Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: +D4iNb4MNqT/A3a+6iJBZErMwbz9yy6B02Nr5HcsGC4=
Subject key identifier: 14:FC:EE:A7:9B:A8:DD:2A:E5:3A:C7:9C:18:53:41:6B:98:4A:64:5C
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 0199239FC438FEEB6C98C70CE4803CE61441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:01:36 +0000
Manifest this update: Sun 07 Sep 2025 10:01:36 +0000
Manifest next update: Mon 08 Sep 2025 10:01:36 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: PRIW7Ty5wFZDsdkqW2hNqU1yx0b9IKsjCpc6PdmSAvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c4:38:fe:eb:6c:98:c7:0c:e4:80:3c:e6:14:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Sep 7 10:01:36 2025 GMT
Not After : Sep 8 10:01:36 2025 GMT
Subject: CN=14fceea79ba8dd2ae53ac79c1853416b984a645c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:82:0a:2b:06:e0:61:a6:7a:4e:66:5b:5a:
5a:dc:ad:95:24:cf:2b:30:ac:c7:c2:9f:83:68:a6:
7f:50:e6:de:eb:aa:d7:87:f6:14:a7:bc:63:ec:36:
95:8f:2f:2b:05:aa:f2:81:d7:d6:0c:cd:be:cf:c3:
37:09:8f:cc:d1:9b:35:f8:66:1f:ec:3e:d4:67:df:
9a:7e:3a:4d:c0:38:19:8a:3e:6d:11:cb:4a:8f:59:
a9:ed:30:98:40:1f:18:f2:b8:a2:de:7a:4f:c1:70:
02:64:54:4c:92:0c:28:de:a1:77:9b:0b:2c:7a:71:
df:f3:28:17:7c:fe:ad:2e:43:ad:0f:8a:d3:3e:c3:
d7:b7:58:79:b8:40:9d:ba:01:9b:e3:5d:cf:53:57:
7c:bd:2d:de:80:06:ea:22:ea:ac:23:c9:cc:0c:d1:
9c:3b:80:c8:12:ec:1f:6e:a4:4a:d6:26:8b:c2:5e:
0b:4b:6f:11:9d:bd:97:5b:7a:39:bf:c7:8f:37:4c:
b0:d8:3d:24:b1:37:bf:78:33:7f:09:08:1f:f8:64:
5a:f7:5d:2e:62:a9:4b:72:f2:67:9b:62:cf:03:17:
4f:f4:5c:7e:e8:db:d2:9d:7f:4f:38:11:3e:c5:c3:
3a:76:b9:f4:b9:1e:3a:02:19:d1:0f:83:15:2c:22:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:EE:A7:9B:A8:DD:2A:E5:3A:C7:9C:18:53:41:6B:98:4A:64:5C
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7a:4b:4f:f5:c0:dd:96:28:fc:a8:1a:74:4b:f9:bb:d9:cc:
87:aa:17:ea:b6:eb:5f:e3:1a:75:fd:04:af:d7:2e:c5:2e:39:
1b:98:0a:48:f5:b9:af:2b:bd:95:42:d1:a2:35:c7:61:b9:1e:
e1:1a:61:cb:38:25:33:b1:ab:30:f5:ec:e3:94:42:e6:e4:ab:
d9:f9:02:38:18:91:ba:4a:99:1c:b3:49:60:8a:75:fa:be:36:
8f:da:e0:69:06:77:e3:2e:96:65:71:d8:22:5d:ed:5a:24:ca:
ab:53:c2:35:d0:e7:74:31:fc:b5:ab:0f:0c:cc:06:dd:d3:2c:
4a:6f:a0:3a:8f:e6:bb:93:1e:ea:cb:0c:66:ba:42:2f:b3:f5:
80:ed:8e:52:be:2d:a2:ae:b4:66:32:43:b3:3c:ca:fd:8f:ca:
22:e0:a8:a7:33:0b:1f:f7:83:e9:cf:13:56:51:d9:c9:ef:79:
9c:e8:fa:9a:51:d9:b7:b5:d9:25:ce:48:6b:bd:79:7c:71:62:
59:ec:20:27:9b:93:44:94:d0:ec:f7:0d:c7:72:00:ab:d2:67:
23:d1:e6:77:c7:89:89:27:40:e4:a4:4c:95:c7:ff:4f:29:07:
c8:5a:70:5d:32:7c:27:52:ae:b3:01:c6:a8:40:b0:50:d3:16:
36:a8:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:48 2025 by rpki-client