Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: RpIVAHTPJc2kXl6IIIigqCNfVnDUqpidXdzoTUQEHbE=
Subject key identifier: 9D:BF:CD:11:9D:76:0F:A0:99:A7:CD:E3:BA:D9:FB:94:80:24:2F:92
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 0198955BDF5F0DDB1E876C6A186C163005CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0A19
Signing time: Sun 10 Aug 2025 19:01:22 +0000
Manifest this update: Sun 10 Aug 2025 19:01:22 +0000
Manifest next update: Mon 11 Aug 2025 19:01:22 +0000
Files and hashes: 1: b2Ad3Pubnmsc5v7wEeiy2i9crjU.roa (hash: YMeUe949TNAn7B7dURgw/Dn08QgY72JO978X9Gd4XkM=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: uiWBGCjgVVHF0IbeJNVCH9Kay/WILyRDkEJiCNptTxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:df:5f:0d:db:1e:87:6c:6a:18:6c:16:30:05:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Aug 10 19:01:22 2025 GMT
Not After : Aug 11 19:01:22 2025 GMT
Subject: CN=9dbfcd119d760fa099a7cde3bad9fb9480242f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:9d:08:be:c2:7a:34:76:33:05:34:d2:3e:
f5:19:a3:a7:ca:10:f3:38:80:f9:ec:8d:9f:44:a3:
17:92:b7:0e:b2:fc:cb:9e:b5:3e:c2:ce:cb:c3:2e:
f1:5c:10:f0:a7:d9:3a:ea:c9:bc:78:e7:01:36:51:
d4:88:3e:99:a8:13:24:75:4e:15:14:a6:cd:27:c4:
3b:a9:80:5e:d9:ba:33:a5:9f:03:f7:82:64:da:3a:
b3:c4:08:7f:a0:46:d0:da:8e:29:16:c6:35:24:1a:
6f:7c:4c:14:d8:df:1d:49:f9:43:da:e9:5f:96:09:
89:45:87:b3:2b:36:bc:19:d7:40:85:3d:01:11:73:
af:d9:8a:a1:05:2b:a4:83:95:e6:2f:0a:44:2c:16:
6e:47:b7:12:67:a7:01:38:9f:fe:ad:e0:eb:a5:e5:
cf:61:2d:34:8e:59:9d:83:38:d2:ea:68:5b:d9:34:
30:ec:39:cf:e7:1e:67:62:ea:00:2d:89:9f:27:17:
11:b3:63:9d:e1:7c:61:de:22:5e:ec:af:1e:01:17:
13:0a:c0:3d:c3:60:ed:5d:df:20:ca:95:63:a2:8b:
47:cd:71:1d:20:fc:4a:e9:53:2b:34:fd:46:5f:e9:
d7:a9:8e:27:bb:a8:0a:99:6b:91:ce:30:af:33:39:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:CD:11:9D:76:0F:A0:99:A7:CD:E3:BA:D9:FB:94:80:24:2F:92
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fc:74:eb:22:02:f0:cd:0c:1a:70:e0:ab:54:42:cc:4e:e7:
b9:8f:de:d5:3b:ac:70:a7:e1:c0:31:ed:bb:ba:63:16:87:93:
f6:76:d0:eb:84:74:fa:91:b9:92:1d:47:c5:cf:15:0a:49:a5:
1e:d1:1d:a5:bb:a4:74:38:4c:d6:95:15:b1:47:59:b8:de:f0:
66:a9:c0:51:51:33:07:ca:77:43:2a:f5:b1:d8:51:4e:cd:ac:
b9:cb:4d:69:4f:c7:34:51:53:34:e8:4b:54:c1:8f:92:71:17:
11:04:69:b6:63:eb:2a:cb:e6:91:03:5e:f0:3e:0a:56:36:cf:
90:1a:ef:b3:90:ce:22:a3:33:f1:50:a4:03:ff:d7:fb:93:f6:
d8:8c:2e:87:c0:90:e2:fb:31:7d:18:7e:54:f9:e2:d3:91:eb:
33:bd:03:70:ff:01:ef:90:c0:7d:67:9b:25:60:36:07:99:6c:
36:74:a9:16:39:ca:b2:1a:bc:a3:59:b8:26:9d:ed:20:97:ec:
de:ec:07:8e:e7:24:30:0a:fc:0f:78:44:af:6c:5f:24:fa:d3:
37:75:c6:72:c5:a2:30:90:25:49:df:d9:c0:5d:cf:df:87:c8:
e9:e4:da:54:0b:5a:2f:04:2b:78:f8:2b:4a:ae:c6:b2:fa:85:
4d:67:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:59 2025 by rpki-client