Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: oXx6Ncn1YxrHWySsxn3YCBYH4EA/QFQAOOD3vdNptNc=
Subject key identifier: 43:B1:05:A1:1B:B5:A6:8D:0C:32:3B:FC:1F:C6:B6:11:EF:4E:10:C8
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 019897B7F4C0F50EBF6EA194F522F2D81074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 06:01:11 +0000
Manifest this update: Mon 11 Aug 2025 06:01:11 +0000
Manifest next update: Tue 12 Aug 2025 06:01:11 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: 1QWl6CIfaLTIQ3lJ0UC9F/fJ0EaeI5fJZiPIwo3q0Cg=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:f4:c0:f5:0e:bf:6e:a1:94:f5:22:f2:d8:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Aug 11 06:01:11 2025 GMT
Not After : Aug 12 06:01:11 2025 GMT
Subject: CN=43b105a11bb5a68d0c323bfc1fc6b611ef4e10c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:c5:af:75:b1:3c:a6:a0:91:f3:b7:7b:04:
c8:f1:dc:d1:09:05:a6:46:05:97:ca:e1:71:a3:ae:
2a:1e:b0:f0:eb:e3:f4:27:72:10:c0:a7:e6:9a:b0:
5a:39:6a:7c:8b:c5:2d:ec:9d:cb:4d:1a:69:e6:d6:
39:7d:fb:96:6b:52:50:2a:f0:38:b0:a1:d7:d9:2c:
67:80:a8:3c:ba:fc:4a:3d:9e:fe:08:ba:ba:1b:4d:
b6:11:e2:b7:3e:2f:83:d6:24:b8:18:ec:2b:dd:7d:
74:82:0d:91:45:c6:d4:73:ab:b8:6b:26:39:93:29:
3f:8a:89:2a:24:34:38:8f:b3:0e:1e:95:ce:91:b4:
f7:18:15:4f:d1:3d:32:29:3c:0a:5b:87:93:d9:a1:
82:10:d6:c0:df:3c:4b:45:0e:cd:b3:bc:53:1b:9d:
56:d7:b1:75:c9:f6:65:60:63:0c:41:db:c1:0e:ba:
d9:1c:d8:5c:e3:de:6b:c7:33:95:c9:4f:bc:5e:0a:
6e:ff:52:e7:12:30:48:85:31:4a:d6:e1:b1:f1:52:
8e:39:2c:7c:01:8d:61:2f:30:34:69:bc:ea:fd:55:
49:17:f6:e3:8e:67:ba:9a:2c:5d:41:e9:96:3e:66:
8f:ba:4b:d4:5d:db:09:74:67:74:7d:a7:7e:38:4d:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:05:A1:1B:B5:A6:8D:0C:32:3B:FC:1F:C6:B6:11:EF:4E:10:C8
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:04:ea:c9:2c:1a:e7:6e:36:5e:cc:f8:4f:b2:1e:ed:55:9c:
62:d5:25:1d:41:8c:bb:04:62:44:c6:de:b8:0b:e8:fa:19:bd:
ef:7e:fd:bf:f2:9f:53:4e:cf:7f:66:66:94:c6:0c:12:c6:83:
c0:d6:b8:2e:39:18:2c:cb:78:d7:11:8c:33:23:d3:65:de:06:
2d:55:7e:66:33:b0:e2:d3:6e:64:a5:53:3a:c9:d2:dc:22:be:
03:9a:c5:8f:70:53:1d:53:39:97:15:d0:00:f8:9b:52:7c:02:
0a:09:d9:45:24:a4:0c:00:12:63:b6:cf:fc:a5:8c:62:1c:dd:
a5:43:a8:fe:42:7e:a8:55:f0:05:3e:e2:b4:b5:ab:50:da:1b:
d1:25:79:2e:82:dc:e3:96:1e:17:f9:28:10:28:5a:bc:28:13:
dd:db:2f:95:57:0b:85:f7:f8:e9:4a:05:44:7c:da:d6:bc:a5:
03:64:c8:cc:41:c4:f2:97:32:56:ba:1c:da:ca:05:0c:b9:ea:
30:f8:2a:23:da:9e:dd:05:fc:e7:ea:d3:99:88:63:40:5f:24:
94:29:57:4f:31:6a:64:c1:11:e0:9b:d6:02:db:cf:fd:c9:3f:
94:a0:05:0a:43:49:f7:5f:b7:e3:0f:17:d2:41:1b:b0:d1:10:
68:ea:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:04 2025 by rpki-client