Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: WmSvrAdyIwTWW5Xl9IbJcdywePXWZq/fY8lryNz5Kh8=
Subject key identifier: 4B:B7:07:BF:F0:5C:C4:C8:C9:8D:4E:62:D0:B0:C7:1C:E2:76:C5:23
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019874F539FDB3B5008C8576B2DDE9447A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 03E2
Signing time: Mon 04 Aug 2025 12:01:24 +0000
Manifest this update: Mon 04 Aug 2025 12:01:24 +0000
Manifest next update: Tue 05 Aug 2025 12:01:24 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: o6BCU8djNFm3an/XD11x/Gsh2dYofKxxkVD7K2jkigM=)
3: enRlxHW6TcEze5rGWZI2gDfXCHE.roa (hash: xU129rq7FUnm7ePypcr9hxj93/gj8+4MATOrtNcO+Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:39:fd:b3:b5:00:8c:85:76:b2:dd:e9:44:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Aug 4 12:01:24 2025 GMT
Not After : Aug 5 12:01:24 2025 GMT
Subject: CN=4bb707bff05cc4c8c98d4e62d0b0c71ce276c523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:e3:a1:90:3d:9b:1a:29:0b:96:cb:bc:f3:
96:74:d1:fe:34:8e:e1:b9:ba:0d:bf:b5:a8:8b:86:
d4:30:99:2e:70:d9:67:29:fd:69:d0:95:e5:be:90:
a5:03:0f:a5:8e:40:b4:81:1e:d4:5f:a8:d1:9f:17:
c3:9b:3e:81:29:2d:4a:a2:7d:9f:73:d9:f5:12:83:
32:11:99:ce:1c:70:a0:dd:d6:de:6a:52:2f:30:f0:
e8:5f:c4:f3:4f:f8:05:aa:6b:f6:8a:1b:82:e4:04:
fc:da:a4:15:1d:d0:09:66:11:2f:65:62:5e:61:14:
6b:2f:19:2d:b9:a8:f5:a6:73:54:06:25:68:35:8c:
d7:11:db:69:58:f0:02:75:04:4a:ee:f9:54:1d:e7:
10:26:cb:f3:9f:e0:4c:ff:81:cc:3d:2c:04:ed:34:
ed:f6:81:f6:81:d7:59:b9:bb:49:44:95:96:05:77:
a3:cb:74:2c:79:12:43:f1:7e:98:0a:0a:07:f8:da:
10:f4:05:f6:dc:42:29:cd:ac:3a:5f:07:cb:5e:6d:
e5:20:04:b8:00:9f:22:5a:a8:28:f0:37:06:0f:d4:
bd:30:3b:25:70:56:df:9e:57:18:9d:46:9a:ea:1e:
08:77:82:74:86:5e:4b:db:ee:62:f5:b1:92:07:a7:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:07:BF:F0:5C:C4:C8:C9:8D:4E:62:D0:B0:C7:1C:E2:76:C5:23
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4d:50:e0:15:ba:3a:33:fa:6f:1c:08:23:a2:95:ba:96:7a:
ef:d4:21:88:a1:65:f3:55:66:3d:d8:80:92:20:09:c2:2b:45:
3e:4a:a2:8e:3c:cd:e6:48:33:2f:53:11:c6:06:c5:78:f9:5e:
5b:62:32:a6:d5:bf:22:bc:54:0b:2b:1e:33:cb:19:7d:f3:82:
22:40:b8:09:dc:ec:e4:37:ad:6c:59:37:3c:54:b9:36:c1:01:
8b:f9:6c:5f:d5:1e:4c:3e:cc:6e:dd:94:d4:1f:02:35:3b:89:
8c:bf:45:59:5f:02:f6:aa:16:19:ca:64:fd:05:f7:2e:ee:7b:
21:71:e2:29:25:f6:46:82:46:57:53:9d:cf:4d:af:fb:8b:6f:
5f:f3:c5:24:2f:fe:45:04:89:83:fa:cf:b3:63:6b:13:8e:bc:
d8:ab:45:91:5d:43:63:bb:a9:4b:97:92:eb:4d:ce:74:ea:dc:
f5:85:86:1b:66:6a:34:f2:d1:01:bc:ce:84:26:c3:7e:bb:6d:
02:fc:f0:d3:b4:00:a1:33:8a:34:b9:92:87:39:88:5e:8f:2a:
69:de:54:ff:c5:1a:0e:79:a2:9b:01:e5:25:44:a0:51:4e:14:
d6:be:c0:7e:b3:b0:e2:8d:80:06:90:01:29:c0:f7:4d:32:ab:
df:d1:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:47:53 2025 by rpki-client