Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: yUTDee5G4Fg5JEsLbtWl6GEizggycRYqck5ziBcPqRs=
Subject key identifier: 25:C0:D1:AC:E2:63:7E:4C:26:61:62:34:58:DD:2D:F8:9A:E1:77:42
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 0198D8848C6D9A7B377BE6F947BCAA6CE7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 20:00:21 +0000
Manifest this update: Sat 23 Aug 2025 20:00:21 +0000
Manifest next update: Sun 24 Aug 2025 20:00:21 +0000
Files and hashes: 1: DrD2EGGK8WeukKhW_YJ8LCGTR78.roa (hash: b5xoiz2oFHur8HWu35m6ElddpxbfSrT/Y2/iqOY1S6Y=)
2: IcWYNvOBamTxu6amEYkiVctQe18.roa (hash: DVw0i9jC2LodVXO+VD00rdFIuWtsdo/jV9gSa2jJOsM=)
3: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: YnUsmQ6bkSpAKI1ODQVFBCVmhx3PNo79MFTV4YRRx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:8c:6d:9a:7b:37:7b:e6:f9:47:bc:aa:6c:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Aug 23 20:00:21 2025 GMT
Not After : Aug 24 20:00:21 2025 GMT
Subject: CN=25c0d1ace2637e4c2661623458dd2df89ae17742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:73:66:72:dd:4f:22:1c:24:70:ce:2b:95:
98:2f:1f:92:47:c1:a1:01:cc:26:f8:f0:6f:1e:2e:
ab:60:78:55:7d:c2:63:93:54:9d:4f:15:32:03:8e:
07:0f:46:1b:3b:89:d8:2a:5f:50:91:4d:ca:a0:34:
2c:5c:cc:f2:5c:dd:41:51:92:ee:82:e3:db:ca:44:
9d:d1:f7:94:4f:91:4f:39:df:86:7a:88:1e:89:49:
c5:a6:84:3d:ea:21:3b:72:80:0c:b7:bc:2e:35:b6:
8a:4c:59:87:27:b0:2a:51:83:aa:f2:2e:c3:7f:32:
da:ff:3f:3c:fe:a4:37:01:7e:f3:56:30:86:84:b3:
0f:83:56:00:3a:02:a0:13:6f:19:ca:a1:51:d0:d1:
e3:34:02:26:0a:92:66:64:5d:57:00:27:8e:97:ee:
27:35:57:f3:0b:be:4d:60:c1:0b:33:44:7c:49:f3:
4d:2b:b3:b9:cb:86:87:47:91:bc:6a:cd:10:e3:b3:
ea:ec:30:7e:fa:8e:9c:df:74:79:23:11:d6:14:8a:
dd:e0:32:78:eb:ec:94:2f:2e:98:b4:aa:9d:c8:21:
6d:2d:d3:b7:28:15:6d:89:65:f2:00:e8:0b:a2:50:
3c:ad:93:d7:a6:a1:04:e7:50:24:85:9d:74:4a:5f:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:D1:AC:E2:63:7E:4C:26:61:62:34:58:DD:2D:F8:9A:E1:77:42
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ff:c3:d2:b2:31:16:3a:a2:90:0d:06:e8:fd:1b:e8:c8:e8:
8b:b8:bf:b1:e1:06:0e:23:7d:10:8a:f4:22:dc:eb:fe:ba:e3:
a6:03:7a:98:a6:ba:e7:c8:38:cf:c8:b3:49:02:24:d9:ae:1b:
db:24:48:42:34:4b:de:fe:46:d5:e5:b9:f8:8d:7a:39:47:a2:
b9:f2:45:a0:74:14:6c:99:db:6e:5c:de:53:ba:7e:b1:1b:0c:
1c:fb:56:f9:15:b0:f8:8f:2d:3d:ed:f7:69:bf:a4:ac:be:c1:
c5:22:02:6e:b9:69:4e:4f:b0:5f:ca:21:67:ea:52:ff:c8:e7:
82:b1:6c:84:be:6a:70:80:d4:72:86:da:a5:59:a8:26:25:41:
8f:11:2f:be:fb:80:ac:23:44:ae:63:54:eb:fb:2c:be:e3:e1:
e6:7c:f0:15:7b:b9:6b:a6:97:80:7d:b0:86:44:f5:ee:ad:ec:
a9:eb:fe:8c:8c:c7:aa:d6:96:24:cc:8b:f0:ec:a3:6b:79:af:
f9:17:2a:35:ab:65:7c:fa:55:f3:20:53:99:6b:43:dc:a8:ac:
e0:93:d3:0b:99:75:af:fc:b4:0b:dc:ea:2a:83:f4:d8:0c:38:
f9:98:0a:53:0c:8c:04:a9:86:62:37:57:1b:0b:b0:1e:b3:b9:
82:c8:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:56:54 2025 by rpki-client