Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: e2Z67k64dxgmnSlPVsQ/tmDN7/9aNSagIEt5LlvO7Lw=
Subject key identifier: 2A:72:A5:AE:BF:48:21:30:DA:1D:CF:D3:98:F9:35:D9:83:52:EC:07
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 0198D5839AD6D70B29C108B157836D351EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:28 +0000
Manifest this update: Sat 23 Aug 2025 06:00:28 +0000
Manifest next update: Sun 24 Aug 2025 06:00:28 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: Y0s2491z/Nz4bN1Pc9+wcBEQe0S8xjeKWhAZ+OMR+HQ=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9a:d6:d7:0b:29:c1:08:b1:57:83:6d:35:1e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Aug 23 06:00:28 2025 GMT
Not After : Aug 24 06:00:28 2025 GMT
Subject: CN=2a72a5aebf482130da1dcfd398f935d98352ec07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:9c:09:ac:ed:92:34:5b:b6:1b:76:fe:a2:
50:b4:6a:63:ea:65:6d:33:2c:ea:a9:2d:22:7d:36:
db:cd:76:97:38:16:96:b7:7c:6e:97:06:c2:e9:e0:
0a:51:57:8f:4d:fa:cd:10:5b:1b:69:15:cf:ce:e8:
8a:d3:22:54:99:27:67:12:af:e0:5e:db:36:f0:2f:
f8:8e:4c:18:23:cd:87:92:11:b0:15:d5:3e:de:d1:
fb:9b:57:05:7e:9b:d4:eb:6a:0f:a6:50:8b:3e:be:
5d:4f:c6:02:8c:ee:4d:e4:0b:50:04:c8:f7:93:1f:
5d:17:d5:bb:3a:ff:17:41:4e:01:2c:12:db:89:88:
14:6d:01:92:af:8a:0a:8d:57:24:76:aa:10:24:ab:
2a:9b:d8:6e:8a:d4:70:af:62:d9:2b:23:06:c4:f2:
37:d4:f7:97:50:51:15:40:1f:0e:32:c7:e0:60:6c:
ac:18:f0:55:71:be:16:29:50:bb:1d:70:3b:fa:94:
fa:74:34:b0:b4:4e:e7:8b:a0:2f:76:f4:ee:92:d2:
f1:3b:f1:85:69:6b:0c:0f:22:38:55:8d:2f:d2:88:
bc:a8:6b:6a:30:1f:ec:58:be:ca:5d:6a:4e:d1:34:
c1:c5:dd:4e:b1:08:db:9a:df:87:ff:fe:c7:e7:5e:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:A5:AE:BF:48:21:30:DA:1D:CF:D3:98:F9:35:D9:83:52:EC:07
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:79:94:09:f2:ec:90:95:f9:9a:7f:d8:e2:44:1d:73:31:35:
45:35:c6:e1:92:4c:16:95:d8:5d:12:a5:8d:ff:15:59:bd:ab:
90:20:cc:c1:54:7e:21:fa:62:e3:42:b6:a1:ab:79:3f:61:57:
7d:f0:30:1c:e7:f5:d4:50:43:59:0b:b2:b3:8e:24:d9:fa:93:
ec:5e:63:f5:7e:23:9d:12:2f:3c:34:3b:1c:25:a7:67:d5:1a:
80:07:e9:b5:c4:4a:3c:56:8a:64:c0:a2:57:a9:29:4c:17:2f:
7f:c1:77:35:70:ae:0d:ee:39:89:a4:a6:77:c1:4e:a8:ef:9e:
0a:0f:93:02:01:68:76:b1:d2:3d:4f:ce:5d:08:15:7c:4e:39:
d9:f7:f6:14:d5:ef:fa:21:d1:87:83:07:90:e9:4e:37:76:4f:
ed:fd:bf:03:a9:17:80:e5:fb:c4:7b:b8:0e:f8:6d:56:83:2a:
b9:c9:a1:c0:b8:ef:08:31:06:45:e4:46:8b:a8:88:ae:42:9f:
06:b7:ff:47:86:60:91:44:45:c5:df:8e:72:ee:79:b8:99:43:
b9:77:4b:6f:95:5d:e9:2e:cf:2f:1e:86:36:59:d9:84:79:2f:
f4:cb:04:86:e8:28:7c:3d:f2:45:9a:06:a1:ff:73:75:ce:9b:
2a:e9:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:37 2025 by rpki-client