Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: FezjLFkPkX3z1YDXtl4NKmxiopuwtlD9dygoHT4zivc=
Subject key identifier: 05:63:09:B6:25:F9:C0:53:62:8C:51:12:B0:54:4F:88:7B:25:A5:C4
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 0198D8BDB034AA9A334BBC5E52CEDDBB581F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 21:02:46 +0000
Manifest this update: Sat 23 Aug 2025 21:02:46 +0000
Manifest next update: Sun 24 Aug 2025 21:02:46 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: eW2JaiilgrRTKrgZmMhdiaQaj4vE9SsUmnp8Qal6aIk=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:b0:34:aa:9a:33:4b:bc:5e:52:ce:dd:bb:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Aug 23 21:02:46 2025 GMT
Not After : Aug 24 21:02:46 2025 GMT
Subject: CN=056309b625f9c053628c5112b0544f887b25a5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3f:2b:28:ee:1d:48:b7:6f:65:2a:6b:86:c5:
d8:f1:55:06:ee:f2:29:5d:ca:78:64:e2:17:79:15:
46:93:5d:4e:b6:78:94:b4:c0:1d:d5:89:ad:30:0b:
fb:8c:13:6b:69:74:45:3d:f2:3a:73:e1:1a:0b:28:
5a:92:14:88:99:59:e8:d1:e2:34:05:3a:58:41:18:
e8:cc:8d:b5:6e:af:5a:7e:56:87:32:39:64:2a:28:
c3:7c:4f:98:49:fc:8a:26:e3:0f:ce:d2:d1:0d:26:
22:24:92:0e:72:69:22:d0:9a:46:47:2b:43:f3:06:
8a:f3:75:25:0a:1f:76:82:a5:2c:be:10:25:30:6e:
d0:31:a0:b7:b1:2d:88:2f:ab:27:ee:32:02:83:ec:
08:78:da:a9:67:e0:e8:de:af:98:b8:25:98:23:0d:
79:2c:6b:31:42:42:06:8f:cb:90:3a:47:96:34:2f:
2b:70:e7:ea:7d:b2:05:2f:da:fb:ec:dc:cd:90:7e:
d0:cc:a5:30:f3:17:72:0a:16:a0:2d:4f:15:45:f1:
05:39:df:db:c4:df:08:bc:0d:80:c6:0d:71:fe:63:
93:84:41:5f:5f:5d:6a:09:76:8f:c8:b9:10:fe:0b:
f6:4c:9c:cc:a0:1d:b1:27:2c:2c:31:a8:5e:15:ac:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:63:09:B6:25:F9:C0:53:62:8C:51:12:B0:54:4F:88:7B:25:A5:C4
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:09:99:92:ec:91:62:9f:2b:03:7d:93:7f:72:df:f8:13:e3:
9b:d3:15:b2:19:22:67:bc:f4:fd:da:2b:d6:17:f8:13:01:c7:
c1:5d:a7:bb:aa:a5:06:03:88:be:20:53:25:51:11:21:9a:92:
4b:b9:0b:8a:01:bd:7f:5b:02:02:fb:51:54:42:55:4f:92:f9:
3f:5f:87:bb:d9:af:c7:12:06:d7:16:9e:85:4d:ca:64:d6:da:
e6:47:81:cc:82:2c:6d:5c:0a:0e:7f:3b:b3:7f:99:f6:2a:ac:
c8:c5:bf:c6:ba:d3:06:69:32:94:bb:b9:20:0f:50:07:17:5f:
59:0e:45:5e:63:42:9b:68:d0:d4:ee:98:1b:58:76:e5:30:b3:
4b:e5:e8:51:9e:05:27:13:cc:14:df:76:29:10:4f:25:a8:2a:
c1:ea:53:6a:c4:81:0d:7c:df:27:77:c5:2d:4e:ab:76:ac:c3:
27:ea:b0:d1:b4:53:48:78:18:85:a5:16:99:f5:23:1b:e1:71:
71:01:32:66:cc:52:f0:15:62:23:2d:6c:2c:e1:80:7a:ae:c2:
46:65:ab:29:44:1e:ce:ee:ef:0b:7b:2b:6b:46:2a:82:62:da:
ee:79:37:27:79:dc:33:01:49:0f:50:f7:a7:8d:e8:5f:34:c1:
fe:cf:50:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:59 2025 by rpki-client