Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: NkmJn2ybgd8dFT8Z6bqZ0yqo3dmKqFCpebaNMO1aGWw=
Subject key identifier: BA:03:00:A7:AE:0C:14:97:B2:82:A4:3D:2D:E0:C5:AB:65:03:37:7C
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 0199239EBAF1A869F782F99D5D0F443AB659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:00:29 +0000
Manifest this update: Sun 07 Sep 2025 10:00:29 +0000
Manifest next update: Mon 08 Sep 2025 10:00:29 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: ea7k7gddX8QqfAVc7C8Xrv5L2CCUVWhejeL2koCSNnE=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ba:f1:a8:69:f7:82:f9:9d:5d:0f:44:3a:b6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Sep 7 10:00:29 2025 GMT
Not After : Sep 8 10:00:29 2025 GMT
Subject: CN=ba0300a7ae0c1497b282a43d2de0c5ab6503377c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:f3:96:b5:ee:2c:cd:5b:7b:0e:8e:d8:66:
57:5a:91:57:aa:25:86:e4:b9:60:4c:b5:23:a2:48:
a3:01:a2:e1:89:95:9b:ba:f5:c0:20:33:c3:d1:d9:
f2:9e:c3:06:dc:9f:a1:82:d9:b1:45:f5:52:76:2b:
e2:f1:1c:05:61:11:ff:88:99:fd:2c:1c:83:2a:e4:
42:12:56:49:5c:15:af:d0:6f:f5:d2:ce:66:27:48:
02:f7:56:92:67:61:58:a1:52:92:43:c4:ae:9c:18:
86:97:79:a3:9e:92:f5:56:44:14:fd:40:c7:30:e9:
4e:0e:b7:11:a5:db:93:84:ad:cd:bc:89:95:e5:ea:
46:06:7d:63:3d:10:55:9a:d0:33:08:0c:f3:5a:75:
d8:b9:5b:60:31:fd:5e:b9:29:e9:e2:4e:72:60:97:
8c:b2:0f:2f:e1:05:dd:6e:44:52:14:52:e0:76:14:
31:b6:66:6e:c9:af:69:1f:39:73:a1:74:35:bb:1f:
a7:a5:4c:90:8b:80:e9:12:0c:f1:ad:d1:84:6f:13:
21:cd:71:00:2d:a9:0d:73:3e:a9:95:22:37:5e:5d:
16:a8:45:aa:94:f0:f7:f9:b6:f1:4d:9f:ea:b3:d1:
27:fb:cc:36:9a:b2:51:8c:a3:4e:dd:d2:53:51:55:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:03:00:A7:AE:0C:14:97:B2:82:A4:3D:2D:E0:C5:AB:65:03:37:7C
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f7:2e:91:54:6c:6e:19:3a:33:f9:4e:3e:3f:90:34:6b:8a:
36:df:8f:c6:2c:42:68:4a:e3:7a:f6:cd:bd:a5:dd:5b:fc:c2:
bd:12:96:20:26:b7:26:b3:a4:17:41:ae:1c:22:bf:21:ce:6a:
c5:48:3b:46:e9:53:76:14:23:9b:23:fc:20:30:66:40:c6:fd:
1a:23:dd:aa:b0:c9:56:d9:94:f8:f0:d1:96:8c:79:52:ac:88:
a8:13:db:ba:e8:74:80:53:d4:c9:fa:8e:51:9c:36:e9:76:64:
5a:1e:11:35:ea:0b:71:02:f5:00:7f:de:35:87:43:7d:ee:bc:
05:21:35:db:e2:44:23:e0:28:a1:2d:3e:3d:85:d5:66:fd:23:
db:fc:f0:a8:9b:57:b3:06:28:ce:b2:bb:07:40:45:1c:1c:5a:
7a:85:ef:d4:e1:fc:a3:af:16:a8:0e:99:ed:9a:e5:30:a2:fd:
ba:8f:10:d1:0a:13:ad:14:ac:66:dc:68:e4:9c:14:7e:66:c7:
8c:6e:5f:a0:9d:6d:51:09:47:4e:a2:5e:69:22:1d:f1:f7:a5:
99:d4:6c:27:db:99:04:4d:d0:62:d8:a5:1a:ba:7c:9b:1c:0c:
29:ec:2a:a1:14:9b:29:bc:82:de:fd:f4:78:dd:57:43:fd:eb:
91:41:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client