Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: pG3GQzNo/9gocKreEn+e0k5OY+rSkv1sVhJ9xW9ec7M=
Subject key identifier: 9F:8B:BC:08:77:BB:B0:BF:B2:58:8F:2A:86:1B:B2:78:FA:DC:87:EE
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 0198D6CDBEFFD9EDF2FE6DCAFE888FAF7DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 12:01:04 +0000
Manifest this update: Sat 23 Aug 2025 12:01:04 +0000
Manifest next update: Sun 24 Aug 2025 12:01:04 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: B9UkZDNrX44HoPRtPsuGfw0oE6rH18EvopY29HdhT+U=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:be:ff:d9:ed:f2:fe:6d:ca:fe:88:8f:af:7d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Aug 23 12:01:04 2025 GMT
Not After : Aug 24 12:01:04 2025 GMT
Subject: CN=9f8bbc0877bbb0bfb2588f2a861bb278fadc87ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:fc:ec:c1:56:7b:64:f9:b7:22:91:61:5e:
4e:e1:ad:a8:ab:a3:d2:14:5c:4d:29:fa:87:88:5c:
be:9c:40:c7:6a:c1:23:40:d4:a9:ea:ce:e5:6e:bc:
11:8d:b7:8a:18:45:2d:37:c7:f4:a1:4f:d7:7c:53:
77:53:09:74:1a:45:2c:4f:be:c7:39:a6:6b:66:0e:
8f:a9:5a:78:5d:41:c0:60:54:61:ab:5f:e5:04:5d:
75:b2:03:81:fc:d4:51:c7:3f:42:01:84:87:9b:fd:
df:6b:c4:a5:38:6f:ab:a1:cb:4a:51:64:19:23:fa:
d1:33:3b:7c:86:40:73:0a:90:33:49:62:8e:b2:cc:
35:ab:cb:2e:6a:61:20:1f:b8:be:ed:66:be:ed:61:
22:aa:b1:4d:e1:6a:00:ca:b4:5b:f4:1d:67:c0:2f:
63:8d:65:b3:81:5e:f6:88:38:65:26:f8:14:c9:d9:
25:37:b0:43:f2:52:fb:ff:02:56:b0:a2:c9:62:ea:
9f:e2:1c:a8:55:f5:ee:78:34:f9:24:01:bc:f9:12:
a0:b8:e2:26:64:76:46:0b:2c:c5:a6:9b:97:6e:32:
19:dc:ff:a3:7e:3d:33:ff:16:02:b1:e5:37:fd:85:
5b:99:73:0d:98:e9:46:a4:55:7a:b4:9a:6d:e3:46:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8B:BC:08:77:BB:B0:BF:B2:58:8F:2A:86:1B:B2:78:FA:DC:87:EE
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5d:6d:5a:ee:00:b8:49:d0:8e:d4:2f:14:0e:15:85:58:46:
21:4c:c5:a1:b3:9d:f2:ec:50:f7:19:bf:47:ed:24:8d:e4:fd:
95:d3:d1:dd:54:28:e2:88:f6:7d:9e:33:4e:ef:4d:34:83:e0:
5a:18:db:24:fe:5e:fe:02:57:00:ec:42:a4:07:28:cc:96:1e:
87:fa:93:2f:9f:4e:f7:d5:ec:4e:9f:9a:82:45:37:de:f2:5d:
59:5b:0a:f3:15:b2:63:08:6a:5b:c2:c2:6e:30:78:3b:f5:ff:
04:ea:d1:da:2b:fd:68:dd:3e:d0:09:c6:f0:ab:79:49:68:e5:
ce:9e:97:84:1a:f6:71:c0:00:ac:54:cb:a8:98:89:82:4c:e7:
8c:29:c3:18:c0:4f:57:dc:90:ee:a1:30:ca:02:54:ff:5f:1c:
e4:e4:dc:94:dd:6f:67:d7:e1:17:f2:92:64:b7:3e:a0:ec:9b:
dc:a1:27:a7:1f:73:ff:25:73:33:a1:c6:39:67:a2:ff:b7:7c:
5a:a4:67:6c:fa:ef:22:54:18:fd:76:68:1a:f4:a7:ba:1b:c8:
73:e1:41:19:eb:82:e3:28:a1:71:73:35:f6:e4:64:34:d1:66:
45:dd:23:7c:a3:41:cb:ef:01:a9:44:a8:f6:e8:7d:21:65:ef:
a2:16:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:43 2025 by rpki-client