Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: XDjR5yZ4Zgs5zW9/vcY5ZpMMzRMv4JSySyB4Tu8pIAg=
Subject key identifier: 6B:74:15:85:98:0C:00:03:D4:FB:A2:02:26:5D:56:71:05:DF:09:0B
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 019923A0DFB72E0D8DE4CDA2FFA2DB875712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:02:49 +0000
Manifest this update: Sun 07 Sep 2025 10:02:49 +0000
Manifest next update: Mon 08 Sep 2025 10:02:49 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: 0ZoKXSft5xpPwIhiDzAklWzlA9ITD3WU+uZTx/vfFYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:df:b7:2e:0d:8d:e4:cd:a2:ff:a2:db:87:57:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Sep 7 10:02:49 2025 GMT
Not After : Sep 8 10:02:49 2025 GMT
Subject: CN=6b741585980c0003d4fba202265d567105df090b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:18:7a:a6:64:1a:6b:5a:71:2c:77:2d:1b:
24:ae:aa:a9:10:03:ed:d2:a5:71:84:8c:67:1b:8a:
d7:9f:ae:30:4f:93:ae:6c:e9:03:5a:ed:22:0d:e1:
c2:34:7a:f1:5f:21:89:b9:ff:3b:c7:a3:23:a5:fa:
67:b0:f4:60:62:7c:d3:6e:00:52:4a:d0:85:38:b5:
ae:49:b2:0b:c4:a2:6c:59:62:ee:cb:fe:8a:e9:8c:
f1:c9:75:3b:0e:0e:3b:8d:f7:d0:83:bb:64:0c:be:
36:04:a1:74:bd:60:db:e2:9f:13:a4:37:c8:df:ed:
f6:c0:c9:1c:3c:08:ef:73:a6:bf:fb:73:e5:fb:c2:
d5:09:fe:cd:84:ab:5c:2e:33:b9:c1:12:57:33:c0:
98:0c:14:94:be:5e:50:42:a1:8d:d5:a3:b0:a6:6e:
da:10:fa:f2:27:45:ec:42:2b:a6:14:05:98:74:ee:
54:2a:2f:08:a1:a5:0a:95:8e:a7:a1:d4:dd:97:eb:
4c:33:a7:c5:d0:14:4d:fa:2b:a1:4c:95:50:c5:b2:
04:f6:7f:b1:7b:14:2f:63:b2:25:11:9f:e4:ce:4a:
0e:48:d1:26:5b:bc:73:9f:c6:fb:61:4f:9c:ef:97:
d0:7c:f3:ef:29:0f:3a:83:dd:f3:91:5c:ff:b9:a8:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:15:85:98:0C:00:03:D4:FB:A2:02:26:5D:56:71:05:DF:09:0B
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a5:7e:a2:4c:9b:a8:85:c1:29:48:01:44:c7:b3:77:41:89:
8b:1b:0f:10:6e:79:50:ad:55:71:35:27:6c:78:c1:01:ca:c4:
7c:55:c9:4f:f9:41:9b:b5:ad:02:b4:08:6c:5b:f4:91:ca:ee:
c0:45:6f:9c:3a:86:55:ce:30:f5:de:3b:d8:48:6c:2e:6b:0f:
4c:d9:5d:fc:a3:f2:1c:c1:99:9c:9f:20:5c:30:8e:64:1f:48:
81:4e:2b:39:bd:d7:fb:e1:ce:ee:92:d2:63:01:17:79:c3:c4:
a2:00:58:dd:94:c4:56:df:8a:aa:ad:39:9e:f8:6b:3e:a6:07:
05:7a:e2:d7:06:74:4b:e7:7e:ac:29:ea:68:39:8b:61:44:a2:
70:9d:50:3f:df:9b:d6:fc:5b:32:a5:24:72:80:4d:05:62:e1:
5e:6d:43:54:c0:ff:f8:a5:6b:0a:1f:4f:f9:54:aa:6b:b6:6d:
db:12:88:17:4c:3a:31:96:09:38:f7:85:44:2b:de:29:55:5b:
bb:fe:2c:db:fd:5c:8e:3a:d4:48:c6:89:33:ad:f0:12:f3:3d:
c8:3f:8d:f5:db:b5:71:30:95:9c:2e:f3:67:9f:bc:e8:1c:65:
83:48:04:ee:f8:7b:e4:e6:4f:2c:fe:62:e5:a0:b9:17:cf:2a:
66:b9:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:51 2025 by rpki-client