Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: UPTsjhqcnbLDGYcLPjsfG4C/ogi3wyc/DemtD7SUW2w=
Subject key identifier: 95:AF:7D:A4:99:8D:8C:59:36:03:40:08:CE:70:E3:CA:A2:AD:E3:E2
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 0198D583B846807E810E40ACF748F3652B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 15ED
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: rRp0ZWOpUyFOGC6TG+OWfNxCcABzg4Xmqzd+9xvw7Zo=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b8:46:80:7e:81:0e:40:ac:f7:48:f3:65:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=95af7da4998d8c5936034008ce70e3caa2ade3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:41:bd:d6:8d:5f:46:74:08:fb:c8:77:07:c4:
98:9d:99:2e:ff:2d:47:86:30:a4:2d:69:c8:f2:9d:
30:04:46:89:21:2c:70:db:9b:62:fb:64:3c:39:bd:
bb:31:98:9b:2e:1d:cf:70:17:5c:82:d5:54:74:56:
8d:c6:fc:7d:9e:42:7a:9b:5c:61:33:22:7a:c5:49:
40:da:a8:61:c7:5e:1d:b9:67:95:67:73:40:b5:a3:
05:e7:f3:9e:7e:14:c6:ba:8f:bb:c2:95:07:0b:99:
e6:ac:a1:7b:fd:a3:b0:0a:91:4e:bc:29:88:66:1a:
d1:2e:b7:13:12:fe:b2:08:2f:be:fc:4a:28:42:ab:
3f:4e:86:42:95:6a:92:d8:f3:36:c2:3d:5e:cc:67:
e6:5c:a1:33:f4:e7:1f:52:e9:59:85:f1:42:a5:11:
63:29:d6:fa:4e:34:ff:c0:76:7c:ac:77:79:44:09:
77:1c:09:89:db:3a:42:17:a8:a2:04:a5:56:c9:5a:
5e:01:e7:aa:1b:c1:20:64:6c:d0:53:54:01:b9:df:
28:33:f5:86:64:80:0f:ff:33:e8:47:98:6b:18:4d:
27:fd:bd:b0:35:20:7e:0c:90:32:b7:ac:c7:fa:e3:
c0:23:23:95:8a:e0:b1:58:3f:4c:8d:f2:dc:cf:07:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:7D:A4:99:8D:8C:59:36:03:40:08:CE:70:E3:CA:A2:AD:E3:E2
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:76:a3:bd:08:ce:3b:56:be:ac:4f:d0:f8:76:9c:f2:c1:47:
02:a7:ac:6d:aa:bf:c3:f8:f0:80:01:c5:58:f8:be:5c:3a:2c:
a2:49:a4:24:e5:39:b7:9b:49:27:fb:8c:87:38:66:e9:f3:19:
70:e9:ce:a1:cd:cb:c7:a4:9a:a1:5e:6b:62:90:6a:60:a6:d0:
ba:29:31:33:ef:89:7b:b9:6c:f7:86:70:25:72:cd:98:4a:2b:
de:e2:65:cb:01:45:46:3c:1b:37:aa:33:19:b3:f2:cb:3d:b2:
66:db:32:c1:90:e7:5f:4e:2c:ec:9a:b4:9d:f3:a2:7a:54:57:
3a:a7:d2:e9:de:25:66:6e:74:5f:85:70:aa:70:e3:e2:13:23:
bd:da:48:d2:5c:b8:86:bc:0f:33:5e:e8:6c:69:99:59:b1:70:
be:22:ca:da:13:29:c3:dd:a8:1c:31:e9:30:48:eb:21:00:85:
9e:ae:18:0c:65:6a:97:09:e9:ce:23:23:fa:24:e7:21:7a:cf:
50:e8:14:d6:13:8c:cf:f9:16:bf:e0:f6:fe:d8:cd:81:a9:3d:
c5:55:e1:a4:13:ad:ef:b2:32:d2:3b:e3:15:df:30:73:9a:b2:
5e:09:31:36:f1:78:1f:ac:c2:1b:25:68:c9:c4:5e:b8:81:64:
b0:b3:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:17 2025 by rpki-client