Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: aAVTWapw/HrMJkvj45P+UgxK50BNZqLZJ5auYD+dO2M=
Subject key identifier: F6:A9:E8:0A:6F:00:5A:46:A9:97:2E:83:46:69:DB:32:1D:56:62:53
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 0198D6298B39995F6D00CAF145D0FD14CAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: UBUVfZgpd76NN6YO/VUmVyTd4Te0+Hxyq2tzhZn1NaA=)
2: uU_Epbh4k-iNlfIsi_aGVBuYX3E.roa (hash: oN88HQNaxlS+SnkVrt2tuPqyaZ78GSR116CcNBSWxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8b:39:99:5f:6d:00:ca:f1:45:d0:fd:14:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=f6a9e80a6f005a46a9972e834669db321d566253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:85:bf:b3:fc:38:ba:5a:ac:4f:42:39:39:ce:
86:ca:d5:69:64:67:79:3b:8f:c6:a4:19:58:22:2f:
2d:8c:1e:71:aa:3d:cb:64:d3:32:2b:aa:ac:01:fa:
93:d6:f3:8a:7e:fc:b1:5a:13:df:e7:72:f8:fd:66:
57:8b:9e:29:14:84:bc:89:77:3f:ae:aa:52:50:b5:
3d:a5:35:53:b9:50:87:97:2d:74:bf:73:9c:9d:d2:
a3:0e:d5:19:a4:35:13:0a:7d:fe:4a:ab:70:98:fc:
55:af:bd:3b:7a:3b:03:89:a0:13:6d:b9:5a:86:08:
24:e6:12:f3:bf:58:b4:6b:c0:ac:32:ca:41:35:0b:
ba:f8:49:1b:15:24:94:ed:71:fe:03:93:27:83:48:
25:c8:b7:58:08:9d:76:a7:94:1f:7b:43:f8:23:97:
63:a8:58:df:dd:a1:dd:17:50:7b:37:a0:12:09:0b:
2a:4e:6e:9c:dd:bf:53:c9:b7:c9:3a:31:e6:de:ae:
78:ab:63:47:58:48:5b:a4:23:e3:2e:bb:79:66:34:
ab:7a:82:3b:b0:04:3a:aa:86:28:5d:4f:38:34:db:
de:44:13:e8:0a:76:f9:1e:1b:a2:dd:c5:69:73:30:
21:64:c6:85:03:4e:20:68:83:50:74:91:77:10:f6:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A9:E8:0A:6F:00:5A:46:A9:97:2E:83:46:69:DB:32:1D:56:62:53
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:89:ef:12:f3:54:0e:f3:e8:2d:4d:e3:bd:b4:9c:e0:6d:eb:
1b:5b:f9:04:eb:d6:4b:a0:a1:5e:02:35:be:85:5e:2e:af:4f:
c4:52:54:3d:a4:75:85:69:01:18:9e:4b:27:d0:1c:26:0c:e8:
8b:a4:6d:3a:79:69:4b:c1:cf:76:aa:13:d0:cb:00:ca:9d:73:
88:be:fc:2f:38:63:d1:08:6f:9d:ea:ea:48:e8:0a:11:3b:92:
13:4c:70:22:03:14:dd:b9:6e:d4:e0:49:f7:58:3c:2b:c2:c9:
bc:ea:14:9f:6a:f9:a7:d8:1b:d3:20:b4:0c:05:be:94:1c:35:
94:38:4e:06:d9:3a:bd:c5:e9:b0:5b:a1:11:4e:b3:01:02:ec:
66:81:92:56:a3:01:d8:8f:00:81:85:fb:3b:44:3a:2e:ab:be:
79:39:b0:c0:d3:5b:d6:64:a6:08:e8:8a:0e:89:7e:20:5d:75:
45:fb:6d:17:81:79:e5:ec:fb:c7:31:a9:d1:45:5c:77:49:a8:
84:6d:13:f3:fd:cb:fc:1f:22:42:02:70:9b:a1:1b:cc:f6:1a:
a0:46:f7:06:02:5c:66:dd:52:7f:96:ee:e4:11:6f:de:2a:2d:
2a:55:74:2f:2c:df:da:b7:55:7a:d7:3e:94:e6:49:ec:a8:34:
00:96:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:17 2025 by rpki-client