Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: HrvOuKc9nFEXptT99w9a2KRMLkRHbk+Y1kWcRjSOw0M=
Subject key identifier: EF:69:C2:FF:CF:EA:B8:C1:46:E3:08:2F:B5:18:16:32:5D:E0:7D:CA
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 0198D85139D6240BE33A6AFF6E6DF993C34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 160D
Signing time: Sat 23 Aug 2025 19:04:18 +0000
Manifest this update: Sat 23 Aug 2025 19:04:18 +0000
Manifest next update: Sun 24 Aug 2025 19:04:18 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: h8MFGDg/B1I+CZJyKJoOp/wDQpKJvKqi0qUhgJMzoUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:39:d6:24:0b:e3:3a:6a:ff:6e:6d:f9:93:c3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Aug 23 19:04:18 2025 GMT
Not After : Aug 24 19:04:18 2025 GMT
Subject: CN=ef69c2ffcfeab8c146e3082fb51816325de07dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:8f:eb:fb:15:8a:61:f5:90:8b:b3:fe:f4:
b9:57:20:d5:51:50:4f:b9:18:a9:68:18:3b:16:13:
53:c1:a5:08:f5:27:6f:f2:bc:3a:09:a0:4a:28:c6:
b7:3e:6b:75:d1:98:d4:f1:11:1e:42:d7:8b:05:13:
29:df:ff:cb:f8:a9:72:70:30:c8:68:5c:35:4e:47:
0d:75:e4:1c:73:2c:13:fd:bd:e1:a8:2a:9a:91:2b:
19:8c:0c:53:5c:38:13:8f:47:bb:b7:06:9d:75:05:
4a:8c:1c:39:91:74:8e:a7:a7:66:16:76:04:0b:e5:
da:11:2b:2f:ac:4e:03:1b:a4:1e:d4:37:f6:b5:74:
d2:13:14:59:8d:fe:a2:f3:03:cd:67:d0:c7:22:f9:
7d:34:f2:26:c2:f7:f9:74:f8:af:94:b7:f4:77:1c:
61:e1:0f:7e:bd:9b:28:a3:23:f4:d8:aa:b2:5f:2a:
d1:a9:55:aa:9c:f7:5e:bd:49:9a:f3:55:75:70:f2:
45:9c:cb:07:34:28:b5:e4:f3:a0:7a:97:2c:99:e9:
ec:55:83:e0:55:e6:42:02:1b:79:56:66:5e:90:99:
7b:ba:ce:0e:04:27:eb:53:c4:30:95:42:86:ab:03:
9a:d8:14:11:20:0a:42:15:9a:99:87:a2:ac:f5:a1:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:69:C2:FF:CF:EA:B8:C1:46:E3:08:2F:B5:18:16:32:5D:E0:7D:CA
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7a:c6:81:8a:77:7a:76:85:05:5c:47:0f:c0:fa:17:a8:69:
77:e4:e4:57:d4:a0:81:df:ed:43:77:52:bf:e7:56:3a:df:e6:
e9:8c:55:ba:cb:1f:d8:82:67:11:87:4d:b0:65:c3:b0:6e:49:
bc:7b:15:7d:55:a8:58:43:a4:6f:09:05:60:47:42:72:89:bb:
26:ee:10:92:26:1b:c7:d1:b8:12:b9:4e:5e:a3:1a:b7:0d:76:
a3:75:14:48:7e:0f:48:51:c8:07:d6:a1:22:97:53:05:4c:f3:
3b:0f:b2:64:c5:a9:90:22:81:ca:0e:4c:c2:c7:e3:7d:9b:4d:
19:f5:a9:67:7e:83:48:5c:d3:c5:b1:3f:8e:fb:f4:90:17:0f:
30:0d:26:7b:90:e4:0d:41:92:65:40:5e:5d:c5:43:2e:b0:8f:
b7:2e:58:b1:af:aa:78:4b:20:1f:ef:3d:fd:f1:b3:ed:6d:dc:
11:5c:a1:e3:6e:93:67:51:e7:fd:16:a1:fb:96:f2:b8:e7:96:
56:8c:b8:0c:34:25:e1:ee:0d:b7:c1:c1:0e:7d:d0:fb:13:65:
41:d8:f8:9a:2a:06:d7:c3:bf:10:a4:6f:f7:58:b1:3d:6b:dd:
07:d1:c3:6b:c2:33:00:80:40:45:73:d9:0b:53:2a:18:4b:5f:
31:d4:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:06 2025 by rpki-client