Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: V7vFSi5hd7uokHYKjSdukbZYLC78C4O5BU93ofLomJc=
Subject key identifier: 04:6E:FF:DC:1F:EC:CD:C6:EC:C3:71:98:B2:4F:FA:50:5C:FE:4A:9F
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 0198D6CD57D28291B618FC09260E71A71491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 0F67
Signing time: Sat 23 Aug 2025 12:00:38 +0000
Manifest this update: Sat 23 Aug 2025 12:00:38 +0000
Manifest next update: Sun 24 Aug 2025 12:00:38 +0000
Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: +si0ZD5uGfOr1i1CtmoXBnqNO5mzcF1tcz7Cky2JEbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:57:d2:82:91:b6:18:fc:09:26:0e:71:a7:14:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Aug 23 12:00:38 2025 GMT
Not After : Aug 24 12:00:38 2025 GMT
Subject: CN=046effdc1feccdc6ecc37198b24ffa505cfe4a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:45:ed:78:19:3d:61:8c:b7:64:ed:80:92:
71:0b:0c:2b:d6:24:d2:5c:9f:eb:0d:f9:de:c1:7b:
ac:13:03:a4:17:a5:f2:88:f4:8d:22:66:d2:57:f3:
98:8a:c4:9d:8c:c6:f1:7a:92:b9:d4:ed:69:7f:86:
01:84:84:6d:3e:c2:70:38:ba:f8:e7:61:33:7c:e9:
e5:d8:b9:9c:97:7d:44:4b:7b:37:45:67:0c:55:f8:
1d:91:3d:f3:53:2f:2f:1e:da:a5:fc:ac:3b:d6:42:
7d:76:b6:0f:ed:35:23:cc:1a:39:09:7e:e8:7a:e5:
ae:ac:32:b1:64:3e:55:27:ff:c3:81:b1:03:cf:34:
fa:3e:2e:a3:b2:44:45:a7:03:e0:df:5b:0c:68:a8:
af:c1:32:90:23:0d:a8:4e:3c:c6:ac:27:85:21:22:
5d:75:7f:44:3d:d1:0b:b2:5f:44:9f:3a:b8:40:18:
9c:51:32:9a:3d:f6:45:7b:fa:34:6b:6f:fd:a9:14:
1a:cd:e4:ec:fa:72:59:07:11:d5:51:8b:76:2c:7a:
db:2f:97:bc:fa:1b:d1:24:61:f0:f0:f8:d4:00:92:
a4:24:d6:0f:65:20:fe:3e:0e:fa:47:f4:a6:02:ce:
c9:96:99:85:32:af:08:22:a4:ea:03:35:3a:40:c0:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6E:FF:DC:1F:EC:CD:C6:EC:C3:71:98:B2:4F:FA:50:5C:FE:4A:9F
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f5:26:a3:05:df:3f:81:d0:76:5c:a4:e9:23:1b:e8:d9:e3:
5a:e8:81:d3:f2:40:40:3b:e7:c9:13:f3:56:1d:97:6c:cd:bc:
ca:10:63:22:0e:d6:ca:c6:66:d2:b9:d1:86:ea:9a:50:e3:67:
a4:9b:4a:f7:ae:7d:f9:b0:88:61:8d:c6:c9:26:0e:30:a2:9a:
20:fd:30:03:5d:67:5d:3a:ee:ec:5c:60:f6:7e:05:dd:21:02:
22:2a:a3:d5:bf:0f:27:0d:01:5b:b5:c1:13:e7:3f:f9:c7:67:
7f:19:5d:a1:15:16:39:fa:8c:45:62:0c:05:19:7f:48:1c:e9:
e7:57:cd:02:f2:7b:a3:ca:a1:d9:5b:d3:3b:f1:02:3f:50:98:
6a:cf:f0:34:56:c2:e2:d5:68:0e:57:5a:ae:31:1b:33:5f:0b:
3a:ec:71:93:05:22:63:2c:29:7b:3f:61:2a:14:cb:5a:68:20:
f5:f9:44:9d:a0:05:cb:12:c0:f8:e6:e0:01:0e:9c:fb:0b:bd:
ba:09:bb:63:66:f6:ec:ef:58:90:df:ab:f1:4b:2d:c1:63:3d:
96:10:15:c3:3a:25:d9:6c:21:b0:f7:79:cc:d4:3b:dd:2a:54:
18:98:ff:1d:da:f3:48:72:f0:1b:d9:29:cc:6f:8d:df:48:62:
9b:86:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:49 2025 by rpki-client