
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: QHmwdGGvKpQws/fh6MhqLxYzs0mFRdSSSeNMIXJ/WUI=
Subject key identifier: A0:30:68:33:6A:1E:8C:62:A6:4B:6A:D0:D9:7B:E3:39:83:3D:47:74
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 0198D5156F94AAD8A68EC9A765E2C88CAF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: GGrxf0Llkv8QVjNIeWzhRppbfIiGbiKeN7oW2teut2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6f:94:aa:d8:a6:8e:c9:a7:65:e2:c8:8c:af:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=a03068336a1e8c62a64b6ad0d97be339833d4774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:ac:fc:c6:67:34:44:63:4a:29:73:9c:58:
3a:6e:be:c4:fe:cb:70:cd:45:6c:9d:9f:37:7a:83:
7c:28:ff:45:d3:03:7c:1b:2a:da:fe:51:bc:93:4c:
e9:6a:5b:82:f3:56:08:27:4d:59:c4:6f:7c:36:ec:
e9:17:3b:31:88:68:4a:db:e5:38:8e:bb:49:6c:52:
2f:b1:40:23:be:10:ec:23:37:41:5a:8c:76:43:10:
5d:b3:fe:47:9b:08:8d:ba:c2:cc:95:ca:41:30:29:
92:8c:42:c3:9d:db:1c:67:e6:a3:84:0b:f0:ad:e5:
45:df:e9:28:ec:d1:c6:18:51:ef:97:1c:df:44:70:
ac:10:65:e3:5e:09:8a:d0:53:b3:7a:7f:f4:ec:d1:
81:74:af:7d:87:1e:5b:e8:b5:3f:12:5d:db:01:d8:
90:7c:25:90:32:c8:00:49:74:6b:90:d8:3a:cf:e2:
46:83:3b:97:58:67:4a:ae:00:e6:40:03:e9:a4:ed:
22:93:9e:ff:0d:7c:54:28:09:84:14:73:c5:c5:57:
76:49:e5:81:a9:8f:50:24:28:bb:83:f8:16:75:4c:
95:e6:df:d3:30:ee:15:cb:be:00:9c:31:71:02:6e:
0c:a3:ec:61:c1:b1:5b:49:33:29:a7:54:c4:95:a2:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:30:68:33:6A:1E:8C:62:A6:4B:6A:D0:D9:7B:E3:39:83:3D:47:74
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:88:84:aa:08:c9:4c:34:1c:9e:b3:ba:b7:7d:88:4f:5b:86:
7e:a2:0a:ae:7d:5a:dc:f1:1d:7f:0c:f9:56:ab:00:fd:07:df:
8b:50:f9:09:3e:e0:54:f4:6c:92:b4:ab:7b:00:19:98:77:70:
60:c5:3a:be:f7:13:4c:a2:2c:17:43:58:5f:0a:6d:7a:70:58:
6b:4e:0e:a3:8d:71:24:a5:eb:0b:2a:37:1a:bd:91:6c:b7:32:
3a:4b:12:d0:86:21:c1:0d:17:78:59:56:b6:dd:04:89:2d:6b:
32:02:cd:2b:0d:54:e9:de:87:74:d7:23:5d:be:ba:ca:23:fd:
77:4d:a9:42:06:e8:8c:58:02:4e:3b:8b:4c:15:af:f0:7b:c2:
d7:1a:27:31:91:6e:86:eb:ea:7d:98:20:cf:8d:f9:68:8a:97:
b3:00:f5:45:a6:13:f3:28:b5:d0:e4:ac:65:6f:6e:5c:45:74:
c8:12:42:6a:21:3e:57:0b:50:47:e5:77:84:66:67:e1:b9:0f:
09:88:c5:b8:f9:53:07:66:d5:2f:68:56:d1:81:7f:74:e1:b5:
ef:c4:63:19:00:75:c2:13:99:58:99:7f:af:a8:03:e2:21:c9:
76:0b:9d:e3:2e:eb:3d:63:08:98:01:fa:08:22:e2:bd:15:4a:
d1:3d:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:28 2025 by rpki-client