Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: HtliuSRdcqlTYdelXOyX2kkjxOVLnYili5zPKnHHWo4=
Subject key identifier: 7B:75:42:9C:8B:40:F6:B7:10:87:6D:22:E6:F6:9A:7C:2E:73:60:A6
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 0198D58359E6BD72640D24448F4A4EB49E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 0414
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: TLNiCF9qvMeR0M7fNHCSBEoguKaAqHFPeUFHPy+eh7c=)
3: enRlxHW6TcEze5rGWZI2gDfXCHE.roa (hash: xU129rq7FUnm7ePypcr9hxj93/gj8+4MATOrtNcO+Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:59:e6:bd:72:64:0d:24:44:8f:4a:4e:b4:9e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=7b75429c8b40f6b710876d22e6f69a7c2e7360a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:48:3a:bd:65:15:28:4f:2d:8b:b5:59:56:
15:4a:85:5c:a8:47:73:d8:39:12:9f:0e:0b:13:55:
6f:6b:7f:80:7b:4e:11:3c:e0:3a:97:88:6a:70:11:
5f:34:8a:5b:c0:7c:55:00:da:5b:4f:88:ed:c9:bb:
c8:d7:a4:3d:13:96:8a:28:a7:a8:d1:0a:ec:de:d1:
cc:af:67:45:4b:9a:f2:61:40:bc:86:bc:85:2c:2a:
77:c5:3e:dc:36:b0:06:08:dd:ab:74:3d:22:11:94:
dc:b5:a2:f4:c0:a3:28:36:a3:e2:d8:34:96:16:6e:
14:cf:75:84:78:d1:c3:f6:a6:f6:28:f7:29:59:29:
5d:41:2b:d8:93:2c:63:02:3f:5f:8b:12:6a:63:d9:
22:d2:c3:ed:8b:d2:24:04:a5:67:21:9f:1a:83:73:
fb:52:42:63:d6:b7:d2:00:b0:00:30:f6:25:d7:3e:
a2:57:83:e6:75:72:12:5d:0b:69:87:c2:6a:46:c3:
43:d4:2d:78:1e:b6:8f:1e:49:9b:b2:08:b3:79:bb:
4d:e6:48:cd:81:d4:20:18:79:a1:d0:c6:3e:e9:85:
1d:3f:ba:a5:b7:9f:28:6d:e7:bb:ef:58:09:47:20:
a4:7e:f4:53:0e:35:3d:45:52:5f:3b:25:91:25:2b:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:42:9C:8B:40:F6:B7:10:87:6D:22:E6:F6:9A:7C:2E:73:60:A6
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c8:c7:22:4d:56:7c:30:f1:0f:84:2f:4e:f8:79:f0:ff:3f:
28:e8:72:29:c6:b3:ba:b5:9d:46:f0:93:e6:db:ca:e9:b1:6f:
ba:7c:01:0e:67:5e:6b:af:5c:4d:b9:59:bc:3f:a0:5a:92:06:
05:f1:25:ee:ee:7d:d6:9c:6d:7b:70:6c:08:de:25:34:af:dd:
ce:97:b5:f2:9e:09:1a:28:a6:02:0a:e1:ef:77:93:8f:51:5a:
ca:9c:12:15:01:d2:29:8b:88:66:b9:08:68:6c:38:ac:70:04:
d7:62:bd:10:13:d7:5b:66:4a:65:22:3b:ac:90:3c:71:2e:f0:
3e:4e:28:18:b6:46:12:0b:0c:c9:bd:ab:7a:c2:47:a7:8d:66:
05:47:ac:ab:44:49:79:5f:ce:28:0a:45:e1:d7:9b:58:16:73:
ab:4d:97:8d:1d:be:fe:d2:05:8f:12:57:40:b8:a2:63:85:8b:
16:92:df:5b:ff:f1:85:41:43:bd:5e:54:df:82:ef:fa:3d:54:
14:e3:3f:f7:6d:fb:07:d5:73:5d:b7:da:c6:8b:84:03:9e:a0:
c6:4d:73:1b:af:80:57:25:5c:fc:f9:9f:06:04:66:22:9a:68:
e2:1c:d8:31:2b:70:e2:78:31:6f:5a:89:9d:e9:7f:4d:14:7f:
37:4f:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:29 2025 by rpki-client