Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: k2eR3UN6TERLW35KoBYZsvLjAkWhQ/NJvp0jidcAy2I=
Subject key identifier: D0:41:D8:8B:C1:49:45:02:B6:3F:9C:97:4B:35:DB:0C:51:57:1A:74
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019848893E938D046227A8C8F4B4DAFAA962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 03CB
Signing time: Sat 26 Jul 2025 21:00:10 +0000
Manifest this update: Sat 26 Jul 2025 21:00:10 +0000
Manifest next update: Sun 27 Jul 2025 21:00:10 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: Er+K72wHxRK01B0zBjAyeSfbpK+iVL4nOJL6AQ+o3kw=)
3: enRlxHW6TcEze5rGWZI2gDfXCHE.roa (hash: xU129rq7FUnm7ePypcr9hxj93/gj8+4MATOrtNcO+Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:3e:93:8d:04:62:27:a8:c8:f4:b4:da:fa:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Jul 26 21:00:10 2025 GMT
Not After : Jul 27 21:00:10 2025 GMT
Subject: CN=d041d88bc1494502b63f9c974b35db0c51571a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:8f:32:1f:cc:7d:26:d0:63:14:d0:d1:d5:
92:c8:3a:40:00:3a:0a:78:90:09:0c:76:a7:80:bd:
f2:58:41:a3:8b:c4:c8:f9:a9:b3:01:2d:18:15:12:
9f:72:de:f1:6e:e5:1e:d2:c3:c0:26:85:b6:15:6e:
bc:b5:80:56:cc:e5:c4:b2:29:a9:48:cf:6c:eb:46:
c9:fe:a6:07:cb:2f:63:96:b1:d3:8c:9e:89:4a:8f:
ac:c6:a2:97:0e:39:8e:d4:0d:31:23:d6:e6:7a:7b:
7b:6a:98:8a:e6:7e:60:5a:a5:c6:b2:88:24:85:9e:
08:25:62:83:88:26:fc:dc:06:b7:61:2b:b3:fb:d1:
6b:e8:c4:eb:69:06:26:29:03:22:43:60:cc:95:46:
f1:fe:11:00:20:9e:55:56:03:58:94:dc:4c:80:cd:
52:c3:da:6c:0c:40:99:59:25:bb:86:7c:d0:ce:5e:
1f:f4:d2:f6:6e:a2:70:2a:f7:1c:54:f3:4c:a4:72:
f9:1d:05:17:02:fb:c1:f7:c2:c4:0a:67:00:09:d7:
7f:cb:a0:fa:f5:5c:30:bd:f2:00:1a:fb:f4:26:50:
ce:fa:32:7f:d8:11:90:06:fe:42:8a:29:09:de:76:
de:8b:a7:10:4f:c3:d7:7b:7a:c2:de:6e:ef:dc:00:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:41:D8:8B:C1:49:45:02:B6:3F:9C:97:4B:35:DB:0C:51:57:1A:74
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4e:9d:4d:d6:77:ba:cc:62:db:fd:46:72:a7:32:45:6a:9f:
5a:87:dc:89:0f:e6:0f:91:ed:b1:6d:e0:aa:ef:36:58:50:08:
37:5a:74:22:c5:1f:1c:f6:a7:e0:d7:7a:5e:66:b2:6d:66:b5:
cc:f2:cf:0f:8e:d1:ed:a9:eb:3c:fb:20:0e:a7:a8:22:af:29:
73:64:87:62:55:2f:53:c0:85:ca:bc:25:43:49:8c:78:c2:e8:
ed:a3:23:8a:46:cf:39:d2:33:3b:9f:f2:85:5f:ca:0f:cf:80:
a9:22:99:a2:7d:3d:9f:9a:84:39:ca:35:55:64:42:7d:cf:5e:
89:32:c4:88:2f:7b:b8:2f:6e:23:c6:89:29:ec:a1:08:63:25:
65:78:30:a9:26:10:65:6c:4a:b4:1b:a4:cf:3e:d8:39:58:b6:
9b:24:90:0a:f6:ba:e0:28:fa:a8:85:63:80:73:d0:c2:3e:99:
7f:7e:73:80:a6:8d:9b:f5:15:29:34:08:ba:08:88:f8:8c:77:
57:5e:ff:10:aa:3d:b5:33:c1:29:55:47:4b:89:ee:64:bc:b1:
66:a7:f8:a0:dc:7f:34:54:25:b9:21:94:55:57:53:fa:97:fc:
20:c8:a9:a1:22:f8:25:16:4a:32:d5:45:21:12:cf:35:03:33:
64:1b:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:30 2025 by rpki-client