Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: KOJrr5z/WAmtVMvYZ8Vt3DlEspvctCWnyfkUgtdOF9g=
Subject key identifier: C6:5A:F1:4B:E5:A7:FD:11:7C:6A:6E:C6:CB:53:E0:4F:20:27:FC:4B
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 0198D54E02C60AC5A2C9C568303617DE34AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 14E1
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: IWqrCHnYvz0R2syHfQt0zIvIcFXndyBMo0qKXA7iJgk=)
2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:02:c6:0a:c5:a2:c9:c5:68:30:36:17:de:34:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=c65af14be5a7fd117c6a6ec6cb53e04f2027fc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:f3:ec:0f:90:30:ec:ad:0e:2a:1e:43:ec:
7d:50:51:a6:2c:20:93:d6:0a:2f:9e:76:4b:37:96:
7b:53:a6:8f:ab:48:03:4c:65:50:0c:42:cc:84:50:
18:83:f0:f8:72:4b:c4:7d:e5:04:26:2c:f3:ad:c4:
7d:8b:83:25:04:7b:24:2b:95:1e:5c:92:90:08:12:
0b:77:97:ca:75:30:fb:9c:0d:b2:cc:be:47:b1:0d:
d1:5a:29:e4:26:1d:83:0c:ba:81:8b:62:18:b0:61:
ed:19:3a:dd:a0:8e:4d:b9:93:db:26:22:c4:e1:39:
ed:d1:05:e1:15:10:c5:d0:7e:92:08:cd:9c:b8:2a:
72:06:ba:d2:50:a5:56:aa:6c:93:94:fa:f2:23:5b:
aa:0f:5e:d0:b7:33:e0:0a:0e:99:e8:d9:85:91:33:
c1:2c:94:ab:f3:34:bc:04:05:0d:a8:19:c4:9d:db:
7a:49:8b:fc:50:e1:26:0a:80:91:1a:07:af:0b:8b:
a4:08:cc:7d:28:be:97:d9:9f:18:0e:ed:8e:11:76:
f4:f4:7f:89:54:28:be:d3:20:4b:48:20:cc:cf:32:
92:82:0c:8a:6b:e1:24:cd:c8:0b:cc:0e:10:13:fd:
37:46:2d:3a:ca:3e:f6:3f:e7:88:98:03:c9:63:8c:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5A:F1:4B:E5:A7:FD:11:7C:6A:6E:C6:CB:53:E0:4F:20:27:FC:4B
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:6b:5e:e3:98:20:c5:25:a7:fb:18:3f:5e:34:38:78:30:
4d:7e:29:f0:92:56:44:2a:c0:8a:e6:32:53:55:23:d2:53:e2:
fe:12:76:d9:21:0d:8a:9d:a4:b2:47:73:78:67:51:d1:c7:65:
84:28:11:22:c1:5a:ca:57:e3:4c:16:0a:05:52:7b:7d:07:18:
41:39:39:4e:37:88:ff:6b:c2:21:2b:7d:2c:2a:9f:65:33:a6:
6c:69:d9:32:fb:f4:32:38:eb:ef:d8:db:a6:2e:47:b6:33:f7:
43:a7:f9:2e:42:d5:88:86:8f:61:74:89:72:fb:f0:5e:f5:52:
ea:55:9f:17:26:c3:c1:f7:76:7d:d9:4a:a4:e5:37:1b:41:ef:
af:d7:0b:07:e9:0d:a7:a4:a4:b4:9d:76:a1:8f:25:8d:16:c8:
19:a0:e3:60:6f:c6:18:4a:ae:93:ee:ae:bf:5a:6d:14:ac:78:
3e:8c:bc:05:26:57:c8:0d:e5:88:ef:c2:a1:25:1e:00:db:63:
6e:15:df:41:81:28:ec:f4:24:4d:c5:3d:db:36:64:4f:10:c4:
da:fd:cc:77:39:03:4c:46:18:52:9e:1a:a6:f7:f0:c9:32:5e:
03:9b:2f:14:5f:45:7e:0a:fc:db:e4:06:33:3f:30:26:48:98:
78:ed:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:02 2025 by rpki-client