Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: QyufTMU2CHyMXDeYjBBvi/+dZy1+VKW4571142YscjM=
Subject key identifier: 17:C5:74:CB:1E:6A:9B:8A:A6:71:9F:0B:C8:6E:6A:43:5A:EA:A6:D5
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019922C3A8D47F8176A258F476B5438F278B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 14C0
Signing time: Sun 07 Sep 2025 06:01:11 +0000
Manifest this update: Sun 07 Sep 2025 06:01:11 +0000
Manifest next update: Mon 08 Sep 2025 06:01:11 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: HM2wptdDK1wtxEW3ZBjmsJC04HV47GlC+Zn4VluW6cc=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a8:d4:7f:81:76:a2:58:f4:76:b5:43:8f:27:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Sep 7 06:01:11 2025 GMT
Not After : Sep 8 06:01:11 2025 GMT
Subject: CN=17c574cb1e6a9b8aa6719f0bc86e6a435aeaa6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:ea:e2:d9:cd:f2:d7:79:c2:a3:b2:8b:5b:
59:21:18:18:a6:b6:e1:73:da:1b:37:3b:db:8a:60:
de:fd:07:38:f5:2b:ea:1c:4f:b7:8c:76:20:0b:24:
d6:8c:e5:65:2f:44:b7:7b:0c:2b:15:d0:46:b9:c6:
19:27:ca:0f:4b:89:06:81:0b:24:92:e5:87:8d:7d:
02:46:46:c7:c0:7e:2a:da:b0:8a:1c:db:01:44:84:
9e:0f:3d:b9:a7:06:be:e7:50:88:b6:af:19:bb:7c:
15:f4:10:4d:e2:ed:5f:81:0c:ab:f6:71:c9:05:c2:
a5:da:78:7a:6f:4a:f0:a4:12:f5:e9:64:59:98:85:
4d:5a:1e:8f:85:3c:b9:94:19:b6:b4:5d:b1:06:82:
33:ea:11:7c:68:a0:4e:ca:89:0b:d8:1e:35:bf:ef:
31:10:10:22:c8:be:f6:7a:b4:05:ad:82:42:d1:a1:
36:00:ec:96:71:02:05:e7:de:93:2c:33:eb:9d:12:
56:cf:41:13:39:c6:59:fc:66:0a:cd:7a:5d:ed:8d:
de:97:e3:af:bf:ee:1d:e6:4d:63:c3:cd:96:72:a5:
7b:64:c0:d3:63:e9:b0:ab:0f:c8:49:9c:11:b5:4e:
ae:3b:90:e8:58:14:20:7b:e1:4e:fc:cf:8b:01:03:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C5:74:CB:1E:6A:9B:8A:A6:71:9F:0B:C8:6E:6A:43:5A:EA:A6:D5
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6d:58:85:3c:a0:28:d6:1c:5c:19:66:a4:59:a2:63:53:6c:
4b:91:f2:a8:bf:1f:83:ca:03:d4:cc:68:4f:69:43:43:83:85:
49:b0:89:c8:de:a3:46:12:78:d2:f4:ed:0c:cc:8c:e4:51:b4:
8a:16:17:74:49:ea:d5:01:60:cb:8a:09:c8:f7:bf:82:70:a1:
dd:82:1f:32:57:6a:95:fc:e1:18:99:81:f3:a4:1e:6d:4b:f0:
e3:c3:4d:fd:b0:62:4a:d6:52:9b:f9:4e:22:0f:0a:4e:51:f7:
5f:ac:f7:f9:29:b0:d0:ea:30:52:88:a2:6e:cc:04:1e:a6:eb:
a6:1e:8e:a1:94:15:e5:fe:36:33:72:a2:bb:5f:e3:22:1a:80:
c1:9d:72:bf:83:e8:c4:c3:6a:15:10:c8:5e:01:bc:48:b0:61:
76:45:06:5c:89:a6:b7:39:06:54:f6:b0:f8:d7:72:79:17:8d:
70:89:0f:5d:9b:12:4c:38:a6:22:bb:a9:60:14:bd:d5:e5:09:
3d:32:67:c4:d1:81:1d:d3:53:07:a4:ba:ad:93:ac:da:de:a2:
04:2c:8b:35:ea:7d:4e:77:9e:2a:8a:aa:33:aa:25:68:be:21:
6e:0c:37:e1:a7:2e:8e:bf:50:eb:90:1e:05:08:e0:11:15:d0:
1a:ab:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:05 2025 by rpki-client