
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File: QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier: fM8LJEQH14nmO6Ix7054MoJBY5xt8qJhXMujW0YNUw0=
Subject key identifier: 2F:63:EF:13:7F:E4:F9:1D:15:82:5D:2C:1E:E9:C2:7D:67:3D:4B:25
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 019944058993D7D81E002F3DE29E82882BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number: 1684
Signing time: Sat 13 Sep 2025 17:00:37 +0000
Manifest this update: Sat 13 Sep 2025 17:00:37 +0000
Manifest next update: Sun 14 Sep 2025 17:00:37 +0000
Files and hashes: 1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: w5D1k2xGPlOUk4BOaF5lFu6S55ZVfynOGSMUkosu6ac=)
4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:44:05:89:93:d7:d8:1e:00:2f:3d:e2:9e:82:88:2b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Sep 13 17:00:37 2025 GMT
Not After : Sep 14 17:00:37 2025 GMT
Subject: CN=2f63ef137fe4f91d15825d2c1ee9c27d673d4b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:49:81:31:f6:e7:fd:65:1e:3e:aa:99:42:
c8:53:2e:a0:9f:cb:ca:49:03:05:cd:79:f0:cd:fe:
77:53:c8:31:2d:4c:a2:a5:ff:a5:1e:cc:31:e3:f5:
e9:18:22:c8:74:af:e7:e1:77:0f:9a:32:32:be:1b:
f1:7a:24:92:84:4e:da:65:65:b3:e9:86:3d:d9:52:
8e:73:1f:2b:c0:1f:ae:78:cf:26:b3:75:1d:85:b5:
6a:93:48:07:f7:fd:fc:0b:4f:ef:cb:2f:7d:13:05:
ea:31:5d:51:cb:2d:0c:4d:f7:58:31:9a:84:71:0e:
ca:fe:49:cc:90:d7:ec:d1:e2:60:16:d8:4b:da:66:
a2:bc:cd:ae:83:d8:2c:65:6a:85:a1:47:b6:3c:5c:
01:ad:93:d8:d9:5c:ac:c9:02:a4:8a:af:91:64:f0:
a0:8f:9e:6d:3b:fd:e3:1f:5b:a2:01:68:1e:6b:f1:
b1:16:55:0b:b7:c2:ef:6c:71:c4:1a:8d:eb:06:ac:
d7:aa:81:a4:d8:da:41:02:67:1f:91:d2:1b:c2:e9:
16:f2:84:ef:8d:9f:01:c0:51:41:11:08:8c:e4:df:
c7:90:a1:2f:9e:a7:c4:95:c6:fd:18:c2:63:7c:e6:
4f:df:80:bf:b3:d1:2a:73:4b:7a:be:ba:9f:2a:42:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:EF:13:7F:E4:F9:1D:15:82:5D:2C:1E:E9:C2:7D:67:3D:4B:25
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:56:e1:c0:63:6f:2a:b2:bf:8d:91:d1:b9:5e:95:2a:e6:a9:
fc:0d:f7:a3:d6:32:5c:9e:2b:0b:46:71:23:bd:2e:e7:be:2e:
47:07:17:67:ab:99:52:95:80:67:03:8c:60:ab:09:a7:2f:93:
14:b4:e3:5a:32:69:ef:16:4c:dc:17:b1:98:67:58:28:4f:cf:
1d:ab:4b:83:f6:92:bb:59:59:6e:b9:21:46:66:38:9d:5e:f5:
b2:61:c5:2d:1c:bb:7d:d1:42:d8:12:4d:4b:7a:83:17:79:d1:
8e:41:1b:d5:d7:51:d9:6c:75:c0:aa:59:e2:0a:96:c0:aa:ae:
43:72:eb:bd:97:60:fe:78:4f:41:7d:4a:b2:a1:fc:84:e9:73:
07:e5:2d:4c:65:80:5b:57:da:96:06:cf:79:fe:65:38:5a:9b:
a8:b0:71:03:a8:13:13:5c:db:74:ab:0f:c7:f6:df:a7:ec:8e:
1e:8e:75:71:41:e9:e0:3f:2b:38:24:8b:36:e2:19:74:d0:8a:
ed:ef:27:45:cd:f1:69:5a:44:ad:cb:89:d6:b8:55:63:37:01:
af:f1:05:40:54:84:c6:e9:9b:06:28:6d:01:65:e5:8e:e6:8d:
15:c0:90:25:11:88:07:9d:1c:1c:97:99:a6:34:31:16:27:9f:
fe:f5:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 22:14:28 2025 by rpki-client