Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: h/HGTodkIQY/0faQcOL/K437giXMG5UlkQO3BTYb75g=
Subject key identifier: 21:AD:1D:AA:98:BC:CF:C3:B6:E1:EF:E8:E6:E6:C1:13:73:D1:7D:99
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 0199356EC961BADD00130BAE6C69149CFAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1680
Signing time: Wed 10 Sep 2025 21:01:16 +0000
Manifest this update: Wed 10 Sep 2025 21:01:16 +0000
Manifest next update: Thu 11 Sep 2025 21:01:16 +0000
Files and hashes: 1: QDogk9LeixWbk7Okb-SPGo3DZsc.roa (hash: UXsKXqumkYzMjQANzxQvweH31V1wu92CHEL8JuHdFNw=)
2: kH0g5rPWqjBkfuLE1LApLEjDCjc.roa (hash: shigvA4lT14D9eXfZ63hvEDmPyYkSuSNsvcpZeYP/tA=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: JiKHsrkp/EI0ANz7iIM2D9GWQHXcoi9PaIlWwtZXsxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:c9:61:ba:dd:00:13:0b:ae:6c:69:14:9c:fa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Sep 10 21:01:16 2025 GMT
Not After : Sep 11 21:01:16 2025 GMT
Subject: CN=21ad1daa98bccfc3b6e1efe8e6e6c11373d17d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5f:41:46:e3:25:d0:7b:23:ca:48:3d:be:cc:
cb:56:0a:a1:9f:01:2b:e1:79:56:b0:04:c7:11:d4:
f0:15:f3:76:4c:5d:69:60:6c:24:c7:36:b6:1e:60:
3c:c0:6e:ae:0a:13:f3:88:e9:8b:9d:f9:e6:07:b4:
cf:e7:68:26:e4:5e:1f:69:60:2e:21:33:e1:d5:fb:
aa:59:d2:e7:75:c7:f4:a0:2d:be:e1:7c:b2:0f:1a:
0a:c0:31:b0:dc:5f:e2:a9:ef:1f:c5:38:93:9f:61:
8d:8e:23:4d:22:70:ec:26:bb:7e:15:82:45:3f:d5:
b4:5a:e1:a3:c6:03:1c:a4:54:b6:b6:af:7e:8c:4b:
2d:6b:82:8b:4a:15:f4:7a:35:0e:f0:3e:91:b0:9b:
62:1c:99:88:52:71:95:06:d1:2d:88:9e:da:6d:03:
f5:64:22:7c:a5:92:85:3e:59:57:33:ae:53:cf:20:
ec:ae:45:3c:bf:b6:48:7a:bf:e7:69:56:a9:66:4d:
73:04:74:d2:5e:56:c2:9f:ae:e3:b7:9f:2d:d2:c2:
41:20:58:8d:65:80:db:db:39:29:4e:42:29:6e:38:
7c:34:6b:b0:ba:b5:fe:6e:f8:38:2b:05:07:e6:12:
87:40:34:60:aa:63:53:f0:98:ba:03:94:1b:0e:69:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AD:1D:AA:98:BC:CF:C3:B6:E1:EF:E8:E6:E6:C1:13:73:D1:7D:99
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:20:6d:be:16:eb:55:55:7b:5f:ce:a9:a8:df:b1:50:de:59:
1c:ef:6b:31:88:55:63:55:a1:fa:76:45:f3:39:1d:6a:55:e5:
10:8e:33:dd:45:b2:02:e5:53:29:c1:f0:db:e8:2e:87:58:6d:
c0:73:68:63:88:fa:3c:8a:79:22:22:11:28:9a:85:1e:0f:25:
66:42:26:b3:25:1e:56:08:97:e6:3c:3a:fd:cc:0d:45:27:ce:
8b:ba:b2:e9:e6:6f:35:9c:5d:5b:97:9c:7f:8d:b9:43:98:70:
d8:36:ad:e2:3c:a4:40:cb:62:95:14:f7:6f:06:8a:41:2d:93:
61:53:a4:f9:ac:0a:5e:3d:36:4d:37:7d:c9:c9:a0:cd:63:6b:
2d:f3:fe:19:50:55:f0:b7:ec:e5:ef:40:f6:cc:31:62:65:79:
34:2f:8f:c9:ba:6f:71:39:0e:86:fa:eb:21:93:52:f0:bc:59:
15:9e:fb:da:f0:b2:14:54:3e:34:38:7d:39:ac:fd:96:b2:0d:
f9:fa:42:f6:bd:5a:01:e1:31:46:46:f2:05:f1:25:86:28:c6:
a4:b3:4f:a0:84:1d:81:f9:47:66:4b:b0:74:cd:d2:52:cc:04:
e0:f4:09:17:a4:e5:3e:d9:52:13:ef:9c:52:1c:cc:1d:a0:5b:
fd:90:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:40 2025 by rpki-client