Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: yLxCJscpsp/OIQDsNTJcMelqXpCRNMWWE7K9qQGxQqI=
Subject key identifier: 1C:6B:3B:39:18:D5:A7:12:DD:B1:2C:9B:FD:24:C7:29:02:18:00:96
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019A4EF502F10C50C135901FFDC9EB778A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 16CF
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: 74gXywjraJOsQRnWw+O1rvWVruGVg6KtfE8G2pqYujE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:02:f1:0c:50:c1:35:90:1f:fd:c9:eb:77:8a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=1c6b3b3918d5a712ddb12c9bfd24c72902180096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bc:d9:40:bf:80:1e:23:94:c2:d5:7e:4a:85:
8b:d8:f8:3e:8f:54:58:e1:d2:e1:9b:93:fd:4e:ee:
61:e9:c3:41:39:83:e5:ca:f8:11:0d:c1:4c:63:d2:
83:0f:e8:aa:98:f5:82:88:f9:9b:0c:d3:e7:1f:69:
f0:07:6e:f3:7a:c6:7d:c7:ac:35:76:b1:8b:bf:d8:
ef:1a:bb:e9:3d:bc:1e:2b:1b:c6:ca:32:04:1f:42:
f2:7b:cb:da:9a:95:38:a2:60:6f:b1:59:c6:5d:75:
05:84:6f:db:07:6f:a9:f8:11:02:a4:4f:8d:8d:fd:
ac:00:78:b7:0e:3e:c5:4b:73:10:d1:a0:42:05:bb:
67:dd:a1:00:a2:96:6c:67:e5:5f:57:e1:6b:aa:57:
33:f4:35:63:3d:c6:de:f7:8a:b0:1d:2f:b9:b0:89:
1e:8d:bd:93:9e:04:41:6a:92:c3:c8:6d:ab:1d:68:
5a:d2:21:33:3b:e0:b2:f6:dd:7b:a0:1b:cd:6d:50:
55:37:49:fd:dd:9a:92:a7:d6:d6:61:c1:a9:4a:e2:
d4:f3:60:8c:09:2c:7e:a6:53:88:3f:c2:f0:73:ec:
68:9a:e2:5d:f0:ab:1b:74:0c:d7:ac:4e:9c:ef:0e:
2b:f5:48:a2:c7:95:28:3e:f7:2a:51:3b:7a:eb:92:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6B:3B:39:18:D5:A7:12:DD:B1:2C:9B:FD:24:C7:29:02:18:00:96
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:72:64:8f:3b:49:bf:0b:ad:ba:bf:1d:3b:4f:a1:cd:eb:
57:88:14:ae:5f:f1:fd:ed:5c:56:9c:d8:40:0f:2d:7d:d5:80:
9f:30:32:52:fa:94:1a:90:cb:59:f8:bf:1d:18:61:28:03:a2:
41:99:57:3c:15:47:f8:ee:3b:f9:92:39:6a:91:82:62:31:8d:
32:60:0c:4c:1d:5f:46:28:bf:b3:a2:6a:d7:5d:f1:16:46:80:
63:e2:c9:0b:ac:9b:71:c6:26:d8:d2:52:10:08:4c:57:a3:46:
53:28:6c:0c:10:90:72:c4:ca:7f:f0:bb:b3:08:01:64:27:29:
75:90:98:1c:fe:bd:15:f6:79:81:ce:da:e9:12:25:4e:fc:cb:
3b:28:11:06:db:65:2d:3a:cc:16:eb:67:da:c8:51:c2:59:ca:
94:5b:2b:00:96:ef:a9:39:aa:8a:b1:7b:56:35:9b:57:f6:14:
80:d7:da:04:38:24:5e:4c:f3:bd:68:99:82:f2:95:c2:c9:18:
b2:a9:aa:07:ff:31:db:38:74:1c:f2:e1:d5:9e:37:fa:af:c5:
53:0f:41:56:c2:73:aa:40:9d:89:b0:78:4c:31:0b:08:b7:19:
15:7d:c3:05:88:0c:f9:c1:93:60:cb:2b:e0:b6:21:85:81:12:
46:5a:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:48 2025 by rpki-client