Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: IJIiO/A3MlUfWYCLwwmo/XI797km/ETsq7XBAURitKE=
Subject key identifier: A9:58:8D:90:8E:6E:83:12:4D:82:B7:CB:EF:11:84:A2:BB:0A:8A:0C
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 0198D73BAF22B8B3A326130B05EBF2C0755B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:01:09 +0000
Manifest this update: Sat 23 Aug 2025 14:01:09 +0000
Manifest next update: Sun 24 Aug 2025 14:01:09 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: j1SpDjlqlH/vSf6luhlgvyINv4j488BFK5Hxzi0wqdE=)
2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=)
3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:af:22:b8:b3:a3:26:13:0b:05:eb:f2:c0:75:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Aug 23 14:01:09 2025 GMT
Not After : Aug 24 14:01:09 2025 GMT
Subject: CN=a9588d908e6e83124d82b7cbef1184a2bb0a8a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:54:ea:54:08:43:9e:e9:07:a9:d9:b2:22:
5f:e6:7c:da:86:66:02:33:85:41:e3:2a:b5:f7:b8:
ed:1c:99:ab:75:d2:8f:a8:d6:ab:48:12:c4:09:29:
8c:18:23:76:57:31:4e:e6:74:3b:81:30:e4:5a:e4:
1e:b7:be:55:5c:e1:88:86:d0:1e:51:37:91:4c:fb:
8a:9f:dc:8a:13:3b:29:5f:f5:36:14:da:d3:b2:14:
fa:65:e5:c3:14:ab:af:a4:b8:f9:d9:cb:8d:ad:41:
0e:6f:18:5c:0a:a2:5c:1d:59:d7:a9:ea:2a:b3:88:
f1:11:1a:1d:f6:64:e9:c1:3d:36:d7:6c:45:40:0b:
2f:9f:5d:5d:da:f6:86:b9:1a:8e:d3:8a:2a:b1:bb:
83:29:60:5d:89:c9:b6:ab:21:6d:2b:2c:29:15:58:
78:aa:92:85:29:07:30:8f:3c:20:7a:7a:7d:c7:67:
02:25:4b:d5:1f:e9:f6:f4:9e:76:32:83:82:67:b9:
c9:be:55:27:6d:95:d1:4d:bf:f4:81:c7:23:43:c1:
67:d6:c6:cc:ac:36:7f:09:35:2e:e4:9e:ff:e5:c4:
68:d8:70:93:cd:79:a4:9b:71:5a:66:09:56:56:f0:
91:1e:d2:c4:16:ba:31:0a:f0:57:b7:d3:3c:40:d3:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:58:8D:90:8E:6E:83:12:4D:82:B7:CB:EF:11:84:A2:BB:0A:8A:0C
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9b:04:76:d6:9c:c6:28:88:4c:00:ad:a2:bd:44:f8:41:e1:
f1:00:28:cf:b6:02:7a:34:3c:bb:24:c7:52:a7:e3:a5:1b:95:
c2:6c:7b:f8:b1:c9:fb:c2:c4:00:fb:2f:80:aa:24:77:69:a5:
17:ba:b2:90:c9:13:74:47:56:96:b6:b9:78:4a:9f:fd:93:92:
df:eb:22:eb:7d:91:f8:df:99:b7:d8:aa:f9:ec:39:b4:5b:b8:
0b:86:16:fd:d4:8a:02:9f:6b:4a:56:ed:05:68:0e:7a:91:6b:
25:0d:29:20:ae:b8:c0:67:26:29:47:66:e6:64:73:a6:70:82:
b2:75:65:f7:dc:3e:0e:fd:fd:d8:12:ec:f8:1d:53:47:81:dd:
97:dc:18:8a:16:14:c8:65:79:54:da:14:c8:de:87:76:bf:00:
c7:7e:9b:59:ce:53:51:9d:ad:bb:4f:56:64:55:01:9d:5e:58:
ed:2d:43:ba:84:f6:04:96:28:c9:a2:20:19:04:9f:80:d0:6e:
fc:ae:0c:81:cc:87:af:ff:dc:0d:92:67:3a:13:5f:0a:90:5c:
91:a5:93:44:dc:4e:a0:19:02:77:36:7d:80:a3:01:d5:a1:57:
5c:d0:e5:a4:96:15:d4:6f:17:b5:8c:56:72:aa:1e:e5:51:48:
ac:ea:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:55 2025 by rpki-client