Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: w6YI2q6xaAlYqi/bfw4uMyloy4LOt7rRX8JepxKVXpg=
Subject key identifier: 82:D1:3A:DE:38:32:02:B8:23:68:D4:8F:45:F4:92:6C:B1:98:7E:C8
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 0198D5BBC452A649598629E6025925880D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 1232
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: BUih8qlxlM36nVLgODl8U2c6gUs.roa (hash: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=)
2: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: aMS1nABVxgvvNbWPk28dCYS2oF9Jtokb9p0HkSkGR1k=)
3: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (hash: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c4:52:a6:49:59:86:29:e6:02:59:25:88:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=82d13ade383202b82368d48f45f4926cb1987ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:66:f2:54:f9:80:28:f8:42:24:74:02:b0:
4c:2d:f1:ee:b8:a8:ac:c9:a3:83:95:c4:ee:ae:52:
15:fc:e9:14:5c:bf:8a:86:df:06:0e:c3:df:fb:06:
f7:87:b2:af:2f:6f:3b:6f:67:83:80:96:0f:f9:6b:
7d:fe:f8:13:23:4c:ac:a6:8f:5c:1f:b9:94:31:84:
73:eb:e0:3b:fc:d1:71:e4:77:ff:0b:8c:ad:09:84:
70:89:5b:99:e9:2d:26:85:f4:07:7b:3f:bb:30:9a:
92:a4:43:d8:c7:e3:24:b5:e5:bf:65:ec:14:42:3c:
a3:6b:b4:e9:ee:f3:c6:c0:d6:ac:96:7e:a3:dd:51:
7e:05:5f:5d:98:97:a5:bc:d4:d8:fc:f5:ec:7a:dc:
75:fd:63:a3:52:0e:5f:4f:65:43:52:a9:73:b5:15:
84:ee:21:f2:3f:e3:a3:6a:ad:86:94:9e:a3:e8:1e:
a4:47:24:26:8c:92:dd:ed:bf:64:af:68:0d:05:98:
8a:30:75:87:b1:7b:a1:c6:e7:f0:c2:a2:1c:61:22:
04:20:04:d2:8a:a2:da:64:18:56:c7:20:1b:41:dc:
7c:63:1a:f9:7b:49:9c:cd:df:03:ff:f2:5f:8d:74:
8e:3d:c8:86:91:d2:b3:49:fe:09:e1:a9:18:5b:14:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:3A:DE:38:32:02:B8:23:68:D4:8F:45:F4:92:6C:B1:98:7E:C8
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:80:60:44:38:82:ce:3c:97:bc:b6:4d:42:1d:59:aa:e2:d7:
87:00:5d:f6:fd:24:13:24:1f:b3:2d:f3:d0:26:be:e2:89:b2:
68:eb:c6:8f:b4:2f:d6:34:0c:0b:56:77:b5:70:61:04:d2:f2:
a4:63:bf:25:fe:8d:36:46:88:a9:d4:a5:0d:d7:45:72:d1:f9:
ff:8d:68:d5:20:2a:9c:af:54:d8:94:69:53:a8:8c:a2:f4:f4:
ed:c4:68:e1:49:6d:80:30:ca:c0:12:5b:da:58:23:59:df:48:
12:2d:ff:6c:27:dd:43:c4:e8:60:65:21:9b:7b:b7:05:7c:3f:
86:b6:f5:89:ee:f9:65:42:b0:28:36:fc:ed:a2:08:15:25:6b:
a6:60:f0:39:97:fc:f3:51:82:fe:b7:d9:2f:28:48:2c:8e:fb:
f5:d8:ae:5c:48:92:03:cf:91:e6:6d:0c:0e:3f:85:d3:20:a2:
3f:fa:28:c7:80:d6:60:53:ed:27:1d:4d:59:81:35:93:24:09:
ef:a8:4e:39:08:6b:a8:91:1c:40:6f:0e:e5:f8:9a:81:eb:a3:
f6:69:d0:21:5f:c0:8a:8a:24:8a:22:46:96:77:d3:15:87:85:
24:41:81:e8:f1:8f:85:5d:db:6a:38:67:8b:a3:6f:73:16:64:
f1:1b:12:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:18 2025 by rpki-client