Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: xFfKuPOjnTjlFu+6T4gD2IEeWUsrBcOz2aGiJLRna7U=
Subject key identifier: DF:23:35:FF:37:B8:4D:52:AA:9E:71:E3:DE:C6:11:B8:6E:09:14:A0
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 0198D73AEA1232F822CB4FC1DE97AD274EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:00:19 +0000
Manifest this update: Sat 23 Aug 2025 14:00:19 +0000
Manifest next update: Sun 24 Aug 2025 14:00:19 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: 0URl5OP87yViYT1AToK06+0BF0XDIwNhCUDXxvJpN5E=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:ea:12:32:f8:22:cb:4f:c1:de:97:ad:27:4e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Aug 23 14:00:19 2025 GMT
Not After : Aug 24 14:00:19 2025 GMT
Subject: CN=df2335ff37b84d52aa9e71e3dec611b86e0914a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:df:5c:c1:83:9f:5c:e5:59:8c:e3:de:e0:
2d:48:06:30:be:03:84:35:64:aa:15:0b:d2:74:2d:
4b:7f:de:03:22:2a:51:1e:4b:cd:91:f0:de:7d:7a:
f1:c8:49:5d:d7:51:16:e8:49:e5:c0:d9:91:7c:78:
d7:14:cf:12:46:64:d8:33:02:6d:67:fa:e9:85:e0:
9b:b2:e8:e1:b7:07:2e:e1:32:98:3f:81:35:2b:b4:
b7:95:9a:fa:4d:97:13:ec:fd:8e:23:38:76:9e:53:
a4:0d:77:ef:32:98:61:83:94:90:5e:45:a0:28:e3:
bb:73:b2:f5:1d:a0:6f:20:3f:7a:99:52:fd:81:c3:
4b:90:15:f9:69:7f:8f:7e:44:90:55:09:33:03:83:
d6:5b:cd:4e:28:29:37:b3:4e:88:ed:a0:d6:34:14:
ce:7d:bf:53:ed:62:b0:d3:31:d0:96:36:b5:e2:98:
cd:5d:44:3c:6c:90:a8:2e:44:69:17:78:0a:28:7b:
54:7a:54:d2:ab:cd:20:c1:47:c4:f9:ca:cd:6d:95:
0f:e4:77:82:08:a3:35:36:19:39:b7:b3:3f:65:c7:
be:db:ca:ac:14:2f:78:c5:53:2c:9d:29:74:43:e8:
7d:6d:cf:34:62:a5:45:26:d2:e5:38:45:52:71:1c:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:35:FF:37:B8:4D:52:AA:9E:71:E3:DE:C6:11:B8:6E:09:14:A0
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:f5:8c:6f:d5:a7:07:a4:af:7e:52:8a:31:50:47:66:38:35:
27:bb:59:94:50:68:f1:58:37:5d:24:83:93:13:a6:fc:83:6d:
8a:f4:10:bd:7a:c1:a0:45:8a:43:e4:be:5b:ca:8c:ed:e6:42:
87:40:cc:d8:8b:3b:de:a6:a3:e9:1a:38:d9:1f:fb:6b:51:0e:
78:ca:3e:40:14:ea:c7:ea:b4:6a:6d:c5:b0:ed:d0:71:cb:1e:
50:d1:1e:9a:4e:16:6e:40:37:fb:05:a5:07:d1:3f:ea:78:a4:
9e:e6:8a:f1:11:66:12:87:2d:fe:20:c4:0c:49:cb:da:cd:66:
05:38:a4:a6:ba:df:05:40:64:70:01:8b:75:1b:cf:8d:f8:3e:
6d:6c:2c:d8:d5:11:02:25:f4:bd:5f:c4:d4:f2:cd:7c:43:3a:
8f:35:8a:5c:d4:8c:c2:b3:38:fd:04:06:eb:73:26:44:84:dd:
2a:f7:07:87:69:9c:65:61:60:f8:01:0b:61:59:62:3f:4b:aa:
ad:5e:7a:b1:11:3c:b5:74:15:fb:30:98:0e:4b:73:31:31:bd:
79:b4:51:d9:7d:49:64:67:bc:0a:49:89:bb:9e:c4:b6:19:dc:
bb:dc:5f:6c:60:cc:a0:b9:57:6e:07:03:c8:99:44:6a:8a:81:
96:a0:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:52 2025 by rpki-client