Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: R7wjspwsH/gdAWSiLVl6gEPWYNjkBOBqQf4c683ZkUw=
Subject key identifier: E4:3C:4C:88:57:F2:F6:FE:E2:E4:52:96:06:A2:E6:00:C5:EC:BD:EE
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019952D3DA1A30B95E2A263EC874609597B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1689
Signing time: Tue 16 Sep 2025 14:00:39 +0000
Manifest this update: Tue 16 Sep 2025 14:00:39 +0000
Manifest next update: Wed 17 Sep 2025 14:00:39 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: CsGFqLqD1VQ5HENs7nwRcaPStLiositMzc+nVoxWfOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:d3:da:1a:30:b9:5e:2a:26:3e:c8:74:60:95:97:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Sep 16 14:00:39 2025 GMT
Not After : Sep 17 14:00:39 2025 GMT
Subject: CN=e43c4c8857f2f6fee2e4529606a2e600c5ecbdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:f4:02:cc:56:bb:c9:5f:28:fc:06:0f:d9:
0f:84:e4:26:ab:d2:63:ee:db:25:16:ac:a6:e4:bc:
fa:57:ad:a5:98:3d:29:9d:41:62:ac:a7:45:25:94:
93:1d:d7:5e:f3:8f:4a:27:35:20:66:e8:ac:e1:50:
2c:66:44:00:83:ec:75:07:00:70:3b:3c:54:3b:12:
cc:8a:d9:04:3c:c2:c3:01:80:c6:fc:19:b0:68:8c:
cd:33:64:ab:8e:cc:60:af:3e:a8:86:3f:ac:19:2b:
45:67:ab:50:e5:44:9c:9f:3f:e9:5e:ca:a4:ae:ab:
0d:3e:89:7d:82:de:33:16:af:c2:f8:88:0a:2d:01:
78:51:ca:09:a0:c4:fe:61:c1:9c:7b:48:55:c5:0f:
a7:92:5e:8b:9e:df:07:73:8e:8b:bc:3f:86:ef:f9:
d9:ad:61:2b:f7:82:30:1c:10:c6:b5:4c:e8:f8:78:
44:03:27:36:84:12:d3:81:ca:3c:78:6d:27:52:c1:
db:71:dd:81:12:a9:41:2a:d5:72:07:ff:4e:0f:68:
81:78:70:13:7a:a4:c6:4e:04:bc:21:40:2e:82:05:
83:ba:15:ce:f0:84:88:52:3f:45:cb:51:06:4e:80:
31:b6:e3:ff:6e:47:fa:fd:10:e3:fb:34:2c:2e:df:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:4C:88:57:F2:F6:FE:E2:E4:52:96:06:A2:E6:00:C5:EC:BD:EE
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:bc:8b:bb:3a:6a:42:6e:74:e4:9b:41:9d:d8:8f:d0:be:
2e:86:63:d0:d9:1e:f0:cd:84:7a:f2:63:9b:a5:f6:90:09:82:
71:7e:65:bb:c6:a5:61:5b:5c:5f:76:72:80:10:e8:9d:e1:7e:
08:ce:40:a1:8a:ed:bd:d2:5f:ff:e1:57:0a:23:2a:4f:a8:0a:
9b:2d:5a:f2:e9:24:83:3b:e3:e4:70:86:50:08:7a:48:20:3e:
8b:70:0d:9a:d8:9d:3b:59:42:00:b8:54:70:df:e0:d4:1b:1a:
1d:db:04:92:81:8d:6e:ff:ce:c3:79:90:6f:58:b7:58:84:f2:
eb:d9:78:97:9a:3e:f2:52:b9:a3:4b:37:65:aa:98:82:7a:0a:
77:97:1c:c0:da:60:8f:73:48:44:e4:ff:1d:6c:31:02:fb:9d:
32:0d:8f:ec:68:a5:b3:98:86:0e:57:3f:e4:10:9e:68:c5:72:
d8:b5:f6:99:b9:4d:e7:67:ed:9d:f0:22:66:bd:bf:cc:db:d2:
4a:95:f4:62:99:a9:b8:e4:f6:dd:19:fe:4b:b4:ee:f4:54:ee:
8b:c3:bc:c6:cc:5c:f6:60:cf:67:45:5f:f5:25:97:b3:74:a1:
ce:10:6d:9f:3d:ff:0c:1f:8a:8f:21:7f:43:f5:9b:7f:93:44:
99:0e:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:24:47 2025 by rpki-client