Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: EkHymLrhVlHTJt7qWwxqxI7IGkT8oWbxQ1vbDQkTQXs=
Subject key identifier: 22:9A:88:29:1A:0B:CE:77:8D:3E:43:D0:C0:F2:44:47:7D:90:56:54
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 0198D54E65C4789AF0515417E0489C2EF5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 12E8
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: nHeYhWfs3KXtdJX33f179UqMC9MJkWXm4g2E42jo94Q=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:65:c4:78:9a:f0:51:54:17:e0:48:9c:2e:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=229a88291a0bce778d3e43d0c0f244477d905654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:cb:ed:da:56:81:0d:66:f4:26:d5:87:03:
fd:3d:35:09:d8:45:6c:8a:c6:90:d4:dd:67:15:f1:
3c:e8:73:23:31:11:bf:c1:72:03:3c:f7:ab:a5:fc:
3c:4f:13:e1:1f:fb:68:9f:cd:b3:a2:b3:6e:ab:a1:
07:68:3a:71:7e:f5:9e:e5:7d:aa:d0:d8:06:3e:4f:
4c:a5:ca:cb:b3:2b:8c:a1:01:03:8b:f6:92:7f:e8:
1f:e6:43:f4:15:da:ab:99:32:b6:84:a4:d9:4b:d6:
1d:37:9a:92:05:a6:cb:bf:21:ef:de:fe:0e:d7:a5:
e6:23:e7:3b:1e:9e:de:54:0a:08:e7:f9:a8:11:c9:
65:51:cc:08:86:a0:c6:e0:f6:55:d8:5b:db:d5:66:
f3:6f:1c:3d:f4:e8:cf:a7:d2:5c:f8:3b:44:43:78:
15:80:c5:fa:dc:ac:59:c7:98:2b:52:13:f6:61:6f:
14:14:8c:97:ee:5d:de:01:63:0b:50:ac:28:47:c8:
db:57:c5:ab:a9:38:a0:f4:f3:7f:c7:6d:9c:68:07:
cb:ca:49:1f:aa:09:11:ac:3e:77:75:ae:f3:27:13:
93:87:52:06:0e:b8:7b:f7:bd:cc:3c:62:e5:2d:e2:
ce:f0:b3:a1:ba:ef:39:a0:3f:f8:f1:87:2c:6e:ed:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:88:29:1A:0B:CE:77:8D:3E:43:D0:C0:F2:44:47:7D:90:56:54
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:23:f1:48:5d:84:5d:a6:93:82:db:42:64:31:fd:f3:64:78:
ab:56:8d:89:f6:b5:0a:11:26:3a:0c:66:cc:12:64:90:8a:df:
19:24:25:ae:a3:4e:f4:47:66:25:4a:a9:5a:b0:f6:3d:bd:bd:
70:e1:65:07:7d:a7:51:8a:bf:d1:97:fc:b1:be:7d:e5:d1:3a:
ba:f7:83:f1:b7:19:6f:ac:12:6d:3c:cb:41:63:da:85:9c:e9:
fd:f1:c1:29:30:c2:50:16:0e:01:61:8c:1c:df:29:63:28:3c:
4a:af:6a:9c:00:33:2b:51:23:f6:74:2c:85:2e:1a:19:a3:70:
db:ff:43:69:d7:a4:18:7b:d9:57:69:d6:61:ed:20:e6:4c:e0:
f2:5b:c6:a5:1b:34:c2:ec:a0:91:25:5d:43:4f:62:db:52:5a:
e1:67:71:e2:09:c9:99:db:a1:9c:27:e7:2c:e5:98:e0:34:af:
00:2d:6e:69:eb:55:d4:1e:6e:7c:57:07:4b:f1:a0:98:32:cd:
22:3c:e6:80:2d:a6:47:14:ef:2d:bc:c6:9c:f2:08:40:85:e1:
32:26:19:0b:19:3e:05:2a:e7:70:12:97:3d:23:92:8a:86:ed:
2a:d8:72:ce:5e:10:a7:99:2e:78:cc:5d:d1:94:7a:f2:c3:39:
be:af:33:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:59 2025 by rpki-client