Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: WC/pHFxyX8RiVTb4mLI9x8zMOU/DuUPdMSr8knVYxPQ=
Subject key identifier: 5C:BA:CC:35:60:5E:4A:DA:88:88:A7:9A:BE:65:D9:64:33:EB:8D:8E
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 0198D660DF3C37798B1E602CBEFDEC4CFF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:02:09 +0000
Manifest this update: Sat 23 Aug 2025 10:02:09 +0000
Manifest next update: Sun 24 Aug 2025 10:02:09 +0000
Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=)
2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: XHhh+Sc53FdvrM9g8Bi2fy5/hjMF5OQPONE6oIkPnXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:df:3c:37:79:8b:1e:60:2c:be:fd:ec:4c:ff:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Aug 23 10:02:09 2025 GMT
Not After : Aug 24 10:02:09 2025 GMT
Subject: CN=5cbacc35605e4ada8888a79abe65d96433eb8d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:cb:4f:ed:db:23:21:f9:f0:18:f0:df:b4:
22:72:2d:2e:b3:35:97:d4:3d:8b:73:56:cc:72:a0:
e1:36:6a:73:3d:9f:b5:c8:0a:0b:ff:aa:04:3c:76:
26:9c:80:c3:91:d4:1a:20:cf:da:5a:26:14:2f:1b:
4d:a7:94:f2:d5:8c:40:1c:3a:1a:d6:70:1d:90:f5:
bf:25:94:bf:f9:c9:96:49:96:cd:a0:fa:b9:8b:2c:
7b:09:02:af:ef:22:98:42:ef:5c:a0:00:37:c6:bc:
17:63:55:4b:19:00:2d:3d:d4:67:10:eb:aa:82:fe:
a3:19:26:dd:ab:15:4e:05:33:48:85:27:cb:cc:27:
7b:4c:ee:c5:22:f7:b8:96:dd:21:9c:3c:25:97:a9:
0b:4d:6d:72:6a:2a:d7:c0:48:7f:be:e9:49:cb:f5:
ec:be:42:09:50:f8:b8:1a:cb:3e:a1:03:45:ae:60:
02:a4:ae:27:4b:47:85:43:e6:7c:fe:5f:cc:03:45:
33:eb:1f:8b:b1:4f:3f:98:9e:5b:55:28:19:d5:9c:
92:90:73:59:cc:14:98:cd:f1:b3:3e:89:00:d7:1b:
88:14:0c:4b:b3:f1:16:93:04:44:0e:30:8d:d5:05:
c1:4c:dc:71:bc:71:a6:de:5c:9b:ae:4a:a3:57:32:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BA:CC:35:60:5E:4A:DA:88:88:A7:9A:BE:65:D9:64:33:EB:8D:8E
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b7:3f:ca:5f:76:60:91:96:b8:4e:8c:98:77:db:96:87:43:
b1:2e:61:c3:17:24:3c:ac:35:3b:9d:c5:18:cf:b9:36:f8:4a:
ff:82:d1:8a:ca:7b:41:82:b0:88:1d:33:05:d0:eb:a5:2b:07:
d8:de:ba:16:da:17:47:ea:2c:fb:a8:54:92:e3:fa:79:42:85:
38:f2:44:d3:43:5d:0e:cf:7d:5f:02:c3:d9:cb:a9:2a:cf:a9:
f3:f0:99:da:82:37:24:5e:7a:ed:ca:f6:ff:0d:57:43:89:b8:
62:2e:c7:b5:43:46:02:37:ea:4b:23:17:cb:82:02:db:44:97:
27:0a:08:84:e4:45:e5:68:40:f3:f2:5a:6f:60:ad:34:28:45:
87:d8:0e:cd:b2:36:ee:5d:1f:2a:b6:bc:8f:95:a7:df:7a:8b:
76:f4:0f:fd:c1:e4:df:e9:ba:b0:64:2a:f4:92:8e:b1:49:58:
8f:3e:6b:5b:bd:7f:4a:c6:e5:5b:5c:81:b1:c9:57:1e:a4:25:
b6:a8:7e:a0:92:eb:68:8c:02:40:56:8c:7d:d3:b8:30:c2:6b:
65:fe:6e:14:e1:f8:7e:d3:94:17:2f:95:2c:bc:93:e4:55:d4:
e4:dc:e5:65:03:51:c1:9a:1d:74:95:5f:d1:ad:56:cf:1c:4e:
ac:c3:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:02 2025 by rpki-client