Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: OV0DN/cpHPgs8S8wwTBj4F2/NpIfLZK2rOe0QFoD9Qw=
Subject key identifier: 75:C0:68:40:D8:A1:B8:7F:49:EB:8C:CF:C8:2B:40:A9:7D:F8:62:19
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 0198D4E0D5CDF6A24ABFF83C9FB334C42F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:41 +0000
Manifest this update: Sat 23 Aug 2025 03:02:41 +0000
Manifest next update: Sun 24 Aug 2025 03:02:41 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: E6Y67I2YGRPkOxcdRdgjWWjUjJQ890CuKWIv3bGCZQ8=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d5:cd:f6:a2:4a:bf:f8:3c:9f:b3:34:c4:2f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Aug 23 03:02:41 2025 GMT
Not After : Aug 24 03:02:41 2025 GMT
Subject: CN=75c06840d8a1b87f49eb8ccfc82b40a97df86219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a5:eb:85:f3:67:6b:8c:f0:ab:7a:2e:b8:3f:
02:37:6e:57:43:45:07:f0:7e:2f:a0:fa:90:bd:c2:
39:af:59:49:b9:c4:65:39:57:d6:1d:b1:52:0f:c4:
03:f2:a3:f8:f6:66:33:ea:79:ae:9a:63:97:d4:a3:
7d:5a:03:9e:17:8b:30:4f:b9:a9:9b:3f:ad:ff:cf:
a9:5e:ba:9c:5d:6f:62:36:70:ee:ce:ae:50:52:91:
f9:f8:e3:4e:04:f2:25:f0:a6:0c:e0:5f:f2:61:3e:
9f:6b:e0:e1:86:b4:a5:3c:b9:36:16:d6:4f:ea:ed:
ff:37:f3:b6:67:19:3f:4f:e6:f0:27:1d:5d:7c:44:
ec:94:c7:e9:7d:52:fe:5d:2c:c0:ed:d6:4b:e6:78:
95:b0:f6:fc:d0:2c:e4:ba:a3:c9:1d:4c:02:b2:53:
30:36:0c:ce:26:8c:3c:83:76:fe:e8:3c:30:2a:bf:
10:06:8a:51:4a:7c:20:67:bb:a5:73:e1:e8:4a:6e:
7b:a4:c2:08:c4:eb:3a:a0:07:0d:48:16:e5:f2:e4:
bc:73:36:07:f5:7b:4e:0a:a6:ae:17:bc:73:8c:6d:
89:d9:10:a4:16:ad:93:fa:4e:f5:e6:1b:69:c5:db:
c1:9b:80:ab:ff:6e:ff:90:94:1e:92:e4:2e:8d:62:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C0:68:40:D8:A1:B8:7F:49:EB:8C:CF:C8:2B:40:A9:7D:F8:62:19
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:72:bd:ce:f9:ed:80:8d:07:97:af:ea:ce:e5:64:e8:3a:
be:98:e2:19:2f:87:93:47:27:b0:3a:00:1c:a4:a7:ff:8f:cf:
ab:af:00:c7:6e:3b:ab:31:5e:9e:f1:95:f9:ec:fd:4d:ff:71:
22:aa:93:18:41:f7:39:3c:af:cb:30:fa:45:fb:69:00:34:32:
f2:fb:d2:e4:08:33:82:44:4d:25:2f:82:94:35:41:39:6d:d4:
d7:a3:b0:f6:ee:28:92:c4:2e:1b:6d:fa:32:7a:4d:28:f7:c1:
df:f5:7a:d9:30:34:96:c9:08:6a:31:ef:df:a2:2d:55:56:7f:
73:93:a6:44:9e:5f:70:83:00:c6:fa:f6:51:1c:12:c3:ac:14:
b3:5b:34:30:32:01:be:e7:e7:4a:0a:2a:9c:ef:37:b7:c8:62:
57:59:73:67:6d:4a:54:37:e2:51:5d:2e:e0:36:24:ad:2e:77:
a5:39:4e:3a:9e:12:bf:17:cb:44:69:d7:20:0f:a9:98:91:ce:
c5:e6:86:e0:8c:1e:ff:ad:73:a1:38:00:43:85:ba:17:e0:e0:
51:ee:14:87:fd:76:03:03:1b:3b:2d:20:99:17:4d:5f:27:77:
40:cc:2a:a2:bb:bf:10:a6:18:8d:c1:e0:b6:da:86:31:af:09:
0b:09:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:24 2025 by rpki-client