Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: ctF5TfXnNtQ0V4tzoE9dAhOFDNN3iyNctCd6T7nW4Os=
Subject key identifier: 1A:FC:74:AF:E9:B6:4A:41:F0:1C:01:E5:F6:A4:48:43:09:20:41:97
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 0198616EA30E2CF74CF93F050327F1545F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 11AA
Signing time: Thu 31 Jul 2025 17:01:37 +0000
Manifest this update: Thu 31 Jul 2025 17:01:37 +0000
Manifest next update: Fri 01 Aug 2025 17:01:37 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: mjNciikOFaDgC1DxoFoUn456rCHDPgjGN6heXOio1VE=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 16:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:6e:a3:0e:2c:f7:4c:f9:3f:05:03:27:f1:54:5f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jul 31 17:01:37 2025 GMT
Not After : Aug 1 17:01:37 2025 GMT
Subject: CN=1afc74afe9b64a41f01c01e5f6a4484309204197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:75:1f:05:c0:f0:7f:d8:d7:5b:73:76:39:
71:cd:e2:5b:01:8a:14:83:b6:82:d7:5f:9e:1b:c0:
92:41:84:76:60:94:bc:f3:48:af:2c:33:44:9a:01:
43:98:f2:33:ec:0e:ed:ab:2b:e6:f4:b0:fd:6c:9b:
6b:8c:17:4f:ae:9f:d4:cf:0d:e8:2c:14:55:9d:fb:
e8:3e:b9:6a:f4:13:a8:3a:aa:a8:8d:6a:a7:00:5f:
f2:01:74:81:1b:13:c8:72:95:92:ef:fc:73:f4:42:
10:3c:aa:a7:27:69:8b:88:0f:6f:9b:e8:d1:85:87:
3f:45:ab:a6:c5:5f:2e:17:ae:62:45:8f:0f:92:51:
d0:7f:fa:a4:b5:97:cc:1c:0a:1e:fb:c3:14:ea:74:
08:2f:27:60:40:61:17:d4:2f:a9:be:4c:48:7b:64:
35:c9:a9:2c:f2:bd:96:02:88:d2:4f:dc:41:c9:7e:
71:07:2d:b6:05:2d:6e:93:0f:01:f2:ae:fb:a0:95:
2b:59:08:a3:35:ea:d5:6b:8e:1d:d1:48:45:b1:26:
56:4a:58:f6:79:92:e5:cd:e2:03:21:68:b5:f5:34:
41:67:4e:be:1d:99:21:47:a7:29:98:ce:37:13:3d:
53:4d:54:79:62:59:b5:35:32:25:c3:8e:c2:b1:4b:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FC:74:AF:E9:B6:4A:41:F0:1C:01:E5:F6:A4:48:43:09:20:41:97
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5b:dd:c6:5f:d7:a2:b4:ca:81:f1:72:8d:65:e4:e6:3e:e2:
95:15:da:93:9b:57:fd:41:70:b3:6e:0b:60:ec:7d:e2:8e:7d:
dc:23:f9:8d:c2:40:bc:0a:50:90:65:d7:f3:d0:dd:a6:9e:47:
b1:a9:d3:cf:33:a3:ae:53:fc:05:b0:d4:1f:3b:4c:a8:f7:fe:
1e:8e:fa:30:c3:2c:58:ad:ba:1d:ee:3e:44:99:2d:56:7d:83:
73:39:f8:d7:b1:db:0e:8c:a9:bf:df:64:eb:e1:14:ef:f9:70:
d2:42:e9:24:a2:bf:96:ce:63:2f:d1:5b:b5:4c:bd:74:90:97:
29:c0:a7:c2:a2:f1:c4:c4:1f:3a:e3:ad:b2:24:3f:c0:03:51:
78:5c:e9:da:3b:21:64:10:c5:ea:03:54:0a:68:5d:d5:42:4a:
49:5d:04:e9:08:01:cd:05:14:79:03:e3:2f:60:de:1d:9d:39:
47:bb:47:ae:8e:34:a5:b7:b5:23:de:bf:0f:76:aa:d6:2f:47:
f9:5a:ec:c5:da:b5:4f:db:d3:d9:7f:7f:35:61:a5:76:47:d6:
81:7f:f6:3a:ae:40:0b:ca:2b:e8:a2:96:f9:e7:7b:22:48:29:
33:15:d1:4f:2b:d0:68:e7:e7:64:17:77:c0:7a:a0:ac:0a:4e:
7c:d4:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 19:40:13 2025 by rpki-client