Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: 2HPkQeqqO9aBUDUlU8yAME1i5+PhD3NtWsqgDJuuD8M=
Subject key identifier: 5C:66:E8:C8:98:57:47:E1:C0:57:0C:89:89:7F:09:C4:9B:7C:87:E7
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 0198D70647FB04662C5D4E058BCE1ADB57CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:49 +0000
Manifest this update: Sat 23 Aug 2025 13:02:49 +0000
Manifest next update: Sun 24 Aug 2025 13:02:49 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: uIMeXwoMD1ftXhxe0AKWWJhDTznc3EeA2EbBPQVla0s=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:47:fb:04:66:2c:5d:4e:05:8b:ce:1a:db:57:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Aug 23 13:02:49 2025 GMT
Not After : Aug 24 13:02:49 2025 GMT
Subject: CN=5c66e8c8985747e1c0570c89897f09c49b7c87e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:05:63:f6:46:03:4e:0f:9f:4b:f0:ce:08:48:
8a:5f:fe:2b:74:5f:32:af:6d:db:23:f5:fa:d8:25:
81:56:28:33:fc:a8:f6:92:db:3e:47:f5:48:0c:5c:
98:56:49:c3:e0:eb:ff:0b:1a:99:32:d1:ce:5e:a1:
91:5c:ee:bc:97:b0:10:ec:84:8a:d7:55:ff:00:12:
29:44:69:2b:37:39:17:d9:0a:7e:b2:95:0b:60:bb:
d7:cf:0a:05:d3:e8:5f:5a:c7:49:cb:a9:c2:d2:b0:
68:43:de:4b:38:b7:92:fd:1c:9c:c8:96:5f:78:90:
5a:e2:3e:0a:c9:81:e5:2e:86:b3:8e:6f:cd:e5:54:
49:0d:ce:25:6e:a3:0e:81:e5:69:f5:d9:3c:48:04:
9b:45:5d:58:f2:37:62:c8:7f:81:54:3a:11:73:9c:
51:0e:9a:85:ae:9e:19:17:39:ea:06:81:eb:95:81:
d9:12:ed:a3:fc:61:b0:ca:8b:f8:e5:df:7f:4c:66:
69:34:77:1a:c9:d4:24:e2:a9:27:8b:47:fd:54:63:
81:c7:83:05:16:92:f5:5c:60:99:98:89:26:a8:d1:
f5:58:e1:34:d2:68:5f:70:60:dc:a3:9f:d2:9b:58:
7b:84:dd:27:a2:0b:6e:10:63:68:38:02:6c:70:2b:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:66:E8:C8:98:57:47:E1:C0:57:0C:89:89:7F:09:C4:9B:7C:87:E7
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1f:c4:84:07:32:61:fe:8c:a9:d2:a4:8e:4c:67:a3:49:e3:
12:db:17:e4:a2:e1:8a:4f:e9:d0:92:06:7d:94:d0:89:e3:01:
c1:5a:d9:1f:47:01:27:5b:c0:8d:5b:91:55:84:a9:75:02:27:
fe:66:6a:b4:df:22:cb:04:5f:bf:c9:41:2f:12:cb:6e:38:91:
0b:2b:68:fd:ca:c0:d0:c2:4d:97:de:0e:93:4b:50:2a:85:98:
2d:07:98:6b:00:f7:9b:83:f9:d3:25:75:ca:7a:ae:3f:ae:2c:
81:88:7c:a1:43:10:89:44:19:4b:35:5d:e4:45:99:05:c7:eb:
1c:08:97:81:ed:3c:7a:55:19:52:7e:35:fa:94:11:eb:7f:33:
e6:52:74:fb:50:42:27:fb:f3:79:9a:1f:04:47:88:9b:28:47:
53:c9:31:ba:61:29:d3:1d:35:66:27:dd:ae:45:bf:70:08:ee:
1a:15:22:ba:21:9f:b4:c8:cd:88:03:61:1f:71:26:4f:19:2e:
c5:40:63:a9:ce:5f:59:46:87:67:56:8d:d7:25:2c:22:ed:57:
f6:4b:df:3a:29:66:28:64:6e:76:21:f0:4f:fd:24:27:db:a4:
d2:98:b8:9e:21:78:3c:a3:07:e6:58:a8:aa:c8:24:bb:1d:25:
8c:bc:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:06:24 2025 by rpki-client