Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: RQAPd9J/oIeKg0UxBIKMGsAAUPJrpi9g0LEtmLt0Kmg=
Subject key identifier: 1D:59:B3:0E:B0:69:A6:F5:9E:1E:48:40:0C:E2:AF:83:40:7E:10:E8
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 0198D54E39D98071C7EC7F6A87641DF645A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 11E6
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: XlxqElOUGB1R33XWujDcde5BGzwbyBIjzw56Hhr4NLQ=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:39:d9:80:71:c7:ec:7f:6a:87:64:1d:f6:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=1d59b30eb069a6f59e1e48400ce2af83407e10e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:be:8e:72:3f:d9:66:5f:25:49:5f:6a:e1:
18:60:aa:3a:bb:47:20:ba:81:3c:01:ae:db:b4:b1:
14:c2:1d:08:e3:4c:5c:22:90:2a:bf:2d:05:0d:c8:
81:a2:f5:08:c6:61:ad:d9:39:f7:c8:34:a5:01:d1:
fc:09:77:b4:2d:01:64:da:ff:fc:98:3c:8d:94:a0:
26:b8:42:eb:53:38:02:4a:c9:c9:05:c6:6e:ad:ef:
d0:3d:34:e5:73:30:c1:b0:01:63:a8:3e:2b:02:3e:
9e:07:67:9f:af:dc:99:5b:00:c5:db:7b:42:49:84:
45:93:e0:8b:e9:58:4d:5b:66:e0:9d:ed:e5:c8:13:
35:fd:bc:03:a2:ba:03:fd:26:20:20:21:79:4f:10:
0a:7a:8d:ac:a0:f0:9a:d9:77:27:6f:bf:de:e3:4a:
7a:0d:fd:03:35:92:9b:2a:61:bc:fc:23:05:68:c1:
7f:58:73:27:4f:af:d5:61:b2:ab:b5:f9:95:c8:89:
65:6f:fa:01:b1:45:37:1a:7f:df:c6:ed:43:49:9d:
77:50:2d:3b:93:17:98:19:28:7e:d5:88:ea:06:2e:
3c:5b:00:70:fd:62:bb:ad:ac:e0:58:00:ca:5c:4e:
09:c3:14:1b:e7:9a:4d:a0:ee:99:d6:e6:6c:dd:39:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:59:B3:0E:B0:69:A6:F5:9E:1E:48:40:0C:E2:AF:83:40:7E:10:E8
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:df:22:03:53:1c:76:48:1f:90:04:37:cd:89:69:9c:bb:8d:
f4:5c:4c:3b:da:c2:69:37:4c:3d:a7:93:28:50:02:ba:43:d2:
16:78:24:50:2a:87:fa:4c:9a:2c:b1:36:20:22:7e:8c:0a:a0:
b9:75:d9:cc:95:bd:9a:2e:5c:29:18:c0:b3:63:83:fc:7d:3d:
85:dc:22:f2:1e:f5:93:13:50:62:0a:8a:a3:ff:43:b4:2f:2c:
cf:ca:6e:21:65:6c:b7:30:d4:b0:b8:d3:d7:5c:0d:c7:d5:d7:
99:7f:eb:53:1a:bb:a7:cf:89:fe:c0:30:18:0d:73:49:59:23:
2f:bb:8f:59:a9:24:d7:69:17:98:5f:b7:e0:ac:46:01:4f:53:
b1:58:91:1d:62:27:e3:d7:70:a7:11:d9:b0:43:bb:5c:c0:33:
df:c7:de:3f:2d:d1:f1:de:ff:cb:59:95:1f:63:0e:d1:47:b9:
4a:b0:6e:6c:26:ef:c5:d5:a4:5d:24:a1:f8:ec:44:1e:91:ab:
e9:2c:37:37:99:cc:e8:07:05:12:a9:c1:22:28:4a:8f:29:4b:
81:5d:07:1a:85:d8:87:c9:44:01:3d:b1:c0:e1:3b:9d:db:2a:
ca:27:7c:8d:28:8b:5f:2a:88:b5:8f:58:1d:ff:0b:60:7d:43:
fb:6f:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:26 2025 by rpki-client