Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: /uupG0N79xFij+GE3LaPqrNxTvBsUvA6QKnjtpcjg+s=
Subject key identifier: 00:0F:45:B8:17:11:D0:78:FB:ED:00:26:88:6C:F4:33:BB:54:FB:2B
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 0198D7061A2237BA2FB725CB0299C1FBA805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0A3B
Signing time: Sat 23 Aug 2025 13:02:37 +0000
Manifest this update: Sat 23 Aug 2025 13:02:37 +0000
Manifest next update: Sun 24 Aug 2025 13:02:37 +0000
Files and hashes: 1: b2Ad3Pubnmsc5v7wEeiy2i9crjU.roa (hash: YMeUe949TNAn7B7dURgw/Dn08QgY72JO978X9Gd4XkM=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: 6zAZTxANiSVy6ULbAvET8YTcWW40L1K/PQxMGGysjxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1a:22:37:ba:2f:b7:25:cb:02:99:c1:fb:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Aug 23 13:02:37 2025 GMT
Not After : Aug 24 13:02:37 2025 GMT
Subject: CN=000f45b81711d078fbed0026886cf433bb54fb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:06:63:67:38:ac:39:a9:4b:b0:11:65:8a:
8c:6b:96:20:dc:66:27:60:9d:ba:c8:d2:7d:3a:70:
ad:7c:6c:83:89:38:e9:3c:4a:42:44:ca:9b:4f:2f:
1d:32:06:77:c5:b3:0d:5a:43:c3:98:c7:1b:ce:29:
6f:c5:7a:cf:d3:e3:a0:20:76:c1:af:2e:62:de:b0:
0a:06:f0:3b:1b:df:c6:74:3d:aa:7f:1c:73:27:de:
52:f3:20:0e:45:08:8e:46:a8:2d:17:bb:14:91:24:
a1:37:93:ee:d7:68:5b:da:ab:c4:59:a6:03:59:9d:
f0:fe:28:aa:be:00:b9:2d:4b:77:87:1a:e0:c0:20:
f0:1c:72:a0:c1:f3:da:dd:b8:79:14:84:c6:80:8a:
b6:2e:b3:1a:bb:3d:62:f2:ec:4d:35:0b:20:62:ef:
96:85:f3:06:77:fb:68:6d:4d:a6:45:48:30:38:65:
6a:f9:2f:c6:42:34:35:81:ab:d8:01:04:23:80:2e:
58:71:25:41:83:ab:fa:05:93:a0:09:02:1f:5f:03:
ba:2d:ff:45:9a:7a:a4:13:bf:78:7b:40:66:d3:13:
13:07:1d:6f:18:53:48:f7:b5:bf:5f:5c:ac:88:35:
39:89:50:0b:ed:f0:25:09:f0:09:3f:de:3a:95:83:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:45:B8:17:11:D0:78:FB:ED:00:26:88:6C:F4:33:BB:54:FB:2B
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:99:00:4a:1d:96:2d:2b:48:b8:db:db:63:68:bd:ae:9d:a5:
2f:67:34:d9:33:04:41:26:28:98:5a:60:9f:d0:29:82:a1:98:
8a:d0:e2:9a:86:39:f8:fc:2d:67:de:62:a4:cc:3c:10:05:07:
67:c8:80:d4:12:53:09:36:da:11:fe:34:16:a0:75:97:be:d2:
be:b7:32:ea:da:67:a0:68:bb:57:82:4e:11:b1:8c:03:32:40:
8a:52:ed:3a:27:99:1a:56:ad:4d:4b:02:c8:7f:99:20:47:f9:
1d:26:1b:39:dd:49:6b:28:31:28:97:45:c0:37:a6:9f:ed:93:
5c:bb:ac:7e:34:65:9f:bc:dc:dc:26:16:45:6f:a7:49:a4:dd:
8f:c5:8c:1b:07:3e:82:a4:5b:90:f0:97:99:90:0b:61:9b:c0:
8c:47:a0:cb:62:a1:ab:3e:40:68:e3:a6:bf:fd:42:f8:52:6e:
d9:c3:31:70:52:d7:99:25:fc:8f:1f:3a:bf:6f:37:69:66:93:
10:a8:3b:a4:bb:a2:56:4e:07:4a:ad:f4:a5:f6:55:dd:99:74:
73:33:0b:73:c7:f2:09:32:36:64:cc:19:05:e8:ac:9c:40:c2:
e6:ee:95:73:87:6b:8f:26:1f:21:fb:c4:d7:33:0f:1c:e6:b2:
98:a0:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:18 2025 by rpki-client