Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: jsh0k+XE4MFwZ6wIeXbn8Zi0QB+P920lb4K3CYNTzcw=
Subject key identifier: 67:0F:CB:FF:08:CB:CF:46:9A:4A:D3:09:0F:15:74:30:2B:63:02:92
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 0198D54E170DBA8D1CF6D9F23B5A4342F722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 034F
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=)
2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: 5L1i7YULI6zCAovShKtcYHoK4jTzNJm/3m4zDHXDO48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:17:0d:ba:8d:1c:f6:d9:f2:3b:5a:43:42:f7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=670fcbff08cbcf469a4ad3090f1574302b630292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:db:15:52:3f:f4:e5:48:d3:56:d7:42:1d:
65:69:a1:c8:f5:a2:04:4e:10:7a:a9:1b:0e:7f:6c:
2b:32:65:47:2b:64:b8:75:21:8e:06:8e:eb:a9:87:
05:1e:b7:b9:4b:d4:18:0b:76:f2:5e:eb:f9:ab:2d:
ff:2e:ec:96:79:bd:b4:c1:85:1f:03:84:cf:53:5b:
17:10:19:c7:e6:4f:53:65:5e:8b:cf:8c:d9:73:76:
b5:be:1b:95:03:b4:ef:95:61:39:ff:2d:ca:ac:aa:
ec:7a:0f:eb:45:d2:22:66:43:0d:8c:f9:f9:a0:02:
6a:aa:e6:35:1e:12:23:dd:fe:2b:d3:d5:22:a5:b0:
c3:10:85:9a:60:2e:04:0e:84:fb:73:0f:28:54:3b:
da:53:c5:97:0e:63:90:a0:dc:98:b5:40:33:f8:95:
56:ac:88:5e:58:20:6b:56:5a:26:68:4b:4e:8e:24:
c6:2b:45:c8:ec:39:97:fb:55:0b:f5:03:0d:f7:e4:
d9:7a:0b:f0:1e:fc:5c:c2:b7:24:e2:39:72:47:19:
0e:29:93:29:85:9c:72:84:c7:b8:b6:41:2f:4b:ea:
e2:69:8f:ac:8e:e8:cc:12:fb:b1:25:36:04:59:3e:
68:21:ea:89:3c:6a:c4:ec:89:da:04:53:b8:00:2a:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0F:CB:FF:08:CB:CF:46:9A:4A:D3:09:0F:15:74:30:2B:63:02:92
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:70:70:d1:9a:71:1b:ac:3b:83:28:26:f3:22:0a:50:e1:84:
18:ba:d2:74:33:89:34:05:aa:3f:dc:fe:66:03:c6:9b:bf:ce:
d0:c3:cc:d7:f4:7a:7c:77:98:1f:44:9d:e4:26:23:65:3b:6f:
4f:a6:bb:c5:d9:56:49:5d:a2:03:37:3c:88:ff:8e:a0:0b:85:
c4:90:18:d2:1a:4f:b5:ab:13:0c:1a:e8:6a:43:88:9d:54:d9:
a4:98:b6:04:d9:33:07:1a:ae:ed:db:2b:64:a9:a0:37:ab:55:
1a:85:fa:36:ba:b3:b0:4c:9f:43:39:28:09:66:a4:52:55:d1:
30:16:7c:99:77:86:df:2e:07:b7:3d:1c:26:4f:dd:a9:79:ae:
bf:13:74:b9:60:63:a2:82:71:7b:02:d7:92:c3:c9:31:96:30:
4e:5e:70:f0:e4:32:63:4f:80:af:31:9d:32:56:68:72:04:f1:
ff:c8:35:45:a5:75:1c:89:23:5d:2d:69:43:36:09:55:e2:f5:
d6:88:ce:5c:eb:38:32:4a:2d:35:68:ba:7d:f7:66:aa:f3:bf:
13:ee:e8:e7:93:a6:0d:16:e3:30:6d:0b:b7:2b:23:53:0f:07:
dc:22:4f:5b:8d:f9:0e:15:7d:51:3a:bd:8b:02:78:a7:e7:5e:
ea:a0:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:57 2025 by rpki-client