Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: e8EH9iqpF66/n8EEImfaA043VHJBxUNWzPHVANzCyuI=
Subject key identifier: 85:B7:3A:EA:7B:54:DE:14:CC:A3:D6:33:D8:5C:5A:C5:4B:C4:E3:D2
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 0198D5BBFBF089D3D2B02CEFEA7A26F5A592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0A45
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: HQ84kcMiIMVPQalI3cbKtuNPbB1P88orjJUVi32Sd4M=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fb:f0:89:d3:d2:b0:2c:ef:ea:7a:26:f5:a5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=85b73aea7b54de14cca3d633d85c5ac54bc4e3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:09:85:e0:d4:d2:3f:86:de:99:9e:13:6a:
be:2c:c7:58:41:63:b6:17:33:b8:fe:45:00:cb:dd:
2e:6c:1f:77:27:9b:b2:da:e3:a3:dd:42:a2:75:51:
67:51:6e:d9:1a:65:4d:97:02:83:6e:a9:d1:03:06:
4d:f0:a5:20:a4:72:d8:af:5e:26:16:b9:16:f3:a9:
e6:42:ae:7c:f7:82:12:a0:46:c2:b4:73:f0:95:7f:
59:94:8d:3c:3f:9d:93:85:7d:56:7a:4e:de:42:9b:
18:2c:d2:2b:87:17:65:4b:46:75:c2:66:e8:04:cf:
63:e1:bc:6a:1f:9d:f3:65:13:d3:c1:c4:55:8c:10:
8f:c3:dc:6f:47:4d:38:77:c9:c4:f8:37:1e:9e:dc:
c8:e6:90:63:44:03:e0:3d:5d:e9:46:48:2f:fb:c8:
47:f8:d0:05:7b:60:49:57:7d:8b:b3:86:ce:dc:ca:
7e:4c:c6:31:d2:70:f5:4d:f0:47:04:6b:fa:d0:51:
76:9e:d1:eb:19:5c:01:ef:ab:36:92:24:fa:87:65:
d4:86:c7:35:52:e6:90:ed:8e:ea:aa:13:27:b1:c2:
2f:a4:48:e1:a8:7e:31:56:b4:07:33:3b:5b:1c:01:
07:95:6e:74:a5:9a:fd:40:3f:76:1f:e8:b7:56:36:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:3A:EA:7B:54:DE:14:CC:A3:D6:33:D8:5C:5A:C5:4B:C4:E3:D2
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6c:c1:b1:9a:31:49:57:92:35:05:7d:e3:88:df:96:c0:39:
4b:cd:a3:92:ae:16:0f:ba:29:22:85:1d:b0:35:4a:10:de:3d:
c8:1a:a9:a8:07:af:c1:c3:48:7e:90:46:26:18:5b:dc:37:53:
21:1c:e2:e7:65:1c:58:c1:c4:df:3e:2e:1f:d3:42:f4:b5:67:
8d:aa:e9:fc:0f:cb:6c:d3:c7:e5:84:91:91:2d:14:61:b6:7e:
08:06:4d:44:19:34:d1:60:00:b0:c9:60:f2:6d:f5:2a:71:12:
d3:cf:b0:e7:ba:c4:cd:75:f9:9b:40:b6:83:69:21:17:57:70:
cd:4c:39:78:63:b8:43:c1:26:8d:1a:be:0d:ee:44:fe:90:5b:
ff:56:64:89:fa:ee:70:f5:5c:8d:ee:86:0a:22:49:1e:0d:99:
bf:f8:0f:cb:67:64:b2:2b:cb:87:fb:ae:42:fd:06:10:65:8f:
99:75:f4:19:ad:f2:6d:fd:53:7a:7f:18:fa:9c:28:fb:fd:62:
f9:63:88:e1:2b:a1:40:c2:11:cb:73:4d:4d:54:1e:d3:9e:a7:
3b:7d:fd:b1:cc:19:96:f9:27:0a:7d:b4:c0:ed:96:96:fe:3b:
2b:c1:e3:af:a6:0e:97:c6:0e:25:b2:71:2f:d6:ad:9c:6b:35:
6f:6c:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:06 2025 by rpki-client