Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: ijgXO5w+hY608Bow1NS4ROufFQTY3+Ju+tveYROY+LY=
Subject key identifier: 86:D9:79:86:1D:F8:3D:5C:A7:16:81:BD:A0:C5:B0:B2:D7:C0:31:63
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 0197B7EA6F8DF3D5494723AD793CBF3BFF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 119E
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: BUih8qlxlM36nVLgODl8U2c6gUs.roa (hash: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=)
2: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: pNY8/ECdx+DyLekPjJevOKNGAyHmv4wJyz9IFzv0WiY=)
3: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (hash: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6f:8d:f3:d5:49:47:23:ad:79:3c:bf:3b:ff:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=86d979861df83d5ca71681bda0c5b0b2d7c03163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:51:71:42:04:58:de:eb:9b:5a:62:6e:cf:
06:34:b5:b2:2a:1f:bc:ef:f3:4b:e7:dc:c2:3a:f6:
70:a6:29:ee:11:2c:f6:70:f0:34:50:0c:e3:18:ec:
e2:06:4c:14:91:ba:77:60:2e:5e:14:64:4d:bc:d9:
f4:e6:13:2a:05:75:0a:16:4d:5d:f5:ca:3a:19:db:
6e:d5:45:31:9b:42:f3:da:47:4a:69:32:59:86:af:
a0:af:48:e1:e0:90:bc:7f:57:81:04:5d:cb:2e:b3:
c1:2d:e0:81:b4:a1:54:7f:86:88:d3:f7:99:de:20:
aa:2d:75:6a:b7:15:98:65:05:83:5b:14:47:3c:06:
b0:42:9a:74:86:d3:00:0c:16:10:49:20:35:4d:1b:
b4:1c:2d:1e:1a:f2:45:9f:c3:34:71:52:68:3f:a0:
32:d3:75:e5:20:db:ca:e0:0a:4b:79:0d:b8:d3:88:
5d:e8:67:0f:5b:97:d2:2a:92:b5:8c:09:15:c7:f4:
99:fc:a4:38:df:8f:bd:d2:4d:b1:76:0d:05:5c:cf:
3e:32:71:d7:1e:32:e7:19:cb:fe:e3:62:23:48:e3:
3d:f4:bc:bc:e4:cf:91:a6:64:e8:03:a4:1b:c9:51:
ba:c6:25:aa:12:30:ad:d0:c9:0a:a5:94:06:9a:70:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:79:86:1D:F8:3D:5C:A7:16:81:BD:A0:C5:B0:B2:D7:C0:31:63
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dc:15:a6:3c:a5:bd:45:b8:cd:f9:db:e7:1c:ab:0f:da:ef:
11:5a:6a:95:b3:17:96:a1:e2:fc:4f:1c:99:ec:1c:7a:73:db:
7e:49:49:f3:c2:0b:8d:da:2b:47:16:3b:1a:0b:2f:98:69:57:
1b:96:6d:cb:2e:46:ce:4f:49:f6:d7:bb:3c:f9:b5:04:41:b1:
4c:26:c1:d4:f9:0a:a9:dd:18:17:c6:f0:da:72:02:a7:58:ae:
09:a8:59:6d:7e:0e:70:c0:ea:c3:dd:96:91:95:ab:f8:ac:7e:
1e:df:3a:d5:a2:b4:22:ca:2c:78:c3:5c:e2:c7:76:e2:8f:16:
56:54:da:13:8e:7d:9c:2d:c8:a0:15:e5:4f:bc:d7:6c:13:aa:
74:b0:56:a0:51:d4:59:74:53:09:c4:66:68:28:f0:bc:4e:ed:
63:65:40:1a:d4:0d:e1:1c:c0:30:8e:3b:db:90:d2:68:dc:36:
36:cd:6e:8d:f1:bb:55:0b:d2:5e:9d:de:3e:14:bd:70:e1:76:
d1:a3:39:e5:7d:e3:eb:6b:49:aa:13:56:5a:cf:fb:ce:fc:8a:
40:b9:99:01:e2:3b:a5:d3:8b:03:0c:f7:bb:cc:1c:9c:4b:a3:
79:de:3d:f6:3c:97:c2:49:01:e4:52:30:41:fe:58:2e:bd:e3:
ab:c4:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:44 2025 by rpki-client