Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: TAPL2v2oYQj78vTFdOC8NxJEw8R8Mnu8mWbLm7F1fbE=
Subject key identifier: 8A:23:3C:09:47:E7:97:E1:98:DB:5A:F5:50:DB:FB:D1:A9:3D:EF:B8
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019927EA0DD6006D6305FFDEFECDE36FB845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 16A4
Signing time: Mon 08 Sep 2025 06:01:14 +0000
Manifest this update: Mon 08 Sep 2025 06:01:14 +0000
Manifest next update: Tue 09 Sep 2025 06:01:14 +0000
Files and hashes: 1: Fhw6rDvK-EpkH1NrC2h_ewR3pQM.roa (hash: EVe8LbqKxm6DCm2LK8ufkvhi3Emu/5P3TM8Kz5KLl4I=)
2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: xvF7uTJemwl9UYFeJblRUuxMwweyqL/g8j/RunxSVXg=)
3: _8fFCRHPoQaRI1mjW0xFA_HxwGg.roa (hash: aFIPG5ynKuIs+c7Hkko3DBWslG70WfRTVWfqasGNQUU=)
4: oEno-CthzwQU-VjSao4UO7jaNkg.roa (hash: 3Rl3OLIGDkVrE/zgQbmmmkc8mI0JYDpAiiICVuTcrXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:ea:0d:d6:00:6d:63:05:ff:de:fe:cd:e3:6f:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Sep 8 06:01:14 2025 GMT
Not After : Sep 9 06:01:14 2025 GMT
Subject: CN=8a233c0947e797e198db5af550dbfbd1a93defb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:6a:06:88:70:02:03:84:5a:2a:9f:44:ee:
9d:8e:97:f2:dc:6d:b5:cd:0e:92:d0:d9:d9:bf:04:
23:2e:c4:88:32:d5:c6:bd:ec:5f:73:98:20:0c:92:
56:49:7f:7d:6e:3a:2c:db:08:d7:97:66:cb:89:64:
09:2d:68:05:48:4e:89:a1:14:c5:b0:78:17:94:bd:
1c:19:b9:54:0a:96:bc:ed:71:5d:82:39:b8:56:e6:
bc:e4:fc:af:a9:67:80:0d:3f:dc:bd:96:5d:30:d9:
c9:bc:73:08:0f:3d:88:5b:db:e7:81:e9:09:40:84:
8c:bc:bd:d3:7f:31:81:c7:48:21:50:c5:0b:dd:92:
c8:fa:3b:d3:7d:26:73:fc:ac:8a:cc:e2:c5:6b:c9:
74:79:0c:45:ad:ae:d5:7f:28:6d:35:90:5f:54:d3:
42:da:06:20:68:ff:5a:37:d0:10:0a:1b:b1:41:90:
be:1b:1f:39:14:3c:1e:b7:ca:3d:c0:2e:20:c5:eb:
34:16:3e:26:55:7c:7e:10:b8:34:df:15:3d:88:ff:
e9:b6:7a:81:92:cb:9a:44:a0:34:c1:e8:cd:7f:a7:
2b:50:44:d6:67:cc:da:1f:38:37:65:b1:9d:03:fb:
89:1a:a6:01:34:48:a1:7c:92:48:53:e6:1f:fe:4d:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:23:3C:09:47:E7:97:E1:98:DB:5A:F5:50:DB:FB:D1:A9:3D:EF:B8
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:62:53:c2:52:a6:7d:d2:2f:4f:3a:46:c0:f6:20:35:76:
a9:80:a1:51:62:92:a0:5e:88:de:ac:b4:52:34:37:5b:94:bd:
c6:78:ed:b1:ea:a1:92:2d:55:2c:4e:65:54:31:56:71:19:74:
0a:e6:2c:58:5a:95:e5:26:6d:5a:fd:23:4b:d6:47:58:73:35:
f3:e1:57:56:6b:ee:95:6c:d5:61:cb:9a:7a:44:da:ba:9c:cd:
47:d5:a3:ec:c9:b9:ca:2e:f5:d5:70:0c:c4:2f:e8:a9:3a:ec:
48:57:8c:a1:c7:68:0a:9f:d0:5a:0f:80:da:f1:a4:84:f4:34:
f8:ba:e6:4f:7f:7e:24:32:9f:00:48:a9:72:14:ac:32:12:b5:
12:7e:4d:34:d8:61:6c:9d:9d:db:b7:ab:24:b2:f9:ef:f2:e5:
a3:d0:78:c5:86:15:9b:2c:b0:b3:6d:c5:43:dc:4a:70:0a:61:
df:60:c7:af:1d:7b:bd:90:c2:bd:d8:ac:19:44:45:d6:f7:a4:
81:dc:4b:06:6d:cd:25:d9:2b:59:ab:c8:f1:45:1a:74:fa:b3:
31:63:b9:91:51:83:46:cb:2b:96:c0:13:e0:ea:36:98:01:ec:
21:e1:54:f7:7d:9c:35:8a:ad:32:36:03:f7:06:0e:41:3e:da:
47:d6:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:45:32 2025 by rpki-client