:7e:cf:95:d0:f2:0c:a6:05:7a:ad:28:88:9f:69:09:88:6a:
02:59:8e:73:5a:3f:12:58:02:d1:12:33:3a:61:23:ca:74:18:
df:ea:ea:7b:56:f9:f8:a3:e1:24:76:05:d1:db:87:e3:fc:b6:
d3:24:ca:eb:76:f4:5d:8f:ed:3c:0f:81:b3:dc:42:48:d5:df:
d2:3e:be:e4:33:da:1d:88:86:a5:e5:f8:15:a7:a0:04:a2:d5:
97:72:bc:b1:e5:dd:b1:6e:ed:b6:aa:61:a3:5f:5b:37:a6:e7:
a9:45:87:e1:05:2c:c2:1c:df:0b:fb:3b:46:6a:78:46:dc:91:
64:a7:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:37 2025 by rpki-client