Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: CYk5tt3r0GPFax8pZ2cyGlkLwRq00QB2EoLZPLXecPQ=
Subject key identifier: CA:0B:B4:3D:D1:70:80:B0:C2:14:1C:EB:F6:72:15:1D:3A:97:EE:5B
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 0198D773A6650962ACCE5D39E9B2C4B10AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 15:02:17 +0000
Manifest this update: Sat 23 Aug 2025 15:02:17 +0000
Manifest next update: Sun 24 Aug 2025 15:02:17 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: xM8TtfVMyHy3aD7ZYGxKgpEa7teJD3JLFoU0mKVdLt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:a6:65:09:62:ac:ce:5d:39:e9:b2:c4:b1:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Aug 23 15:02:17 2025 GMT
Not After : Aug 24 15:02:17 2025 GMT
Subject: CN=ca0bb43dd17080b0c2141cebf672151d3a97ee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:38:b7:9e:74:08:d5:5a:0b:3a:d0:55:d5:
1d:fb:d7:0d:46:0b:bb:b2:5f:33:27:99:27:e4:66:
5c:1f:d8:f8:e7:2a:96:db:fa:33:20:98:d4:b7:fa:
16:20:8b:9f:5e:02:f3:4e:25:c8:9b:54:6f:7e:12:
35:ef:e3:55:d2:7e:41:5c:ff:cd:58:7c:73:c3:5f:
3d:5a:b6:04:8f:14:c8:0f:16:ac:ac:fa:88:bc:4d:
bf:6b:29:31:84:db:00:1a:fd:c3:90:3c:35:16:2c:
47:90:e3:32:0f:62:8b:6a:a1:ad:51:ee:f1:6f:a1:
21:54:a2:77:04:f0:54:0b:84:fd:38:22:9f:45:90:
41:f3:35:29:d0:68:a5:0a:9b:7e:e1:bd:bc:30:93:
f7:ed:32:46:12:b2:05:0b:32:5e:a3:08:77:6f:36:
42:e5:dd:24:f4:0b:14:48:d9:4f:ff:51:43:4a:54:
36:3d:5f:ab:14:e2:b3:7d:98:64:1b:73:62:5f:da:
54:8f:3a:e6:39:05:c3:68:b9:4a:7c:c1:a0:8d:05:
cb:3b:19:be:67:a1:0a:2a:46:55:16:64:b2:83:21:
1d:81:61:ac:e5:55:e9:3b:d9:7e:ed:2e:fa:dd:37:
c8:de:3a:a3:0f:65:fc:1c:0a:b6:a2:44:4e:46:b2:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0B:B4:3D:D1:70:80:B0:C2:14:1C:EB:F6:72:15:1D:3A:97:EE:5B
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ef:73:14:cb:3c:fc:77:7a:90:46:f3:7e:7d:17:3c:12:76:
b2:d6:9b:7d:0a:24:1c:3f:96:ca:28:4b:af:32:05:05:08:a9:
ab:e9:30:4b:f0:bf:da:17:fb:e5:6f:2d:42:d4:07:8a:93:2c:
e0:79:e7:88:5e:38:04:76:69:c6:2f:24:94:80:52:db:05:64:
e3:08:6b:b2:9a:8d:e7:0f:f5:ff:db:57:8f:c8:ad:9f:0d:b0:
f3:37:54:8a:7e:b9:dd:53:8d:a7:3d:d1:b5:a6:b1:22:f3:1e:
9e:8f:1b:eb:44:ee:59:dc:8b:39:df:e4:88:1a:50:2a:b3:d3:
d7:fb:e6:77:fb:61:17:ad:39:e2:f1:87:22:b6:84:05:72:00:
42:5e:84:86:28:4a:2b:c6:7f:8a:d3:0c:6d:62:49:06:28:b0:
28:ba:b6:b9:64:c5:cb:b5:63:dd:2b:4a:5b:26:fb:fb:06:7d:
ad:6b:2e:85:70:9c:79:51:b3:26:3d:ee:62:00:59:87:78:43:
b6:55:5a:77:4f:6c:86:b8:9d:c7:8b:da:5a:da:80:7a:c3:e9:
af:35:ad:2e:90:32:5d:a9:b4:9a:b3:2e:d8:b1:01:50:db:22:
a6:99:6c:0e:af:9e:8a:57:e7:fb:5d:6c:c5:41:ab:71:8f:1e:
52:5f:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:54:35 2025 by rpki-client