
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
File: QYHCLrezLZAdElcA4UDrYAncxto.mft (raw, json)
Hash identifier: BCAvAQ601udDxRIgWeE5kESChvnwbHoBCKrbc7pox60=
Subject key identifier: F9:8F:E9:40:4B:99:CB:7C:2B:5A:C9:09:11:76:31:40:76:60:88:67
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Certificate issuer: /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial: 01988430FED258C89718E6D8CCBB94EB6751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
Manifest number: 1624
Signing time: Thu 07 Aug 2025 11:00:59 +0000
Manifest this update: Thu 07 Aug 2025 11:00:59 +0000
Manifest next update: Fri 08 Aug 2025 11:00:59 +0000
Files and hashes: 1: HitPQyHhpEoVidVOwqr2ddK23LE.roa (hash: UNtTyCfc7GR1gxgfjG0Y/XLw7gBd/DnSW8H0cz2SvrM=)
2: QYHCLrezLZAdElcA4UDrYAncxto.crl (hash: WHlC3+KYhRhW/3vgY7KtJ25J683Ewba/AVAq7XG4XtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:30:fe:d2:58:c8:97:18:e6:d8:cc:bb:94:eb:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Validity
Not Before: Aug 7 11:00:59 2025 GMT
Not After : Aug 8 11:00:59 2025 GMT
Subject: CN=f98fe9404b99cb7c2b5ac9091176314076608867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:ca:e8:e9:84:29:3d:2f:97:17:a5:49:d9:
6a:db:20:d2:38:e4:c6:59:8f:47:a8:9d:ed:6b:e5:
a1:57:fa:df:66:6b:a3:6e:27:c2:8d:55:c1:91:5c:
e8:89:e4:17:82:d0:60:2e:e4:4f:62:97:55:a4:e4:
16:cd:f4:f9:02:cc:13:30:c5:ad:55:fc:a2:92:6b:
43:88:07:2c:27:35:a7:48:bc:47:e6:c3:4d:99:ea:
98:db:48:f7:d1:a2:88:04:a6:83:15:51:f7:fa:26:
53:e0:1d:18:8b:7e:fe:9b:13:4c:df:75:da:9d:f7:
6d:45:cd:59:88:d5:f9:c4:cd:da:5a:4f:5d:dd:29:
32:e6:fe:96:59:a6:20:af:3b:1f:ab:3f:bb:48:0c:
eb:61:dc:ee:01:8f:c7:6c:cf:92:7f:73:29:6b:9d:
cf:58:33:96:77:35:f2:49:4d:ba:b3:79:ef:30:be:
c7:ee:66:4c:58:14:31:00:46:4d:1f:31:e7:ab:a0:
dd:e4:e3:a4:bb:ea:1d:9a:8e:bb:ba:8a:9f:4b:1b:
7d:61:ee:be:71:f9:36:e0:7f:13:3b:22:da:eb:ce:
c7:49:e6:f4:6b:74:67:45:9e:d2:5a:a3:1e:f2:65:
2b:68:49:4b:7e:37:53:88:05:03:1f:1c:8e:1d:94:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8F:E9:40:4B:99:CB:7C:2B:5A:C9:09:11:76:31:40:76:60:88:67
X509v3 Authority Key Identifier:
keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:41:b3:0b:cc:ff:47:e3:3d:3f:df:b0:d7:aa:db:68:8e:85:
7b:7d:37:36:49:ab:6b:93:78:70:73:a1:c6:71:2b:eb:1b:1c:
55:59:e8:b5:3f:2a:d6:90:55:2e:de:5d:40:4a:0e:b1:08:fe:
29:46:6b:fe:fa:4d:73:c4:d6:60:a0:53:75:8e:bd:50:a9:49:
db:01:44:d8:a1:8d:22:8a:70:07:da:aa:fd:9e:9e:cb:69:f0:
23:bd:2f:f1:1c:87:f8:e1:ae:25:c3:66:74:ee:26:34:ca:e2:
cf:1c:57:55:d2:3a:42:90:87:ea:94:e0:40:02:e5:49:7f:a7:
9d:3e:bf:17:74:ed:16:5b:ed:00:76:f3:66:b8:56:87:f9:ee:
2a:58:37:de:d7:49:2d:4b:5f:d0:68:1e:d5:ee:b1:5e:51:4c:
9a:99:10:05:bb:4a:16:00:2f:88:ba:5d:fb:6f:6b:9f:10:3a:
20:c0:dd:72:35:65:bd:04:b1:29:c1:3e:1a:96:7e:52:ca:ca:
2a:a0:16:8f:f8:85:5f:6c:22:7d:5c:2b:81:39:67:20:3d:16:
32:3d:f4:25:fe:7d:c3:d9:a0:18:24:8e:bf:1f:85:b3:8d:31:
13:64:1b:a0:9b:25:c8:fa:3c:27:5e:cb:c2:f6:20:bb:a4:bd:
a0:70:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:17:47 2025 by rpki-client