Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: 9EzIkS3mlWYNBZ95wVKsntqOJhG4p6ViOO8SRy2pFjA=
Subject key identifier: BA:6F:4D:ED:9F:88:BF:8A:96:38:E4:ED:C8:00:A4:09:44:FB:DB:C6
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 0198D705A4C490AA9AAF5062C7BB7E1995E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:07 +0000
Manifest this update: Sat 23 Aug 2025 13:02:07 +0000
Manifest next update: Sun 24 Aug 2025 13:02:07 +0000
Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: NwzeJC32s23HejAAPfSsJny5IweZRo9WbU42uVFP1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a4:c4:90:aa:9a:af:50:62:c7:bb:7e:19:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Aug 23 13:02:07 2025 GMT
Not After : Aug 24 13:02:07 2025 GMT
Subject: CN=ba6f4ded9f88bf8a9638e4edc800a40944fbdbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:7b:12:60:34:59:24:5e:9b:a6:e6:a2:e4:
ab:26:95:6b:4d:b3:d2:94:84:64:e3:9f:82:0b:71:
b4:40:41:04:13:48:94:24:07:89:68:8c:97:19:31:
e4:74:1f:27:c6:e9:ad:19:8e:1f:64:be:5d:0a:1a:
02:a6:c4:73:8c:5a:fb:c9:bb:46:69:6d:75:4c:46:
82:0f:fe:ce:91:e1:06:86:49:8d:a4:cd:64:f0:2a:
37:95:b8:82:bf:be:5e:b1:53:63:68:80:9d:9e:62:
d4:e7:74:ca:e3:db:fe:e2:59:5c:ad:59:b5:07:88:
9d:8a:18:46:11:1c:28:46:21:4d:49:87:79:c1:d5:
36:5a:4f:1c:29:05:e7:6c:d8:b1:aa:9f:f1:10:c3:
69:28:ce:02:9d:23:5d:87:6f:5f:e0:66:32:3b:f3:
40:ad:23:ba:07:34:87:85:87:c7:50:19:d3:83:4a:
fc:1b:44:eb:a0:6c:7b:34:16:61:9c:89:aa:4c:a3:
36:86:13:a2:ad:37:f8:75:f2:12:c6:b3:44:ba:4e:
86:7a:e8:fe:44:34:c8:82:f7:ea:90:7d:06:14:33:
f5:3b:a7:c9:a0:c4:00:5f:98:54:04:c0:e2:0c:a7:
62:5c:b5:e0:be:0f:8b:dd:42:51:62:da:4b:20:f6:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:4D:ED:9F:88:BF:8A:96:38:E4:ED:C8:00:A4:09:44:FB:DB:C6
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:94:01:f0:c5:c3:c2:58:9c:1c:bc:80:57:05:c3:b8:a4:83:
79:bd:a9:c7:55:41:59:01:f1:12:68:1b:53:68:71:3b:33:1e:
dd:16:4c:ef:1f:74:38:7d:45:9b:bf:bb:44:74:4d:bc:e0:a9:
1d:89:d5:62:7d:b0:f3:0d:90:b9:91:25:45:ac:a1:d7:ff:77:
d8:af:8d:0a:d1:2b:b8:ff:4a:f6:06:b2:99:00:56:9c:40:b9:
d3:bc:af:0f:9a:52:3f:a7:90:20:e2:0a:26:58:11:dd:20:b5:
60:26:a1:74:1e:58:6f:a4:7c:f4:de:ef:6c:18:a5:cf:26:85:
11:06:ad:98:c7:1d:8e:19:a3:93:45:fc:00:87:57:65:cc:ce:
9c:bb:a6:91:ba:75:58:ca:03:61:e0:1e:08:26:e5:12:04:65:
d1:6a:31:02:fc:da:32:12:af:65:3c:c4:f8:98:95:67:44:9e:
0d:60:4c:b6:d0:e6:f1:f4:5e:b9:07:e1:7e:5a:b7:58:44:87:
d4:d2:c9:e3:52:ec:5e:6d:22:87:63:1b:b4:30:e3:ab:86:28:
da:86:07:b8:8c:ff:7d:1e:84:a5:ba:7d:05:ae:7d:7c:21:ee:
4b:28:a9:b8:29:6d:8b:96:06:63:c1:72:88:69:19:e8:b1:82:
60:2a:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:48:37 2025 by rpki-client