Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: m72QQN/lcTD4/VnVhbRBNuWB2Dfc7RutE3OzJ11c4ew=
Subject key identifier: 3A:A4:23:28:AF:73:9F:F8:53:82:B4:A2:7C:78:8C:9E:0B:FA:7B:1B
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 0198D5838D101227109628D4EB89012DF2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: r7AycsRRrq591iUfr5MUpzsUJSCC2pP6rW0NZ/o2/04=)
2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8d:10:12:27:10:96:28:d4:eb:89:01:2d:f2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=3aa42328af739ff85382b4a27c788c9e0bfa7b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:54:5a:0d:a5:66:2a:52:0b:d9:28:b2:e8:
27:ff:6d:6f:9d:ee:4b:cb:29:98:09:e9:5a:90:a0:
85:25:24:af:b5:ab:a0:ec:6b:a4:c5:bb:66:3b:95:
64:ad:8e:f8:b5:cc:0c:de:81:82:94:3f:d6:de:92:
d7:43:09:c2:e4:4f:20:5e:5f:ca:85:91:95:1c:35:
d7:d0:49:cf:22:fc:48:ad:ed:b4:ca:0c:2f:77:00:
79:2c:89:6d:9f:44:9c:01:94:c8:7f:22:b6:b7:0f:
0e:2d:9f:d4:90:43:6a:cd:74:9b:c2:0c:f0:16:5a:
b7:04:81:6a:c4:03:aa:c0:fa:87:d7:36:06:82:b8:
81:66:8b:14:e2:a1:fe:cc:17:0f:5f:0b:a9:31:69:
af:14:56:e6:c9:b5:b4:32:a6:a3:d3:fb:a8:81:27:
1b:6a:03:77:e9:2d:24:f5:43:22:24:fd:20:aa:23:
86:e5:4d:b9:4b:1f:b8:24:11:be:99:39:c5:97:8b:
97:0e:7b:c0:c8:32:cb:a2:84:3c:f2:f2:69:2d:18:
02:74:69:2a:09:aa:77:e6:c1:9e:ff:93:be:f7:8d:
bf:2f:ad:4d:aa:39:a5:e3:4d:b3:e9:ee:9a:1c:ff:
fa:29:6a:aa:87:dd:7c:fc:a0:2c:81:79:d6:71:8f:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:23:28:AF:73:9F:F8:53:82:B4:A2:7C:78:8C:9E:0B:FA:7B:1B
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:16:27:47:b0:6e:37:8f:21:98:d9:7e:09:12:2d:d7:66:83:
03:43:8e:45:3d:8b:0d:42:bd:16:41:95:1d:d4:00:25:d1:09:
90:20:83:38:c7:dd:a5:e2:ca:e4:c9:43:2c:49:85:be:3a:1b:
a2:04:42:32:8c:f5:bc:ee:4c:d8:d4:79:a2:70:c7:81:02:45:
bd:f4:1a:9b:31:23:79:9e:d2:0a:0f:7a:53:8e:c7:ee:5b:97:
c3:9d:c1:ab:99:67:8c:14:b6:d1:c8:25:83:21:68:78:8d:78:
d8:3e:e3:83:5b:b2:f4:a0:64:b0:e9:7a:be:d0:7f:09:64:15:
c6:fa:e2:4a:63:c4:61:22:81:2e:ae:9c:29:02:84:f3:c8:95:
12:06:79:f4:28:db:e9:79:bb:4d:36:d7:91:d2:97:15:65:45:
2a:4f:ae:0b:a6:71:95:c7:7a:d7:64:fc:53:d8:dc:ae:64:77:
9d:67:2e:1e:7b:eb:ff:a1:7f:69:9c:d3:50:07:59:c5:08:eb:
03:4b:b5:b0:e9:8d:c3:6b:62:5e:21:50:7a:b8:a3:88:a3:b1:
8d:e8:cb:77:e1:64:50:e8:ff:8e:1f:a2:c2:ea:81:e5:c4:22:
f9:d9:68:7a:d6:48:ec:3d:d6:13:a9:3a:60:28:71:da:80:64:
b1:95:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:35 2025 by rpki-client