Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: kQxMQT+oBTb1mM2MpL0EsDLetfSNen4ykensmIcwH28=
Subject key identifier: 93:BD:46:91:A2:58:6C:06:5A:9F:91:BE:12:D3:4B:6A:AC:CF:68:80
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 01992D48707742B112DC88751CF572101BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 0566
Signing time: Tue 09 Sep 2025 07:02:26 +0000
Manifest this update: Tue 09 Sep 2025 07:02:26 +0000
Manifest next update: Wed 10 Sep 2025 07:02:26 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: tX5pyZPpmJHnuO32X98OmzJrHDv0EoeZsuQqnxa7gx0=)
2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:48:70:77:42:b1:12:dc:88:75:1c:f5:72:10:1b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Sep 9 07:02:26 2025 GMT
Not After : Sep 10 07:02:26 2025 GMT
Subject: CN=93bd4691a2586c065a9f91be12d34b6aaccf6880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:10:a5:47:a0:54:bf:56:11:e2:f5:4c:51:
fb:e5:47:12:c2:7c:ff:5d:52:60:b4:ce:b0:f9:54:
d0:00:12:64:c4:e2:6a:3c:45:38:0f:0d:e2:88:a5:
04:65:0a:3a:a4:bb:85:bb:88:da:ad:0f:17:3e:3e:
1e:aa:28:e0:b6:fe:78:ae:f6:02:10:c7:e5:1f:a4:
d2:60:b0:5c:5d:83:47:e4:40:b9:83:f7:6f:c6:30:
1b:ae:25:59:c9:73:bd:42:85:51:fc:bf:28:ce:e1:
9d:b5:bb:8f:40:61:c8:e0:5a:3e:64:3f:25:57:12:
1b:d7:65:8c:6a:09:3a:97:25:c8:d7:f1:24:2d:d9:
ae:29:4c:5f:bd:b3:63:02:0d:ee:08:87:c9:6e:c3:
6f:a6:82:53:73:55:33:b6:0a:31:3f:26:56:ee:2c:
ce:4e:5e:24:9c:64:6c:cd:0d:05:58:7f:e7:ef:b1:
d1:96:7a:a4:ff:61:4f:13:df:bf:e1:9d:99:74:df:
be:88:ca:b6:e3:8c:93:90:f3:a8:84:22:8a:e6:b8:
5e:80:52:b0:92:6d:25:13:84:50:cd:60:8d:9a:fb:
e2:95:88:6d:56:7b:f1:f1:ff:e6:4a:f4:97:d2:da:
c3:ee:49:dd:fa:4c:78:a1:01:bc:c8:e0:66:27:56:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:46:91:A2:58:6C:06:5A:9F:91:BE:12:D3:4B:6A:AC:CF:68:80
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c1:1c:0e:c3:b5:ff:b2:40:67:71:f8:3a:44:39:94:99:21:
84:1d:8e:07:65:0c:ef:ed:52:0a:52:bf:3c:bd:68:0a:ef:95:
b8:a0:20:39:35:06:54:5c:bf:60:56:7a:8f:fb:e1:26:a3:30:
8d:a9:11:7c:fa:b2:c6:c2:16:f2:97:96:cf:3f:df:a7:6d:27:
aa:df:a9:1b:1d:39:37:71:9e:50:11:c0:08:70:38:8c:af:d1:
5c:96:65:71:81:a2:b7:88:ce:50:c9:1c:cf:01:d7:4a:7c:48:
41:61:29:6f:9c:16:67:ec:4b:77:d0:3b:94:1e:d8:87:63:1a:
11:07:0d:10:29:03:d3:ee:9b:9f:98:3f:8e:c8:9e:71:08:52:
0e:ba:0c:ab:8b:df:44:cb:d9:69:b7:40:80:f9:91:69:e2:0d:
98:cd:3b:14:09:53:d4:8c:a8:87:cf:ee:bb:e3:7e:02:a6:1f:
d8:5f:71:ce:f1:0c:ce:72:02:0c:9d:94:f6:5c:68:1f:52:94:
f6:ab:49:de:91:a0:92:5d:ef:a3:60:69:bd:a8:88:78:a5:1f:
d2:43:bc:8d:f9:0c:59:d8:f3:01:f8:81:62:a8:d5:06:f2:3f:
8a:c3:bf:8f:b1:0a:99:2f:58:f9:33:11:fd:e0:18:b6:58:0c:
5b:0f:85:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:52:30 2025 by rpki-client