Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: C+FC3jtyrq7dDyxr8hRU1ecIa8glXUtctVLCen7HXXE=
Subject key identifier: F5:D8:0F:41:75:CC:6C:16:81:FE:2A:14:E2:5A:99:10:AB:91:A0:48
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 0198D51581BE59A4C0EFA0239B124139CC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0EDC
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: WDVuYh3VIfZgWW98X3/98wO/zXF6qCo/xGuSx0h60UQ=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:81:be:59:a4:c0:ef:a0:23:9b:12:41:39:cc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=f5d80f4175cc6c1681fe2a14e25a9910ab91a048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:45:38:8f:ff:52:fd:2b:90:5b:b3:cf:b4:
b3:8a:4e:2e:cf:7f:c6:49:4e:5c:85:15:96:f8:e4:
1c:ff:ed:be:53:ad:5a:79:85:ee:2c:55:24:ee:37:
91:09:8d:1e:d9:f9:0a:ce:75:ef:0d:6e:af:fd:2a:
dd:c4:7b:88:7a:4f:59:07:7d:0c:ac:2a:88:eb:aa:
d3:4d:6d:d0:13:76:2b:5b:8a:f4:2b:02:4c:d7:0b:
4d:53:7e:be:f7:0f:06:dc:51:88:f7:35:f5:19:60:
6c:da:db:2a:31:a4:38:b6:6a:17:a1:77:ec:49:5c:
b3:8f:d1:23:b3:d3:a2:0f:b9:12:20:bd:4c:50:92:
3e:b5:d1:aa:f1:47:ce:af:4e:5b:f9:3e:f2:c6:ad:
fa:46:c4:ae:95:05:98:47:e9:fb:f3:23:c7:80:c1:
8f:c8:85:60:9a:53:c1:f7:74:03:f3:7c:c0:25:15:
4e:c1:46:d3:6c:d2:1d:32:c1:49:43:54:04:f6:1e:
93:40:c7:5a:63:be:89:3d:f2:2a:ca:34:bf:06:ef:
b4:8a:b0:1e:b0:51:54:c8:d0:2b:98:7e:bf:87:ba:
5d:56:87:08:47:92:ac:23:a4:6b:37:9a:25:cf:90:
ba:2a:96:32:fc:32:0d:89:51:9a:a7:98:08:50:26:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:0F:41:75:CC:6C:16:81:FE:2A:14:E2:5A:99:10:AB:91:A0:48
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d4:c3:9d:48:c7:3b:81:56:78:b3:bb:7e:67:92:0e:34:9b:
c6:cf:16:01:8a:53:e3:67:08:5a:94:c9:d4:95:16:1f:d3:fd:
ff:48:c6:77:c6:b8:b2:38:d2:6c:59:6d:e8:bb:89:80:c4:4f:
e9:ef:c9:53:d7:7b:ef:4d:26:00:1b:9c:17:bc:9c:01:dc:ac:
88:74:c6:15:b3:13:19:4b:30:54:02:fd:c1:3c:3b:a1:64:ad:
f6:ce:4c:6b:92:39:88:8d:1f:62:5c:8d:a9:27:29:52:e4:12:
9d:b8:c5:19:69:d4:2a:a3:81:1e:b5:39:5d:e6:fb:1f:46:9b:
23:db:4d:d2:1d:05:10:87:82:19:fc:7d:16:e0:cb:30:75:df:
f1:37:6a:de:a6:12:e2:d0:ac:61:52:f2:a4:4a:da:4c:1e:0f:
eb:0e:88:ce:1d:79:50:eb:9c:54:ff:5d:1e:bb:ff:ab:38:b1:
52:d3:c5:ac:8d:fb:4a:63:70:60:c5:a8:6d:f8:84:2f:85:78:
5f:8c:4e:41:ed:6f:fb:29:c0:da:e9:e6:28:e7:dd:7e:0a:59:
55:48:6a:8d:80:4a:38:2f:c0:ce:af:a7:68:44:9e:3e:c7:47:
b2:74:18:bc:e1:1a:96:db:21:fe:a5:80:63:d2:50:f3:67:41:
e5:01:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:27 2025 by rpki-client