Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: 5fiuMnBCnu0j/zZJUkMjy49KJ77I1e9b+Ux9xF6fLc8=
Subject key identifier: 60:CA:06:90:D1:A2:BF:1B:12:B3:76:40:EA:8F:B1:07:70:F1:90:9A
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019A5C79323720E07B913E29BAFB5D8B2AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 16D6
Signing time: Fri 07 Nov 2025 04:00:37 +0000
Manifest this update: Fri 07 Nov 2025 04:00:37 +0000
Manifest next update: Sat 08 Nov 2025 04:00:37 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: cQkVl5GEcmKLrajEOveqGgwfpAVzynXDV6JbBeu9xTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:79:32:37:20:e0:7b:91:3e:29:ba:fb:5d:8b:2a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Nov 7 04:00:37 2025 GMT
Not After : Nov 8 04:00:37 2025 GMT
Subject: CN=60ca0690d1a2bf1b12b37640ea8fb10770f1909a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:c7:a9:53:97:51:d0:33:60:f7:b1:a2:25:
c9:c8:9b:fa:18:24:fc:e9:64:b0:01:05:13:75:70:
f1:9a:b2:17:0c:e6:01:65:1a:0c:b9:d0:ce:1d:41:
5b:a2:2e:2f:e7:64:5c:13:14:b4:9c:9a:0e:b8:76:
5c:d9:4e:05:98:9f:a9:b3:55:96:77:d3:55:91:99:
e6:9a:4a:f1:08:f1:4b:98:4f:1b:5e:f2:8a:1e:4c:
56:51:a0:f3:70:23:9d:40:42:3c:d6:30:8f:c3:36:
35:5e:5d:2f:17:84:80:19:9d:0a:ed:17:cf:72:1c:
52:fb:f4:76:58:82:2b:81:63:1d:ab:68:48:4c:01:
c6:d6:e9:42:50:e7:cb:ec:76:9d:ac:87:bb:92:c3:
b5:85:2e:da:87:9e:48:30:2c:47:76:0b:54:ea:d2:
f6:46:08:66:74:f1:38:fd:a9:62:1c:17:6b:d4:96:
20:e0:d5:a9:d7:2d:17:84:17:b5:61:0f:c4:6c:17:
5d:63:58:42:ee:bc:03:c2:9f:df:f4:e7:70:e2:68:
8c:75:48:0a:99:9e:e7:ad:fa:c5:3d:de:ca:59:7f:
1a:8c:27:0b:79:e4:86:bb:3e:3d:c1:e7:ba:cc:7a:
7c:8b:4e:16:9b:bc:77:67:ad:2f:31:4a:ee:00:30:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:06:90:D1:A2:BF:1B:12:B3:76:40:EA:8F:B1:07:70:F1:90:9A
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:92:e4:73:5c:c2:79:12:14:16:1a:be:17:1e:f8:38:33:2c:
bb:fc:11:40:f4:c2:22:2b:4d:8a:af:c8:a7:e0:27:24:48:e5:
51:f8:82:de:a4:16:df:ee:8c:36:2c:f7:04:5f:53:76:2a:c2:
88:38:c7:1c:09:c4:96:cc:d7:58:44:4a:5c:c4:36:b2:91:86:
ab:5c:50:b7:71:cd:4e:61:34:f1:8a:c8:86:cd:76:86:70:57:
29:9b:c7:6d:83:4a:29:2e:fb:35:41:a5:84:5d:72:34:15:e3:
51:49:0b:bd:49:06:5a:95:69:77:3f:5b:35:59:cb:d0:90:d2:
8c:f6:57:2e:26:aa:41:23:0f:80:96:dc:14:ab:ca:95:58:a4:
ce:23:b4:2c:c1:b7:69:a8:d8:2b:15:97:dc:0a:80:d9:e7:29:
08:e0:0d:2a:fe:e2:11:2e:88:3c:8a:e4:54:37:99:7c:fd:ba:
6e:42:53:dd:21:d6:68:a9:30:2b:ed:0e:57:d1:0d:a4:43:7d:
c5:e2:27:c9:b1:27:16:97:a6:c1:66:1b:f8:06:ce:d2:c4:c8:
d1:90:21:dc:9b:b3:be:8e:fb:f5:a5:40:e8:29:ee:88:7c:28:
af:f1:0d:2b:b5:92:6b:45:d5:2a:b0:90:c4:fa:5b:66:b7:d0:
10:d0:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 14:02:15 2025 by rpki-client