Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: IxiZzZ+QzX6Fr3z8eMYolS/pxoTGsGHP45ImvIbMKHc=
Subject key identifier: 33:AD:A4:10:ED:48:82:A1:A0:BE:50:CF:0D:70:27:EA:CB:78:6E:DC
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 019922C35B49527363703EB99CBBD2C3F35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:00:52 +0000
Manifest this update: Sun 07 Sep 2025 06:00:52 +0000
Manifest next update: Mon 08 Sep 2025 06:00:52 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: R36PmA1GjOtuDVPe3OVsUh/tXjaOOPmm/RRMbYGHsF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5b:49:52:73:63:70:3e:b9:9c:bb:d2:c3:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Sep 7 06:00:52 2025 GMT
Not After : Sep 8 06:00:52 2025 GMT
Subject: CN=33ada410ed4882a1a0be50cf0d7027eacb786edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:6e:8f:d9:18:a1:3f:af:86:bc:e5:5e:70:
fc:c0:ca:dc:be:fc:23:b4:4a:61:96:a6:7f:79:c4:
b2:5e:f8:de:c9:4d:ab:e5:c4:b4:fd:13:35:96:b2:
10:c6:47:ec:da:fc:3b:97:53:3c:27:d0:38:ed:da:
fe:bb:90:fe:28:40:d2:d8:55:6a:b0:9e:a8:df:b9:
d9:9e:b5:f7:71:e9:62:95:7d:81:19:d0:b7:f3:fc:
ac:30:4c:30:89:1c:91:a3:64:b3:aa:7d:a6:4b:56:
e6:cf:4d:6b:bc:96:2a:1b:91:21:e9:fa:c3:c8:e0:
a6:c1:8d:1f:20:8e:fb:d8:b8:32:c6:18:96:90:4f:
e0:7d:ae:7a:f5:3c:cd:42:b1:8c:b5:f9:95:34:63:
99:9c:6e:23:fd:fe:da:3c:a1:e3:30:ec:8a:29:d8:
04:e6:54:89:4d:5b:82:08:d7:93:0e:dc:00:96:e4:
76:b5:14:84:af:a1:c2:a8:84:47:30:4f:74:e6:2b:
9a:aa:f6:dc:92:c5:a4:e2:24:38:d2:0b:dc:3f:7f:
83:cb:eb:23:76:ae:95:22:31:d9:4a:d7:82:db:92:
4e:17:03:06:0a:fd:ac:03:a3:0d:05:16:4f:31:61:
7c:8f:bb:01:0b:64:91:05:6c:73:6b:14:36:a0:12:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:A4:10:ED:48:82:A1:A0:BE:50:CF:0D:70:27:EA:CB:78:6E:DC
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ee:db:9a:b4:ad:c0:d2:88:e8:a7:6e:7e:a8:db:2f:04:da:
56:64:36:1f:1e:9f:8a:4c:38:20:95:be:66:f6:3a:23:6a:e1:
5d:34:f4:2e:57:f9:24:ae:ad:ba:9f:74:86:f0:f8:80:eb:ea:
ba:c2:af:d8:ef:a1:c8:89:2e:2a:d8:69:7f:b6:4b:3b:4e:2c:
e4:ee:ad:3e:be:ec:8e:56:78:3b:58:8e:19:80:12:3e:3f:f9:
e4:12:8c:c8:cb:66:22:25:53:f0:96:48:6e:ee:50:a4:58:bf:
7b:ad:b9:15:81:7d:52:56:12:6e:a7:cd:ca:04:2a:98:67:e7:
c2:ae:90:8a:7d:3e:31:7a:a2:21:bc:93:35:f3:4c:4b:e0:25:
f5:6f:11:04:69:eb:5f:d0:d6:21:6b:67:11:49:19:29:11:ec:
17:12:7d:e6:af:75:83:fd:7f:39:55:be:46:c5:09:88:98:25:
0f:bb:2e:74:90:97:d6:d7:69:4f:91:05:b3:69:1b:d3:05:73:
77:92:c3:57:4d:0d:93:82:fb:95:ec:98:15:41:5a:ab:13:d8:
3d:da:bd:e1:09:6c:fc:49:31:ff:1f:f7:92:ad:c8:3c:c7:68:
84:63:94:61:29:25:df:37:fe:5d:bd:a2:3d:3a:27:1b:5d:9c:
ea:b1:dd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:02 2025 by rpki-client