Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: jdbkUsQNCJkph/l2Mke/UejRLggO0nS+1hqtyE5JEoE=
Subject key identifier: 46:7A:7C:43:D9:18:91:F9:70:9B:98:CF:2A:39:EB:D6:EB:53:62:AE
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 0198D84F2F8879396A41156124D935F9CBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 19:02:04 +0000
Manifest this update: Sat 23 Aug 2025 19:02:04 +0000
Manifest next update: Sun 24 Aug 2025 19:02:04 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: Oyny7UfWc2V+XHbmVSmlcwuNa/04abxG1xHVpHhgGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:2f:88:79:39:6a:41:15:61:24:d9:35:f9:cb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Aug 23 19:02:04 2025 GMT
Not After : Aug 24 19:02:04 2025 GMT
Subject: CN=467a7c43d91891f9709b98cf2a39ebd6eb5362ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:6f:ef:d5:4f:df:5a:74:a6:a4:65:cd:ee:
f8:c5:3c:c8:0b:38:b8:a2:dc:5e:6b:60:65:83:03:
d1:c1:46:06:0f:9c:c2:db:3f:90:78:10:03:8a:65:
c7:70:2f:e2:03:4e:06:19:05:a9:32:ac:13:e4:99:
e4:b4:b7:f3:5a:b2:05:36:c2:93:cd:8b:87:b4:ba:
90:10:a6:1a:a7:16:37:b3:fa:4f:f2:75:72:d1:95:
fd:99:23:75:ac:0e:c0:4e:a5:3f:d3:25:8f:4a:63:
b5:43:64:e0:a1:d3:8e:ed:c7:8c:cf:e6:c8:13:d6:
56:74:16:0f:6f:16:bb:c5:b5:c2:dc:1d:a9:61:da:
4f:cf:dc:bb:e9:3a:09:49:5a:22:cf:b3:40:7b:6a:
1b:e6:64:f2:4a:6e:0f:2b:dd:9e:7e:e4:9f:38:ef:
40:71:3a:e5:93:e5:69:27:22:4c:bd:99:b3:f5:38:
bd:d5:ce:c0:09:38:ea:14:2c:42:bd:db:e9:56:ab:
68:95:05:b2:6b:ac:86:06:f8:af:e8:e2:3a:08:56:
5d:5a:53:e1:0f:96:fe:02:9b:e4:62:4b:42:a3:e8:
7c:e6:07:40:dc:df:46:33:69:56:34:1a:69:b2:83:
af:ba:dd:a2:11:5e:a3:22:35:31:4c:39:f0:d5:cd:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:7C:43:D9:18:91:F9:70:9B:98:CF:2A:39:EB:D6:EB:53:62:AE
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ad:71:ff:ed:c9:f3:92:ba:dd:35:7f:57:c3:26:63:0c:fa:
0e:b8:58:7c:af:76:16:59:f3:7a:d2:b8:0b:ea:f6:75:27:b3:
49:70:7d:5c:5f:44:a2:a1:93:60:4b:dc:a2:a6:cb:bc:16:2b:
f7:ec:77:dd:68:1c:fc:69:b3:ca:20:a7:4c:05:c7:3e:af:96:
68:ae:f1:b6:0d:a9:a9:52:c7:f5:c8:98:a9:c9:c9:28:e6:2e:
5e:f1:50:9f:07:2b:9a:bf:78:2f:8c:15:d3:74:2a:92:0a:b4:
98:5a:41:1a:2f:a0:a1:b9:00:72:46:77:f6:ab:b6:5d:ff:f2:
42:c3:48:dc:71:32:d5:df:99:12:ff:bd:6d:0d:40:96:f9:63:
5a:9b:35:d6:35:07:e1:19:3b:c4:3b:93:0a:c2:8a:30:0e:92:
2a:5b:be:2b:90:73:15:f7:f1:f6:80:fe:f8:0a:f1:62:e3:f0:
26:fa:b5:02:bb:16:80:a4:13:cb:7c:15:29:bd:fc:53:6d:f6:
bf:3d:e6:13:d1:ca:46:7b:0b:a9:82:c1:09:77:18:6d:35:ae:
f7:61:aa:ed:bd:e2:1b:25:8e:36:5d:5e:6a:ed:14:43:bf:ea:
b1:49:45:f8:c5:1d:58:6b:58:a5:c6:bc:5a:49:60:09:a4:a7:
dc:d1:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:29:44 2025 by rpki-client