Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: 5mJwhhIrSQWX+sEu6ZrNw4EttrBWAiDCUD++zYA/vTk=
Subject key identifier: 9C:CB:0A:37:E2:30:AF:1C:A6:96:66:EF:37:77:09:B3:0B:F5:49:75
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 0198D5F11C382ACCFDBF9DD532BDBB59DCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 02A5
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: E5igsl2IAza9W+fOBkc1wp8rwpZs8Vf1iXm17BXvHSM=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1c:38:2a:cc:fd:bf:9d:d5:32:bd:bb:59:dc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=9ccb0a37e230af1ca69666ef377709b30bf54975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:13:3f:13:b2:02:f7:81:50:7d:bc:e9:bf:
a2:ce:21:8c:58:c7:36:0d:a4:2b:02:85:bb:ef:1e:
a7:67:b1:19:a6:6b:4b:80:14:95:9a:06:7b:88:33:
18:85:09:6b:01:f7:15:e8:93:a4:41:b5:6f:52:28:
b5:2b:ab:81:2a:6e:38:ff:04:06:4d:a4:80:c2:47:
95:00:f4:8b:c3:5f:3f:9d:91:c5:70:18:b6:92:f3:
ac:7b:f4:0a:d3:a0:54:a9:07:93:f2:d9:69:f5:2f:
c7:38:d7:37:95:e4:a6:9e:42:3b:31:df:b1:14:01:
5a:1a:d6:2d:08:45:33:a5:23:ae:30:19:67:c6:77:
12:c2:ad:85:29:91:c3:b9:5c:7c:77:49:04:83:e5:
c4:0e:23:77:ed:82:bb:10:23:28:75:4f:ea:32:db:
2f:93:76:89:19:df:fd:64:88:51:61:0e:b5:ba:06:
09:45:08:14:16:a6:26:1f:94:10:bf:a8:8f:06:2e:
b1:94:a8:aa:61:83:01:b2:fb:70:72:7f:90:15:f6:
ad:70:8f:34:de:69:ff:0c:d0:e7:93:37:b5:63:4b:
45:17:ad:4f:c1:25:95:87:f9:82:4e:b1:8d:0e:78:
d4:f0:97:69:19:0b:f1:85:1c:78:e7:a8:93:39:53:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:0A:37:E2:30:AF:1C:A6:96:66:EF:37:77:09:B3:0B:F5:49:75
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2f:3f:d3:81:e5:4d:c9:bf:aa:f3:9d:d7:4c:28:12:44:20:
7e:91:67:bf:c4:48:a5:a7:5a:72:10:e6:1b:09:df:a1:87:7c:
b0:b4:10:8d:68:0f:2b:99:b5:08:35:e0:bb:3d:21:80:4a:5b:
2c:0c:ea:b8:16:14:3f:18:db:79:31:32:33:44:0c:ed:be:e8:
d9:e1:79:53:b5:1a:1f:2e:59:65:e0:ab:6e:d7:5b:26:ce:42:
8a:a9:b3:9b:33:af:bd:58:89:ae:2e:b6:af:d8:e6:6d:1d:b2:
3c:15:ec:2e:0d:b1:02:c0:3c:7f:ba:ab:be:ff:fd:7d:7c:be:
a1:d3:46:fc:e0:89:87:e3:8d:77:cd:d1:36:c1:0e:9f:2e:07:
2e:53:79:70:04:90:8d:c1:dd:4f:f9:c8:dc:32:51:36:c0:04:
0e:e1:32:89:26:48:fb:db:e6:75:cf:7e:70:f4:d0:20:9d:36:
51:fa:26:da:37:72:7b:a2:6d:1d:cc:54:56:cf:5f:68:60:86:
fc:a1:f8:66:1e:30:9e:9e:b6:3c:84:ce:49:20:f1:e6:04:c6:
40:99:c3:65:e4:3b:30:8d:ab:77:f0:ba:fa:e7:10:66:77:e2:
2d:e9:72:47:fd:db:cc:dc:85:a3:4f:2b:4b:4e:05:ec:e3:2e:
ef:3c:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:42 2025 by rpki-client