Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: z76xd/shQHWffNWF/GJBSUaDzUBXfqz34GgVxe5g9d8=
Subject key identifier: 8F:C1:89:DF:F8:44:EA:69:2E:52:25:9D:D8:20:A9:C7:C3:61:93:C3
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019921E7D4EE7CD2EC8BC0A307203C8FA2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: 73
Signing time: Sun 07 Sep 2025 02:01:05 +0000
Manifest this update: Sun 07 Sep 2025 02:01:05 +0000
Manifest next update: Mon 08 Sep 2025 02:01:05 +0000
Files and hashes: 1: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (hash: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=)
2: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (hash: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=)
3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: bUhSN3zWTbX5rbM70sdxLZSA3+EA2m2j2ZjKmYZe/Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d4:ee:7c:d2:ec:8b:c0:a3:07:20:3c:8f:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Sep 7 02:01:05 2025 GMT
Not After : Sep 8 02:01:05 2025 GMT
Subject: CN=8fc189dff844ea692e52259dd820a9c7c36193c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:4c:b6:90:4d:a3:e6:f3:00:c1:60:93:85:
86:f9:9b:89:8a:3a:27:c4:90:1e:46:ac:32:63:79:
3b:90:d1:3c:b9:2b:82:58:1e:8d:50:5a:c5:34:8f:
0d:c0:47:ed:14:6c:4f:a6:10:5a:71:1b:27:8a:38:
2f:e4:80:f6:cb:c0:e7:db:a5:37:b8:57:b3:79:fd:
ec:ac:3f:14:23:f5:07:31:47:1b:75:97:eb:67:22:
8e:40:10:29:b7:03:1c:ed:81:75:e0:d0:03:4c:d4:
04:93:19:80:57:14:0e:52:91:7a:dc:af:6c:0c:bf:
32:32:c6:7e:ca:88:77:d7:f9:22:12:02:bb:c0:5d:
6f:ec:4a:39:e1:81:0e:ed:14:3c:16:89:36:82:07:
be:56:6f:89:cf:a7:c8:fe:2b:72:76:6f:da:d5:cf:
ad:ec:12:f6:5b:3d:d6:7c:c1:cc:42:eb:03:02:f2:
21:77:f7:ca:56:ce:c5:8b:7d:8b:21:6c:14:ee:78:
95:3e:fa:9c:cd:ce:93:32:80:39:01:d9:d9:91:bf:
07:99:87:ac:66:6e:e7:4b:49:2d:25:08:17:c7:7d:
e2:fb:ae:a4:0e:c1:35:f3:90:87:c8:80:7d:e0:96:
59:be:79:32:7d:82:1f:e9:b9:9f:21:8a:72:27:30:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C1:89:DF:F8:44:EA:69:2E:52:25:9D:D8:20:A9:C7:C3:61:93:C3
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6a:8a:2f:0f:14:ba:a8:be:d4:29:9e:7c:36:6c:6d:b5:36:
ac:7d:50:9e:d6:96:18:8b:8b:47:3b:ef:80:70:42:cf:04:80:
70:d2:47:bf:bf:dd:e7:de:c3:98:18:91:a7:ce:af:54:da:06:
f6:c1:b7:f0:6b:77:4f:9e:87:c9:2d:c3:f8:b5:1a:02:a6:c0:
cd:cd:4c:16:72:b4:91:0b:2c:34:58:f1:9d:62:0e:a1:d1:c6:
09:2c:5f:22:99:92:16:b9:8f:4a:ac:4d:8b:0a:2f:51:fb:c7:
3c:3e:2c:fa:28:e4:d5:38:b5:5e:f5:92:d1:cc:a2:b9:41:2a:
87:94:fd:4a:5e:2e:ad:be:2d:3f:71:b1:3a:54:62:a9:72:82:
66:fa:7b:53:b2:ad:22:07:0a:1f:47:94:dc:89:b2:77:62:60:
a9:c6:c2:c3:8b:19:24:b6:00:20:08:73:3f:7e:ef:52:62:63:
ed:95:51:8c:b3:cc:9c:c1:d0:71:9e:07:4b:7a:a4:7a:ba:84:
6b:ef:2f:8b:a4:6f:ad:af:55:76:a5:48:f5:df:c4:87:3a:92:
71:72:1f:aa:15:4c:35:07:c2:cd:ac:2a:ac:52:b3:05:d7:6b:
8e:b3:7c:4c:01:84:b5:c9:94:b1:d7:39:57:44:f2:4c:c1:0d:
44:1a:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:05 2025 by rpki-client