Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier: 5XHYuQI0SgISk+/VJ+140d+35p1vnRaVmBwSXxK/4so=
Subject key identifier: A8:83:A3:00:2E:B5:38:A3:DF:6D:51:30:B0:28:F1:8C:C3:7B:A9:40
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 01987B2D921AFE6F709B9E72DE66341D08AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number: 12C7
Signing time: Tue 05 Aug 2025 17:00:40 +0000
Manifest this update: Tue 05 Aug 2025 17:00:40 +0000
Manifest next update: Wed 06 Aug 2025 17:00:40 +0000
Files and hashes: 1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: SxqkjnTmSUj6DpXDqTYaIeLHuUo2IYpuuc/IR2wy8kE=)
2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:92:1a:fe:6f:70:9b:9e:72:de:66:34:1d:08:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Aug 5 17:00:40 2025 GMT
Not After : Aug 6 17:00:40 2025 GMT
Subject: CN=a883a3002eb538a3df6d5130b028f18cc37ba940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7d:7b:f2:b1:da:b5:47:f6:86:a7:3a:3f:d0:
bd:ee:20:c8:38:db:36:64:64:2d:c3:a9:9b:c8:c4:
0b:de:0d:d5:2d:c9:e8:f0:6a:22:6b:23:1f:95:b2:
e0:e7:f8:a6:30:82:09:2d:7a:81:c0:33:01:fb:a7:
ca:e2:38:88:4c:8d:f9:64:15:c9:66:12:65:33:02:
0f:63:64:53:4b:92:d4:76:0c:79:03:c5:61:c3:bb:
23:f6:fe:3b:89:90:de:af:d0:41:79:6e:8c:b8:01:
0c:63:87:40:58:12:60:1c:79:18:5a:0a:68:1c:7d:
fc:47:bb:64:31:30:f6:80:8a:29:d1:23:51:19:85:
70:e8:ed:9f:55:95:f8:fc:a4:c3:60:cb:6b:87:4c:
50:2c:7f:f2:d9:4e:8c:6e:01:6b:6e:b1:76:c9:a0:
e1:5d:cb:9c:6a:e6:dd:6a:3c:5b:77:a6:85:90:6d:
7d:af:f8:49:44:db:fc:6c:89:0e:ca:91:ab:22:1c:
72:83:09:4a:4d:04:cb:2a:1e:9b:bc:59:a1:34:c7:
19:33:3a:9b:86:40:61:cc:91:69:71:b2:c7:3c:86:
13:52:60:61:2c:df:e4:23:2a:ef:21:f5:67:89:0c:
bc:b7:1d:2f:5a:96:8a:a6:99:4c:ae:ba:50:38:77:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:83:A3:00:2E:B5:38:A3:DF:6D:51:30:B0:28:F1:8C:C3:7B:A9:40
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c6:07:c1:67:a0:fb:6a:d0:c9:33:b4:e9:1e:79:4d:f8:3a:
ba:74:0c:34:a8:85:21:05:09:a5:90:d3:df:9e:70:9a:35:7b:
2a:83:8e:3f:9b:9c:c9:ff:4c:d8:d3:af:f4:31:5b:4f:5e:c9:
cf:da:dc:b0:2e:3e:29:51:ab:05:d1:64:c4:6a:8b:cc:b1:35:
1f:be:24:2e:3f:70:89:a0:e4:0d:6f:06:49:44:ed:0b:30:d5:
47:ff:76:79:d2:5a:dc:1d:ad:4f:77:11:22:79:14:49:8b:67:
90:2e:92:f2:97:ab:be:b5:c2:4a:09:5d:03:4a:51:96:2b:67:
c3:22:71:12:93:97:ba:2c:0b:cc:85:89:7e:1e:59:ba:43:c0:
c1:e8:91:de:28:da:ea:d4:74:e6:d8:28:42:d7:f6:48:e6:ec:
a2:cf:2e:d1:3a:9d:5b:52:60:bb:03:a1:33:0f:39:26:ff:55:
61:66:11:80:f1:9d:89:23:99:a6:96:f1:23:e9:f7:1c:f9:5f:
93:b6:17:e0:49:ad:8c:f6:ae:4c:8d:45:03:02:3d:06:e2:be:
86:6f:da:3e:7f:00:59:ce:9d:58:ec:31:b2:a0:dd:57:ca:29:
88:c6:2d:c8:70:18:08:fc:b8:88:f0:ad:4b:d0:d4:58:7d:a1:
26:fa:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:07 2025 by rpki-client