Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: MVIh/R4Q/p9/YDNw8U7O2ZYjTQSbhSIYp9E4JWK1zyE=
Subject key identifier: 59:96:CD:D4:56:F6:C2:13:FF:A0:11:D3:EF:E5:A6:6D:A3:5A:0C:CD
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 0198D5BBC64FDFE7AD2D0AB7E42F59CF2BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: YZKPr3Mfp+Z0T9hLPBnKj6nQoCe+84U0tiPAVxLU4kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c6:4f:df:e7:ad:2d:0a:b7:e4:2f:59:cf:2b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=5996cdd456f6c213ffa011d3efe5a66da35a0ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:c8:2c:c9:43:9f:82:11:45:34:e2:84:a4:
e2:fa:d7:62:b3:b8:ed:04:0f:78:59:1b:01:c1:10:
11:43:52:22:42:8e:d9:89:ea:83:c7:6f:ad:b1:25:
85:a1:b2:75:ea:ad:f3:40:cb:a5:ca:8f:4d:5a:ed:
67:9c:01:fd:20:dd:7c:c5:c4:e6:30:d0:a9:08:a1:
be:d8:69:bd:42:cb:40:83:11:a5:7d:49:46:95:15:
47:a9:0a:c9:2c:a4:20:8c:1f:92:f6:36:11:af:8d:
2a:8a:29:1a:60:24:db:9f:e6:4d:2d:0f:78:30:92:
5b:45:44:ab:7f:de:81:da:78:4c:16:36:17:e5:da:
9a:af:fc:74:dc:57:22:19:1f:eb:97:60:3a:9b:29:
da:7c:04:46:4f:7e:12:d4:a7:c6:88:06:51:eb:a3:
dc:ab:b3:7b:71:61:29:74:9c:21:3d:d2:2c:25:0b:
0c:65:06:21:00:d2:bc:76:c8:07:d9:16:43:0e:79:
5b:a7:21:d3:f4:45:9f:42:3c:12:64:5b:ec:ab:a3:
6e:e4:d7:81:3c:19:21:d9:91:dd:28:0d:06:6f:bb:
f2:9d:09:57:a2:81:34:69:46:88:0a:26:2c:20:5c:
b5:f6:3f:e5:78:dd:75:64:b5:8e:aa:0c:80:fe:c3:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:CD:D4:56:F6:C2:13:FF:A0:11:D3:EF:E5:A6:6D:A3:5A:0C:CD
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:af:2b:ac:a0:aa:be:53:1a:f4:48:9b:ac:d5:35:96:b0:f9:
9c:13:98:83:e2:6a:c4:6f:71:27:92:a9:49:a6:60:0a:00:1e:
8e:8b:17:0c:90:69:bc:5e:ad:c8:cf:dc:e1:6b:93:42:7c:bd:
d2:f3:34:4b:af:e8:96:a8:11:ce:ea:12:a7:a9:89:53:c0:55:
82:ed:61:31:a4:f5:16:f9:7d:2b:dc:4f:91:db:18:0b:29:ab:
43:08:9e:da:66:6b:24:b1:8d:f1:5e:6c:55:cf:cd:cb:b7:c7:
2f:94:bb:df:a3:1a:7a:a0:8b:2d:b8:b6:6e:68:1e:60:b9:c3:
62:73:18:94:49:35:c2:90:19:c9:59:cc:9a:0d:29:f7:c0:e9:
91:78:69:58:94:c8:4b:46:d8:28:69:ec:f4:d7:31:83:e9:ca:
ad:0e:14:4e:fa:82:d5:7d:d1:91:d3:65:3f:06:5a:ce:ac:fc:
08:e7:75:8f:49:ab:3c:36:a9:5a:2f:07:d8:ac:e8:a2:c0:c1:
6c:f9:97:34:8b:62:16:d7:94:50:21:86:99:c6:2e:70:7a:e7:
db:10:5e:9b:86:3d:98:8d:12:bc:88:ea:cf:7c:bf:81:39:7d:
bc:36:e5:e1:df:05:20:46:0c:42:d7:c2:1f:ab:e3:85:ef:bc:
96:3f:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:59 2025 by rpki-client