Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: e5POLbknA0lWWZC2Y46qhbuKu3NWiVPxzbVcZbWzpAw=
Subject key identifier: 17:D7:25:8E:27:E9:1C:59:B2:80:DE:AB:0F:2B:54:01:6D:7F:02:51
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 019878D1C27C3849FEECE1E9939EBF97CC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 06:01:09 +0000
Manifest this update: Tue 05 Aug 2025 06:01:09 +0000
Manifest next update: Wed 06 Aug 2025 06:01:09 +0000
Files and hashes: 1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: 6BrWhEEgRmslDknoYN84nzC40BaFrAi4KaIDX6cFdWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:d1:c2:7c:38:49:fe:ec:e1:e9:93:9e:bf:97:cc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Aug 5 06:01:09 2025 GMT
Not After : Aug 6 06:01:09 2025 GMT
Subject: CN=17d7258e27e91c59b280deab0f2b54016d7f0251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:dd:c6:0a:4a:0b:52:cc:76:9a:da:7e:41:
49:7d:51:ca:9b:39:f3:fe:b0:4c:94:4b:32:03:36:
14:85:36:f6:2d:21:1d:30:ba:27:7f:de:50:c1:27:
63:8a:4a:cf:2d:2d:3c:00:5e:ba:17:f8:ea:cd:a7:
1d:70:7c:dd:a0:f9:0c:70:52:7f:65:a1:47:af:28:
d0:2f:bb:69:12:07:f2:3d:89:ca:2f:3e:ea:e1:17:
bd:f1:79:c7:89:4f:42:2a:43:d3:9c:88:6d:11:b1:
4a:e1:2d:95:78:78:68:68:63:ca:2c:69:fd:a5:6f:
25:07:dc:99:aa:e0:de:dc:cd:aa:9f:92:7b:39:4f:
8b:86:3e:76:46:a7:1d:64:bb:a6:88:79:b0:fa:a6:
98:5b:7c:11:d3:b2:dc:8f:f0:19:45:71:8e:3a:86:
fd:45:7f:be:00:66:28:30:33:5c:b8:4c:83:ab:bd:
4c:b5:5f:9a:24:f1:7b:61:f2:3e:84:52:41:58:80:
5c:98:58:fd:63:46:18:d3:56:a9:c4:36:b6:36:aa:
94:02:ac:3f:67:d5:25:b1:ee:90:fe:6f:1b:75:43:
ed:c9:e0:e2:32:69:c3:27:56:10:73:49:46:59:6b:
b9:9f:5b:8c:1b:4f:8b:76:52:15:29:ba:2c:56:50:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D7:25:8E:27:E9:1C:59:B2:80:DE:AB:0F:2B:54:01:6D:7F:02:51
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c6:34:73:6d:00:b3:4f:9c:75:b1:58:32:40:5b:30:0e:e8:
d7:cb:4d:b4:1a:16:02:ca:54:f1:fc:1f:04:73:61:34:7e:9f:
1a:e2:26:d9:62:2d:24:d3:e5:67:76:a6:36:a7:e2:cc:e3:f0:
92:33:ab:6d:18:c1:b8:39:7a:45:ca:97:f7:dc:14:d5:c4:f8:
01:dc:bb:76:89:41:5e:a8:3d:62:9d:4f:1e:e4:9e:46:bf:fc:
ca:ef:28:d7:9b:dd:97:79:10:43:d1:46:db:09:cb:95:e6:29:
3f:53:54:63:ca:ec:d2:75:a0:a7:9d:bb:4b:ac:5c:cb:5b:67:
37:09:b6:c8:1b:07:38:e1:41:d0:75:7f:5e:89:11:91:7a:74:
b0:79:6e:8f:30:86:c1:79:05:07:77:de:25:54:19:f2:83:bd:
ba:e7:e1:13:4e:ce:ea:3d:5b:2a:62:f0:54:44:b3:9a:8a:be:
f6:63:7f:8e:60:de:d5:23:6b:14:e3:29:31:b8:ce:43:35:1b:
56:e1:d9:8b:51:b9:9f:3d:cc:61:22:81:9c:08:b3:1b:c7:d2:
04:78:d0:dc:49:61:ad:d7:3f:2b:e5:56:f6:9f:4c:66:7a:79:
8f:c8:1f:ea:fe:9a:71:c0:67:71:0c:1a:bd:85:e0:06:95:a2:
b8:be:6c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:19:32 2025 by rpki-client