Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: txMGdwmOvGrN4xoGZmzPgWi2H1qgOgyk7VTyEjoHYUQ=
Subject key identifier: 2D:AE:D2:CD:8F:37:41:2E:4C:5F:72:BB:74:72:14:09:3C:7C:5D:C9
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 0198D5BC23921554EA45A49FF4C16FA2ADA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
2: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (hash: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=)
3: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: kDl2BRTr9FA8EXUXBvarHF453izvUrjbXHlZpwdrjBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:23:92:15:54:ea:45:a4:9f:f4:c1:6f:a2:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=2daed2cd8f37412e4c5f72bb747214093c7c5dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:04:9c:58:33:49:d4:fc:e9:fc:01:a3:4d:
37:64:6f:aa:d4:c0:4f:91:77:de:a4:f6:52:e1:29:
c6:37:68:31:d8:6d:f5:39:70:69:0c:f7:12:f1:2c:
05:26:72:61:87:59:5d:ca:22:eb:ef:e0:db:38:24:
05:dd:23:26:25:c7:db:99:8e:20:44:c0:4e:7a:bc:
70:5e:0d:a2:8f:c9:97:c6:98:a6:af:1e:72:e3:bc:
8f:53:63:cf:26:76:69:83:5b:6b:79:45:b9:af:27:
32:a9:60:f4:2d:3f:c8:1b:fc:ef:71:20:37:2f:ad:
84:71:e3:93:b3:e8:1f:8b:a0:59:e0:e5:a9:6f:82:
12:fc:cd:31:49:77:f1:c5:92:36:9f:be:4e:f2:45:
06:61:1c:5b:3a:8a:e0:a4:a1:5a:4c:9a:93:f4:bb:
68:db:d5:76:1f:86:2d:2a:47:22:3f:a3:9b:c2:cf:
e2:63:47:ae:09:cf:69:d4:31:9d:ed:65:c3:32:cd:
d1:48:39:3f:86:f6:40:9d:1f:2f:36:2a:70:87:6d:
ba:fb:37:56:fa:18:51:86:69:3b:49:dc:c7:62:bc:
d3:b2:6b:96:5f:a5:34:f4:93:ff:07:27:ad:31:f9:
e1:61:04:80:cd:80:39:fe:8f:fe:49:c2:a0:45:02:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AE:D2:CD:8F:37:41:2E:4C:5F:72:BB:74:72:14:09:3C:7C:5D:C9
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a4:b7:60:33:09:1d:76:df:18:31:ce:e7:5e:72:3b:e1:8e:
38:f1:67:11:06:34:b5:49:3b:37:cc:5b:e7:a1:14:8a:f3:51:
02:36:8e:fc:ee:4b:fa:9d:15:d5:bb:82:33:7f:00:6d:fd:e1:
e6:df:3d:18:50:20:8b:16:e6:ff:58:87:f7:fe:ab:73:a5:9a:
2f:df:0e:f7:d0:68:75:4e:76:d3:bd:87:c3:97:e6:eb:6e:2d:
ae:82:d1:48:ce:b5:39:56:78:fc:25:0d:f1:2a:dc:14:79:36:
8e:ee:a4:39:00:ba:46:9e:4f:29:bd:87:22:e1:76:c0:48:70:
cf:4a:e6:ad:82:df:ae:72:51:24:fb:ec:3a:9a:64:64:c3:d2:
9e:8b:74:e5:44:24:df:22:3f:f7:92:d7:7a:d6:25:05:b7:a2:
6f:58:b0:93:05:9d:5c:1c:80:4e:c5:f7:71:2c:59:f5:dd:a4:
10:71:28:e2:5e:05:8d:96:b1:78:b4:7e:79:ba:bc:ab:d6:f3:
98:58:4e:d4:23:e4:f2:52:15:11:75:ca:e0:6e:da:4a:96:84:
a4:7b:e1:c4:27:df:3a:f9:31:d3:57:ee:46:a3:e8:91:b4:ba:
25:de:9e:9b:c0:c8:ac:46:57:c2:68:8b:4c:59:cb:ff:9e:37:
94:0b:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:52 2025 by rpki-client