Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: O+7+07U9FxW8EG7RoMlR87J8cYvgu8DxcpIDcjCiy08=
Subject key identifier: 7D:0B:8B:FC:7F:A3:56:64:70:42:27:BE:69:6C:7C:C6:DD:A8:17:92
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 0198D5836CB527D1906EF17D40F7C4E80D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:16 +0000
Manifest this update: Sat 23 Aug 2025 06:00:16 +0000
Manifest next update: Sun 24 Aug 2025 06:00:16 +0000
Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=)
2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=)
3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: Fi88z7b0xaHIlEMUcrEnDMnGPWvUfOC/R5XTVCd4EFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6c:b5:27:d1:90:6e:f1:7d:40:f7:c4:e8:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Aug 23 06:00:16 2025 GMT
Not After : Aug 24 06:00:16 2025 GMT
Subject: CN=7d0b8bfc7fa35664704227be696c7cc6dda81792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:85:b4:e2:df:fa:c2:94:a7:be:7b:3b:62:
71:4f:f6:63:e2:a0:7b:d2:17:e3:a3:65:3f:29:88:
9d:2f:5d:55:ca:97:4c:ff:1b:58:80:68:06:76:dd:
ec:cb:c1:1a:fc:d4:f9:8d:aa:2a:c0:37:d2:5b:02:
5e:4c:97:cf:27:5e:9a:21:4c:72:26:53:0a:3a:57:
8f:c7:ef:e6:e9:74:8c:2c:ec:f2:2f:b9:23:f0:5c:
89:31:02:60:14:db:c2:51:fa:f2:2a:c5:75:26:f6:
ef:fa:c3:88:9c:f4:91:81:5e:5e:e7:be:5e:e7:d3:
38:50:8e:a6:4a:b1:ae:bc:11:e7:e1:25:52:4f:82:
0a:f4:ff:8e:08:d6:05:78:04:3a:08:49:ef:30:5a:
fb:aa:5e:33:c8:f1:9c:f6:85:23:d6:a2:dd:7b:31:
c4:a6:78:a4:2c:f4:c8:7e:af:94:8b:13:c4:66:01:
8b:ba:78:23:b7:8e:6c:e9:5e:af:57:e8:4e:86:3b:
a4:33:00:0b:23:8f:d6:47:02:fe:88:5c:1e:15:d6:
13:22:10:49:11:08:86:9c:27:b9:17:24:58:67:66:
43:78:5d:66:be:6e:3d:04:9d:39:ec:7f:5e:10:f0:
df:32:17:f2:e7:88:89:3a:e0:a4:ec:aa:12:4e:ce:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0B:8B:FC:7F:A3:56:64:70:42:27:BE:69:6C:7C:C6:DD:A8:17:92
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cb:a2:c3:6e:5f:91:39:5c:53:67:98:36:aa:35:d9:ba:ce:
9b:0e:de:40:51:80:89:68:fb:7e:6b:62:e4:1d:b1:75:9a:b5:
7c:d5:18:97:de:0f:86:2d:0a:e6:1d:dd:7c:25:b0:56:38:e8:
2f:c8:68:cb:73:af:52:d0:b8:8b:c0:56:4f:11:45:d0:f1:02:
da:de:ae:9e:dd:d5:df:34:d0:65:7c:7f:13:5f:4e:c9:08:30:
e6:ab:b4:d2:39:76:d1:ea:0a:91:3c:ca:61:66:47:60:6e:23:
30:f4:98:fc:f8:2a:f1:16:f5:69:2d:a3:e3:13:31:3e:03:32:
9d:9b:37:64:da:7c:2a:c8:34:60:c9:25:05:b2:60:73:91:49:
37:cf:c0:f8:9f:9d:1c:8f:58:31:b5:ab:a8:a8:14:ba:68:0a:
79:d9:71:57:54:77:2d:b5:d1:f5:dc:69:b7:6c:e4:e6:d9:fe:
03:27:57:fb:9f:48:5e:07:7a:c3:b7:ed:49:4b:71:33:e5:a7:
de:5f:63:3a:ac:a6:12:13:09:3a:e4:f2:55:a0:e3:2f:6a:f7:
c0:e9:a3:95:82:0d:e8:c7:95:01:98:c0:22:38:08:92:5a:ae:
77:b2:ee:fd:c5:d7:6a:0f:a9:6c:a7:f6:bc:00:a0:2b:f3:fd:
a3:ed:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:22 2025 by rpki-client