Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: rWo+Pwyp8Z8Eqx0zhxBqd7qBJu/YOeuH0UpfOHJIRec=
Subject key identifier: A8:B5:55:7F:F2:AA:C8:83:6D:46:C8:0E:BE:30:48:3E:FE:80:BA:B6
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 0198D4E04784DCDCD5CBEAB275738E966ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:04 +0000
Manifest this update: Sat 23 Aug 2025 03:02:04 +0000
Manifest next update: Sun 24 Aug 2025 03:02:04 +0000
Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: DqV0f1zNCOu90D8WZG+tTD9Il7XMK9yMltU6aQAUu8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:47:84:dc:dc:d5:cb:ea:b2:75:73:8e:96:6e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Aug 23 03:02:04 2025 GMT
Not After : Aug 24 03:02:04 2025 GMT
Subject: CN=a8b5557ff2aac8836d46c80ebe30483efe80bab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:11:d7:0f:18:69:08:9c:3a:d8:8b:8d:00:
d1:2f:16:56:3e:82:1d:d1:fc:b9:75:73:d1:40:83:
44:e5:2f:b1:94:49:64:db:84:6a:2b:db:a5:7d:d7:
ed:81:7b:d6:cc:3a:32:7c:03:dd:6f:e7:78:91:8e:
c1:6a:62:94:e5:35:c1:d6:c5:b6:f7:1a:b9:2c:42:
9b:26:bc:55:90:1f:43:1a:5b:75:e0:c1:05:40:3e:
4e:19:44:24:16:54:fb:0b:e7:da:52:49:1e:cf:ce:
9f:6e:8e:5b:2f:aa:0b:a5:87:48:ec:54:f8:98:27:
87:b2:72:62:ef:a3:86:73:61:24:4c:a8:df:5e:88:
ae:54:79:8d:bf:19:22:95:f6:7c:68:f3:33:fe:75:
97:30:07:ee:ca:1e:57:22:98:9a:ef:ce:90:9d:82:
98:d4:88:eb:8e:70:a5:ae:3a:41:b2:3f:c2:62:51:
18:bb:66:02:7e:03:47:a0:29:5a:d0:fd:01:29:1b:
bd:00:76:2f:74:bf:5f:c8:bf:7e:22:7c:c1:31:83:
1d:4d:c4:14:20:83:e7:ff:24:ae:a1:7c:48:2e:79:
f3:e6:87:18:c1:82:d9:37:e0:75:c3:fb:c5:70:63:
f3:75:0f:ee:50:42:e3:ed:d1:37:cf:17:7f:85:5a:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:55:7F:F2:AA:C8:83:6D:46:C8:0E:BE:30:48:3E:FE:80:BA:B6
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:99:cb:02:b3:de:bd:b4:5a:ef:24:c8:cb:d3:33:23:0d:
f0:16:0b:03:c5:36:32:be:94:fc:99:f5:6c:39:8d:90:0d:c3:
3e:60:07:f0:42:08:44:aa:97:ea:9a:11:7d:a8:ea:99:a5:84:
72:e4:8b:a5:b8:d4:cd:10:4f:da:bc:4d:6a:ab:fc:00:a9:29:
dc:f8:2f:36:7f:3a:98:ec:ae:67:77:f7:73:01:41:cd:6f:46:
6f:f7:25:4b:d1:7e:4d:e1:bc:f8:8f:ab:26:64:1f:63:a4:d0:
d9:b3:da:ea:bc:14:e7:14:4f:10:fd:85:56:4b:36:72:ff:ef:
d1:38:29:fc:96:96:6e:65:0b:55:0f:1e:10:32:69:a7:d8:70:
e1:bd:9d:9c:49:9a:98:b5:1b:96:7f:6a:aa:1a:a9:f0:0e:cc:
9f:50:d7:68:c6:d9:83:f7:71:0c:51:72:24:9e:d2:2e:ca:21:
99:ac:0c:2f:8d:56:c1:bd:5d:86:b7:d0:35:a9:35:05:2f:46:
17:46:9b:76:6f:59:1a:d6:38:32:14:17:f5:9b:c8:65:95:a9:
2c:ee:b0:78:6c:ac:ef:ee:db:27:2b:62:71:df:69:29:d7:aa:
c0:8b:f9:ad:29:a3:c9:eb:ed:4e:0c:00:82:47:56:44:e0:30:
4b:a8:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:45 2025 by rpki-client