Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: njLRckSNrcQLOxU7uX9EsqI8pH9Eor8TG1p9bTrFZ4o=
Subject key identifier: 8D:F7:3D:B8:16:49:8D:86:5C:4B:3F:4D:55:B6:24:9B:AA:B6:BC:7B
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 019A00A2F463408BD291756CCA767EC84571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 157C
Signing time: Mon 20 Oct 2025 08:01:10 +0000
Manifest this update: Mon 20 Oct 2025 08:01:10 +0000
Manifest next update: Tue 21 Oct 2025 08:01:10 +0000
Files and hashes: 1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: JkgiQ0McozbVKbwerKrPrlNK7yUI7nro85dd6noV+uQ=)
2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:f4:63:40:8b:d2:91:75:6c:ca:76:7e:c8:45:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Oct 20 08:01:10 2025 GMT
Not After : Oct 21 08:01:10 2025 GMT
Subject: CN=8df73db816498d865c4b3f4d55b6249baab6bc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:0d:ef:17:c0:18:42:86:90:06:1f:d4:39:
aa:5e:92:a4:54:11:6a:13:ed:20:8f:44:2f:b6:20:
f6:8d:a6:07:11:f1:43:7a:4a:eb:9b:0e:35:29:95:
f2:97:55:72:1b:d6:9f:98:b0:dc:ae:63:a2:c4:64:
81:e5:99:ab:6c:10:2f:30:93:c8:a8:99:b7:27:08:
2b:9b:fb:cf:8e:2e:56:be:49:fe:f0:ec:5d:e0:f4:
e0:55:14:95:75:0e:65:e8:a9:c0:7a:bf:1a:47:b3:
53:17:d3:19:33:df:7a:3c:2f:9d:10:87:dd:bd:ea:
3d:d2:34:aa:37:46:57:cc:ee:b5:ac:d5:22:e3:3b:
f9:dc:64:27:71:1d:22:d9:1f:d1:c9:29:7e:a9:70:
52:5d:56:9d:64:6b:12:3e:48:f8:c9:e1:a3:d3:a6:
15:c3:60:44:49:7c:5c:85:f9:c6:48:d6:58:2a:74:
49:3a:6c:2f:f9:0c:0b:56:3d:42:c6:5d:e8:bb:9d:
e7:73:85:67:19:a7:e0:a0:d4:33:f5:b6:20:df:e1:
af:e4:c8:5d:60:68:12:56:1d:2e:bb:f9:10:07:95:
88:66:94:a1:78:52:3e:5f:e6:d2:aa:fa:b3:87:a2:
02:7f:c9:24:38:92:81:77:4f:12:45:f0:e8:e6:23:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:3D:B8:16:49:8D:86:5C:4B:3F:4D:55:B6:24:9B:AA:B6:BC:7B
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:64:09:7c:16:bd:90:b0:69:8e:4a:b7:91:fa:14:77:31:84:
9e:ea:a9:01:68:08:b4:c6:b3:b1:42:cf:16:7f:9e:9e:e9:7e:
9b:4c:8c:c1:9f:a0:d7:92:54:3e:aa:c3:1c:c9:5e:f6:d6:49:
2a:30:0d:c3:1a:0b:89:c4:03:f2:87:6a:bc:1b:45:99:20:ba:
1c:90:24:93:4c:15:c0:28:9e:18:b0:fb:be:d6:6c:6a:ef:26:
8e:2d:cc:e4:7f:a6:df:ee:1a:26:f0:6e:15:3e:9d:b6:9e:19:
2a:20:c0:1a:65:ef:66:da:dc:a1:e8:61:8c:7d:b1:5c:85:4d:
07:e2:98:b7:26:91:b2:2e:b8:1b:93:41:43:c5:21:b4:5d:92:
a8:93:aa:e4:b0:78:09:5e:47:ed:98:c7:45:fe:16:69:0a:a7:
21:ce:2a:db:23:0d:6e:32:b0:05:bc:52:ee:8a:f6:a7:76:23:
fd:3d:67:49:09:70:d9:e4:4a:10:0e:2a:a9:b7:35:9e:fe:d6:
59:d3:5b:37:b5:a2:19:0e:5d:f6:4d:98:99:7f:01:4d:d0:81:
54:b7:df:31:d0:32:d4:af:1e:ad:6e:11:85:7e:9f:2f:0c:03:
17:dd:0d:c3:ab:b7:78:9e:0e:80:89:9f:b3:b8:4d:16:c7:1f:
0a:a8:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:32 2025 by rpki-client