Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: a4rzEW9vvRjhPNA1uyypkzCISm637CUN4VVQG8POMh0=
Subject key identifier: C7:6D:79:58:64:7A:03:A7:B7:FC:85:44:4D:E0:C4:D0:1A:30:22:B2
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019922FA232B1DBDE16C01E7469487CD6A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0A6D
Signing time: Sun 07 Sep 2025 07:00:42 +0000
Manifest this update: Sun 07 Sep 2025 07:00:42 +0000
Manifest next update: Mon 08 Sep 2025 07:00:42 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: UFbC3bIi5AAgzeDLa+cOgQ13uMgt7H5TuTLq1boD3K4=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:23:2b:1d:bd:e1:6c:01:e7:46:94:87:cd:6a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Sep 7 07:00:42 2025 GMT
Not After : Sep 8 07:00:42 2025 GMT
Subject: CN=c76d7958647a03a7b7fc85444de0c4d01a3022b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:65:07:3a:44:f5:06:1a:34:90:7a:ba:92:
c9:53:32:11:27:1a:52:6e:f5:7f:6d:49:79:5a:66:
73:63:a9:e1:9b:1c:7b:b3:4c:fc:73:56:96:87:f2:
f9:3a:c8:86:f2:8f:84:c6:f7:df:5e:b3:17:68:38:
55:7c:1d:35:a5:e4:89:a5:be:01:73:f6:3c:49:47:
62:7e:13:61:46:50:4a:47:e9:ce:66:38:78:61:37:
8a:04:20:59:37:d3:bd:c2:68:a4:10:f4:5b:6a:6d:
4f:87:31:fb:c8:b4:38:3e:c0:fc:8a:78:ff:d3:00:
59:fb:8f:5c:5e:71:03:93:af:2f:94:d2:35:d8:12:
77:b2:32:01:f2:03:dd:dd:de:06:9f:cb:c5:52:6b:
38:d5:9f:12:71:ad:20:ab:42:be:74:3d:ad:8b:4a:
ae:71:14:24:dc:0f:ba:05:65:3c:83:a9:c3:b1:ee:
37:99:60:e4:51:45:74:cd:56:ed:fb:04:57:e6:57:
8e:89:2f:69:c0:ba:09:f3:3d:a2:e6:41:09:5e:47:
39:07:59:43:e5:99:79:83:28:c6:be:43:13:5a:a4:
ae:a6:87:f8:fa:3f:e7:c9:b9:c1:17:0b:25:61:7b:
8e:18:ba:ae:bf:cd:b1:e2:2b:67:27:b6:19:0a:c0:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:79:58:64:7A:03:A7:B7:FC:85:44:4D:E0:C4:D0:1A:30:22:B2
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a8:36:d8:85:e5:bb:99:61:04:05:89:f0:f9:c1:f4:fc:bf:
77:00:0f:28:b8:07:e0:64:a7:07:d9:f8:72:4b:05:2f:78:c9:
c3:b3:54:f8:9a:5e:2b:d2:d4:ee:f9:c8:30:c8:5f:66:22:2d:
ec:f7:d7:e2:1f:f0:71:87:00:b9:1b:85:e6:8f:90:85:32:64:
2e:77:db:3c:96:b0:a2:90:20:d9:26:10:ef:e0:1d:af:30:6d:
6b:79:94:b4:17:9a:19:65:28:46:36:46:d2:8c:72:8f:23:9d:
b8:7e:5b:e7:9d:2a:4f:91:d2:6c:32:12:de:52:25:0f:77:d8:
b7:fe:b1:08:37:98:8d:10:22:cc:c6:a4:66:62:48:ee:88:19:
75:e4:0e:9a:6c:b1:54:4f:0f:69:49:56:bb:9a:9d:80:3a:38:
59:27:cf:cd:db:00:9c:e3:d1:10:d6:91:da:2f:23:48:35:c3:
0d:b5:68:2a:d6:28:24:4b:d8:24:af:f4:a3:96:7d:87:f2:16:
d6:40:ad:06:79:03:35:a2:dc:36:13:82:63:39:b8:f1:c5:74:
cb:d7:b8:c1:76:4b:e5:ec:e2:b2:0f:a0:2e:a0:ec:31:5a:1a:
03:04:cf:81:a0:34:e9:93:ac:78:60:ca:a6:af:64:db:b4:46:
91:f8:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:09 2025 by rpki-client