Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: JLmZB1pAODg+Vewdoz6XiGEPw5CGogJgc7HQI273HRo=
Subject key identifier: 6F:76:70:AE:B4:C4:E8:75:9B:5E:DE:7D:6F:64:22:DE:B7:E4:7D:6B
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 0199221EB9D5EBEB47361CD358D23D5D7C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:01:02 +0000
Manifest this update: Sun 07 Sep 2025 03:01:02 +0000
Manifest next update: Mon 08 Sep 2025 03:01:02 +0000
Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: jhg9vwuWW5p+kqIfusk+7mdkzieNmlSpGoPDIfmykHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b9:d5:eb:eb:47:36:1c:d3:58:d2:3d:5d:7c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Sep 7 03:01:02 2025 GMT
Not After : Sep 8 03:01:02 2025 GMT
Subject: CN=6f7670aeb4c4e8759b5ede7d6f6422deb7e47d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:3d:b7:4e:a8:18:e4:10:53:7f:c3:a0:c3:
32:17:3c:7c:89:ff:34:62:e5:bb:52:70:a0:fe:65:
8b:f9:f0:83:33:a3:63:9d:19:50:62:fd:b9:8a:68:
3c:b5:38:18:68:9f:52:de:27:f2:29:78:35:69:c4:
a0:40:b6:ec:eb:43:ab:9a:e8:f6:67:e2:47:5e:f3:
96:5a:48:61:1e:3d:5b:5c:9f:fe:53:35:79:6b:35:
d2:b6:82:d5:d5:82:5f:3b:80:fd:a5:43:40:82:44:
4c:d0:8b:90:07:af:6f:44:12:d9:98:a3:a5:f4:06:
6e:e8:52:a0:6f:ab:f3:30:6b:4e:ba:d5:69:f3:2a:
07:83:a9:df:62:7c:74:23:73:92:57:d2:3f:7e:fc:
15:5c:63:a6:47:a2:3a:4c:ef:90:53:d0:73:bd:3a:
3b:a3:39:8c:3f:43:bd:a3:25:3f:dd:93:72:0b:f3:
56:7e:ce:2b:0e:ef:dd:47:65:e7:3a:0c:ad:e5:26:
04:ab:f5:bc:dd:02:42:1e:34:58:a4:49:f7:93:74:
83:36:7e:a2:08:40:3b:35:28:ba:3b:02:27:02:26:
47:90:90:95:25:70:5b:05:cd:10:81:56:da:3c:36:
f7:e6:59:60:8d:c6:79:81:d6:98:83:4e:5a:2e:7b:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:70:AE:B4:C4:E8:75:9B:5E:DE:7D:6F:64:22:DE:B7:E4:7D:6B
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:58:27:67:1c:a4:26:73:a6:6d:71:ed:24:3b:61:8c:6c:
6e:a9:b9:65:61:89:9a:49:3c:4f:94:1b:6c:b1:e6:08:94:5a:
9f:c4:70:cb:35:66:d4:07:0b:10:dc:c5:38:eb:e6:69:9a:e5:
a9:a2:f9:9a:58:6a:50:9b:9e:96:51:18:54:51:71:e2:5c:5b:
ea:14:2d:48:19:03:26:a9:51:37:46:ee:53:c4:08:89:de:59:
47:74:d1:80:31:ca:2e:87:5b:7c:67:3d:e9:72:02:35:22:c7:
df:f1:fe:de:44:52:0c:de:aa:e6:83:42:19:5b:25:df:c9:0b:
c8:2e:f4:a8:04:9d:be:6c:6a:2e:17:1c:0a:43:05:e3:9d:6e:
64:ea:a3:40:d1:b3:65:fa:a6:47:b6:ae:57:a5:8c:be:3c:83:
9a:5c:51:d1:9c:5c:22:33:ec:ee:3f:47:15:25:eb:e1:7b:5d:
7a:33:37:77:88:e3:d8:ad:80:0d:4a:e8:59:b5:50:f3:01:70:
2b:65:bb:3e:0d:02:35:73:e1:6f:4a:d3:da:61:0f:d7:91:e5:
c4:12:4f:fa:86:5d:49:ff:af:71:6b:88:89:24:6f:15:8e:72:
00:f6:27:f6:95:6d:7c:a5:be:f4:a0:7e:a5:5b:d3:f4:79:05:
cb:7e:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:16 2025 by rpki-client