
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: fm8Y3GxO1g83YtKvwlLBoX/A/RBLDAocmthBkQDWUro=
Subject key identifier: 2A:C0:71:A3:36:3A:06:12:2F:92:E9:5D:02:6D:9E:05:84:B8:79:CD
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 01988543A8D5092D4C1C39147CDDC4188026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1625
Signing time: Thu 07 Aug 2025 16:01:00 +0000
Manifest this update: Thu 07 Aug 2025 16:01:00 +0000
Manifest next update: Fri 08 Aug 2025 16:01:00 +0000
Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: p4hSvPA+O2z5HdzIWwnRKniPeLykDyr3gk6EeMUh3Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:a8:d5:09:2d:4c:1c:39:14:7c:dd:c4:18:80:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Aug 7 16:01:00 2025 GMT
Not After : Aug 8 16:01:00 2025 GMT
Subject: CN=2ac071a3363a06122f92e95d026d9e0584b879cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:72:25:30:58:b3:75:7d:70:89:64:fa:f8:
b0:46:8d:b3:89:90:24:fc:f5:07:36:1d:76:f3:82:
bc:13:a8:67:43:29:ee:18:2f:b9:0d:9b:57:83:a2:
7b:7c:1a:16:45:c5:4d:90:c5:c5:d8:74:93:b9:16:
81:21:ff:6d:e2:b8:b4:65:0f:f0:72:fd:f5:44:24:
d3:7a:5c:e7:74:49:34:0d:d2:c9:58:a5:18:c3:2d:
83:ed:b0:a5:66:db:e9:c8:eb:9a:cc:9b:79:24:3c:
a9:ad:c3:7e:0e:98:37:d1:6b:93:0b:18:72:8d:19:
b4:6e:fe:79:cd:6e:10:d6:bf:41:86:1f:0c:28:fb:
dc:d9:6c:d4:52:e5:ee:98:67:d4:9c:0a:8f:23:15:
c1:8f:35:17:95:6b:79:f9:66:bd:4c:3a:4a:e1:da:
da:f8:c7:cd:15:48:d8:62:da:38:31:c0:22:c3:8b:
0a:77:b2:70:55:ab:2b:ab:9e:61:cb:ea:d2:e6:d1:
65:22:27:41:28:a1:c9:47:e5:e6:8e:db:4c:58:b9:
93:d6:01:51:54:ef:c9:ba:3a:b8:e4:79:05:2d:b5:
49:62:e8:fb:54:b3:73:ff:b0:c4:d2:af:19:16:30:
ca:59:e4:1f:71:01:bc:91:1f:87:68:51:b3:38:db:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C0:71:A3:36:3A:06:12:2F:92:E9:5D:02:6D:9E:05:84:B8:79:CD
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4b:62:99:aa:83:1f:86:06:6b:c1:8b:0d:d3:53:35:cc:59:
51:22:f5:51:82:88:be:75:52:a1:ff:47:bf:62:37:5b:b6:69:
1e:1e:f5:b6:53:1a:36:6d:7f:66:dd:35:7b:39:02:f1:5f:82:
fb:b6:1c:4f:f8:f6:18:4b:08:40:ae:47:0b:46:55:23:6c:e1:
00:db:52:ac:74:84:73:71:71:0d:fc:ad:70:3d:a0:d5:0a:ee:
22:d1:84:9c:27:63:08:38:0a:29:0d:38:9c:ac:9d:7c:56:85:
4b:0c:4b:6d:7e:bb:75:bf:68:04:04:03:eb:68:ee:72:36:98:
86:52:36:da:77:31:7a:74:d3:d1:59:06:20:75:08:2c:e4:86:
41:5d:d9:71:f6:38:89:ce:16:f3:a8:9a:86:58:5d:3b:67:dd:
8d:06:10:ed:9c:04:81:4e:32:27:9a:fc:a6:8d:de:bd:59:6c:
9b:da:2d:eb:c7:08:91:07:bf:fe:67:80:89:47:f0:23:cb:9a:
e9:3f:c8:9b:32:be:6d:76:c4:5f:48:1c:46:81:db:a9:73:57:
7b:13:20:66:60:5b:8d:60:16:c2:ee:03:3c:c4:fd:83:b8:1a:
c2:74:9b:7a:9d:c0:89:2d:1f:5e:b4:a8:73:5e:c4:d3:13:8c:
f5:13:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:17:19 2025 by rpki-client