Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
File: qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json)
Hash identifier: E4M3udn7X7OFEBLWZygVLnf826T/Pi4EGE2poOz1QE0=
Subject key identifier: 7F:BC:CA:74:48:DF:BF:27:F3:4A:40:A2:55:67:75:D5:B5:FA:5B:67
Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c
Certificate serial: 0198D4DFE44D39714D5F255E642A3EA2D745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
Manifest number: 0A43
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=)
2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: /MJR1qelmMpF2iqz+yVjZqXrwqQrZs20K5M+KlTivVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e4:4d:39:71:4d:5f:25:5e:64:2a:3e:a2:d7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=7fbcca7448dfbf27f34a40a2556775d5b5fa5b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:b9:dc:1d:2d:d8:96:b4:7b:54:db:5b:f0:
32:92:b9:46:34:3c:da:c6:62:8d:6f:fd:30:a3:b0:
38:f4:d2:36:4f:7c:e1:4b:b6:fc:c6:6d:fc:d3:92:
7b:07:6f:fb:90:97:a1:44:25:cf:30:34:3f:d9:04:
d1:a3:9d:67:17:d0:6b:38:a3:e9:24:cc:87:86:54:
76:91:d7:99:f9:c0:5e:74:76:90:86:84:e9:ac:37:
47:57:18:e9:5e:98:07:cb:b7:e0:ad:ea:6b:59:35:
59:92:af:1d:e3:80:31:a5:c7:01:23:f1:f7:ad:e1:
9f:36:d7:62:f2:02:2d:1f:75:95:ae:1a:7c:9f:97:
fe:6f:e5:df:45:fa:fd:17:71:7d:47:ec:26:0c:53:
4e:91:59:2c:97:ec:05:3b:df:bf:ea:4b:17:92:ce:
7f:65:5a:78:aa:1d:b7:ba:c9:e8:e9:de:26:12:95:
b1:2c:af:d4:ea:87:c5:eb:fc:13:55:e4:2c:6a:e9:
17:3c:22:a1:b3:a7:8e:bc:a5:4e:b0:8c:ac:00:88:
ae:fb:61:b3:be:bd:44:4f:66:7f:7b:83:67:31:1d:
89:cd:0b:6b:b8:27:2e:67:03:28:44:98:77:7f:34:
94:fe:4d:da:7b:43:4f:63:22:54:99:74:88:c0:04:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BC:CA:74:48:DF:BF:27:F3:4A:40:A2:55:67:75:D5:B5:FA:5B:67
X509v3 Authority Key Identifier:
keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:60:4e:24:6a:f7:b0:dd:83:8d:3c:03:21:fb:cf:41:67:17:
d5:5b:54:a1:25:d2:bf:73:de:ec:8f:da:d3:3b:f0:c8:3b:ae:
7d:e4:1e:2d:de:7b:f0:41:54:8a:bc:17:3f:a6:f5:4f:27:de:
c2:be:dc:f4:49:71:4a:e2:9a:7c:f6:d2:a5:fb:7f:d2:b4:7b:
4b:fd:2a:5b:18:87:ac:87:2b:ca:ed:1f:80:b7:c2:55:f7:65:
79:c0:16:5f:94:cc:b8:8c:36:03:66:44:40:c0:13:1b:76:16:
80:ee:70:d2:9e:35:65:d6:13:f1:b8:ca:03:79:74:e8:6e:62:
c9:2c:08:26:00:6e:2b:fb:a4:5a:c3:16:8c:a0:c0:6d:0e:c3:
55:98:b9:9a:50:7f:dd:b4:95:d3:62:95:cb:45:e4:6d:48:f8:
8c:db:84:dd:40:dd:9d:a0:6c:5b:72:ad:dd:32:bf:4b:b7:6c:
a8:3e:2f:9f:ac:51:c7:6e:62:72:2b:6c:7b:36:66:33:ff:0f:
8f:67:ab:29:e7:ea:73:9b:8f:b3:ef:cf:a5:58:7c:3e:45:34:
7f:2d:d2:f3:71:70:c4:ea:e3:77:da:de:6a:ec:b6:e7:72:81:
bf:64:5c:de:f6:cf:8f:73:81:3e:d1:0c:c4:96:63:0a:55:07:
15:8c:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:38 2025 by rpki-client