Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: HpIa/TvRUh5fGpU8xxIOrqD8mboa0OpFzuR0rv/f2f4=
Subject key identifier: 5A:F5:4E:96:C4:36:FC:9D:ED:57:CA:41:03:F9:29:36:7D:71:AB:93
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 0198D5F169A65D7035DD0707C01270ACA66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: Enygixq1bNYhBPhioZ/yRUfouu+ndJI7Isr2BKKHTWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:69:a6:5d:70:35:dd:07:07:c0:12:70:ac:a6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=5af54e96c436fc9ded57ca4103f929367d71ab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:47:9e:4a:5b:9a:21:9d:45:32:31:b1:26:
7b:6e:c4:78:3c:e6:06:95:82:ee:13:3e:0b:7e:36:
91:da:0e:cf:1a:84:4b:ee:52:78:c7:62:b9:aa:78:
e4:3d:7a:67:11:e1:66:e7:8c:dc:7e:ac:b1:70:c9:
c9:2f:c7:34:22:d4:d9:da:68:e1:e2:e8:e3:b2:8e:
30:19:01:18:ab:6e:ac:96:77:c2:64:83:f2:c1:06:
0c:77:26:88:eb:84:59:c0:27:97:f4:83:2f:b1:24:
0d:2f:bf:81:f4:23:30:a1:20:de:ee:55:8d:79:e0:
00:fa:10:0e:5f:83:c4:ca:d8:2a:08:d9:9e:48:87:
33:4a:67:6c:15:62:b2:4d:6e:4b:7d:04:e4:1d:8d:
36:16:cd:b2:75:a0:08:15:71:36:0e:c0:9e:94:4f:
95:c5:d6:5a:a7:2f:8a:fb:5d:0a:93:31:1d:a5:56:
72:a1:7c:fc:b6:85:46:de:c9:49:5e:9f:e6:ea:87:
82:3b:0c:7c:da:e7:f3:d3:e0:f3:3c:40:aa:55:c8:
4c:13:42:f9:45:6f:49:de:2d:fa:2b:0d:6e:22:b2:
34:4b:98:71:a2:6d:76:3d:87:d3:a9:04:6b:ef:14:
b0:d8:d2:36:5d:1c:d6:25:a5:d7:eb:b3:5a:dc:38:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:4E:96:C4:36:FC:9D:ED:57:CA:41:03:F9:29:36:7D:71:AB:93
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:37:f5:cf:7a:94:77:85:a2:c5:58:d1:4b:9d:49:96:2f:7c:
69:63:db:27:d6:9c:f9:2f:39:ba:be:64:b7:3a:6f:bb:9b:ec:
89:56:db:7c:a8:eb:6e:bb:e9:45:12:55:87:a5:12:7e:89:1f:
80:50:ff:99:69:31:4a:86:d5:a8:89:94:c7:5a:c0:08:ec:8f:
86:b3:02:9b:9e:48:ec:66:dc:08:af:c3:19:01:dc:6e:9a:e8:
31:f7:41:5b:98:af:07:c9:51:c9:c4:bc:15:d9:e1:f2:c2:48:
23:4b:39:a2:45:da:bd:36:0f:3e:56:79:0d:46:bd:39:38:1a:
f0:85:56:fe:96:85:bb:63:46:75:3d:47:4a:d9:a0:27:ac:0b:
45:19:f9:c1:9c:61:cb:aa:44:4c:ed:3b:c6:3d:e4:16:69:6a:
52:13:1e:17:b0:4b:86:3c:9f:84:3f:a8:58:15:50:d5:1d:3c:
e2:e3:48:17:b4:3c:ce:22:50:c0:94:6c:74:1a:cf:20:03:43:
2f:e3:8c:51:04:a7:12:fb:6b:18:5c:5b:c7:81:ab:4c:a0:64:
0a:aa:bb:8e:61:8b:29:83:cb:bb:4a:1d:9e:6b:59:c2:61:ea:
53:75:e7:af:24:13:93:01:9b:4d:09:5d:7a:1c:cf:48:ac:80:
de:84:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:50 2025 by rpki-client