Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: NGygLZbfVupGEJ35t2LkDwzBfQ8dKtKhMcCH74YRjIA=
Subject key identifier: D7:28:F8:11:CE:3C:1B:5D:50:AA:22:09:5C:89:B2:B2:07:3E:8F:8C
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 0198D54DDFAC7B0CE6AE00A24232E1F6BA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: QQS17CUgP9ZHQ2t9axV0P4cYO2uvOIeJuU4did6ieEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:df:ac:7b:0c:e6:ae:00:a2:42:32:e1:f6:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=d728f811ce3c1b5d50aa22095c89b2b2073e8f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:ae:c4:7f:a4:d8:fd:5c:52:57:29:b9:98:
bb:85:0c:61:f3:41:a5:8f:fb:41:a7:6b:4a:b9:09:
03:22:c9:1c:15:0b:bd:d4:a4:ec:67:3a:30:0b:d3:
bf:d2:4a:0f:45:30:9e:7f:3b:c6:44:5d:aa:81:bf:
ed:54:f4:5d:09:93:71:1b:9a:68:d5:a5:bc:f5:35:
5e:72:37:21:5b:ef:4a:27:63:18:c4:9a:c2:54:f0:
a3:42:11:d3:93:12:bf:72:43:31:3c:c4:15:96:e4:
c1:c9:60:a4:d0:16:73:1a:4e:26:ba:78:96:03:76:
9b:45:40:3b:fb:3a:40:fe:61:af:c3:a1:41:a8:8b:
b7:a9:40:e6:d7:40:af:f8:8c:56:04:df:96:51:28:
be:d6:bb:f3:65:4a:48:75:08:7d:12:4c:57:3f:0f:
37:11:a9:e7:47:33:2b:e6:51:ad:ef:cd:be:7c:10:
40:9b:27:b0:41:53:b7:c5:23:e6:b3:93:6d:13:bc:
46:47:7f:2d:f4:61:c3:21:c9:96:9e:23:63:e3:b8:
6a:29:f9:98:bb:85:fd:c7:c1:39:82:5f:1f:f2:c4:
4f:04:46:25:c0:3e:60:4c:44:40:33:c0:1a:45:a3:
15:2d:8a:f7:e9:01:91:50:7e:b2:76:45:0e:a6:de:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:28:F8:11:CE:3C:1B:5D:50:AA:22:09:5C:89:B2:B2:07:3E:8F:8C
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d7:1a:1d:5c:b9:1c:14:74:7e:94:53:61:4e:92:bd:2b:79:
c8:8f:81:c8:73:06:b3:ab:d5:81:ec:59:7a:19:64:1f:43:26:
58:4c:e4:56:8d:74:2b:81:e0:03:b6:c3:fc:78:da:82:14:77:
68:43:93:83:d6:71:67:73:61:3e:60:1e:f8:e7:a5:82:43:3c:
05:60:be:5d:9e:bc:cb:d9:7b:b9:25:16:65:f7:27:19:b3:a6:
8b:f7:d6:25:46:fc:49:ed:00:43:ef:f4:cb:ba:b9:84:64:4c:
5d:32:37:ad:13:48:7e:60:a9:88:8c:73:80:c8:7c:f7:f7:67:
15:86:9b:39:c3:dd:df:d3:34:92:62:d9:f5:ca:fe:60:50:f7:
ba:e8:c4:fc:9d:76:4e:90:a2:49:04:9c:5f:8e:f0:99:5c:7b:
24:b7:1e:6d:72:20:a4:2f:0e:2a:89:01:07:05:27:af:56:3f:
63:aa:cc:a9:1a:03:29:75:56:2d:19:24:de:53:3f:28:79:48:
38:cc:9f:4a:b5:10:fd:34:48:bb:c7:80:84:be:c4:a8:14:3f:
73:a3:e1:d4:e5:fe:7c:c4:0b:e8:03:44:81:3f:9b:64:c9:5a:
32:29:7e:0d:ab:2f:78:7a:58:12:97:23:29:a3:11:98:8d:89:
e3:78:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:15 2025 by rpki-client