Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: OZAeue3RE6P+fwpyQ7rBB+w3YwO9MueQLAJcAE0IBmQ=
Subject key identifier: 85:DE:A2:BE:E6:E5:09:59:6A:C5:50:60:43:ED:1E:2C:76:78:B1:DB
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 0198D583E5089DB846FBFA099F8D859B7286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0DDA
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: l/DhyPgkFyVg9QkmuuoxNRtXYCRNLb1p9v9GWJ4mw2I=)
3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e5:08:9d:b8:46:fb:fa:09:9f:8d:85:9b:72:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=85dea2bee6e509596ac5506043ed1e2c7678b1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:75:15:47:b6:e3:03:2a:b4:9f:9b:24:6c:
59:aa:50:3a:03:be:2f:41:22:ba:1c:16:1c:03:32:
45:82:f6:fd:42:c7:62:13:31:33:0a:18:63:d6:9d:
aa:01:59:50:3b:72:53:38:de:be:7a:11:0f:ab:6c:
d7:35:96:a5:4f:c1:d5:84:84:a5:38:fe:cb:88:44:
2d:c5:1e:4c:48:80:8a:23:df:e4:6a:80:c2:71:71:
ca:3b:ad:69:93:d2:71:38:9b:58:ef:9b:c3:de:ae:
10:68:57:fc:ff:ed:23:65:db:64:3b:46:0f:6f:ab:
62:f2:ee:6f:8a:52:7d:bd:88:49:12:1d:25:59:39:
7c:c0:5d:0f:12:e9:ea:11:b2:b2:90:fa:57:bb:42:
64:07:72:48:c6:25:b5:9f:ab:2e:d4:df:80:c0:cd:
9b:43:d2:7e:32:fc:49:4a:e6:ef:96:e0:94:9e:ca:
14:63:a2:bd:07:3b:ed:47:f8:df:4e:89:55:e9:14:
86:6f:f8:05:dd:8d:49:19:76:1d:2d:ea:11:01:2f:
a3:2a:a5:81:89:ab:87:24:22:7f:cd:94:51:ea:1f:
ac:97:b5:51:24:07:0c:a3:5c:0f:2c:99:ba:a3:03:
56:06:c3:20:cc:7c:39:02:57:51:c6:b3:30:f4:f7:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:A2:BE:E6:E5:09:59:6A:C5:50:60:43:ED:1E:2C:76:78:B1:DB
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ce:94:10:11:07:6f:79:d9:70:fc:b2:57:e7:1e:97:91:06:
3c:56:a0:50:3a:e6:19:73:a6:ad:7c:d3:be:42:26:f5:05:ac:
9e:3f:67:86:30:54:18:5d:40:04:09:70:51:6c:96:12:35:3b:
cf:c5:ff:6f:32:30:ca:3c:61:86:27:08:16:8a:7d:39:dc:32:
f3:22:21:75:d6:6d:3e:e3:4a:64:4b:c6:46:b2:e6:8e:8a:e2:
f3:32:93:26:29:98:98:62:9b:2d:56:af:df:d5:e4:51:b1:7e:
dd:ff:ef:09:d7:4e:a8:db:f7:36:cc:57:8e:54:49:5b:2f:2e:
a0:7c:41:b5:f8:4a:f6:14:4f:ad:44:ac:62:cd:b7:7d:69:01:
a3:44:e0:bf:8b:a3:39:25:58:6d:e3:0c:4a:3f:e6:c7:33:6b:
74:03:6a:5e:8d:e9:e3:3f:c8:2f:01:53:5e:65:e2:33:d1:46:
fc:1a:28:31:7b:19:b9:df:03:1a:07:13:7e:e5:86:86:86:cc:
f4:b5:5a:15:33:ba:ae:03:bd:39:88:05:02:24:6a:d1:86:09:
9d:5d:76:3f:db:df:53:4e:cd:23:68:a6:fb:4e:ff:01:63:96:
2d:46:1d:ed:0b:8c:da:28:e3:0d:14:85:6e:2f:b2:97:10:37:
3d:66:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:52 2025 by rpki-client