Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: gv6l2811sPNkGoPZC2yPowbmhM2ab4dfzm5apAIcTBM=
Subject key identifier: 5E:4C:D2:A4:FC:C9:B8:9F:1B:1A:A3:7E:04:58:51:55:B0:41:93:9A
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 0198D4A7FEBDEAA87452F2F6E3F8556D8B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 02:00:36 +0000
Manifest this update: Sat 23 Aug 2025 02:00:36 +0000
Manifest next update: Sun 24 Aug 2025 02:00:36 +0000
Files and hashes: 1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: j16dZPMQk/sfvBTv1zA9C36+7aruFLqOu+RUZbRvICY=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fe:bd:ea:a8:74:52:f2:f6:e3:f8:55:6d:8b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Aug 23 02:00:36 2025 GMT
Not After : Aug 24 02:00:36 2025 GMT
Subject: CN=5e4cd2a4fcc9b89f1b1aa37e04585155b041939a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:1e:aa:d6:37:f0:e7:a9:1c:a7:39:32:8c:
c6:b6:9a:0e:0c:d6:b8:96:39:18:e6:e0:b1:b3:9f:
6d:fb:a1:33:2e:b1:3c:40:f6:14:93:c0:8e:d4:bf:
e2:f1:c6:c8:e1:0e:ac:35:5d:27:93:c6:17:e2:bb:
3d:47:24:28:2d:df:eb:0c:0b:eb:6b:8a:0b:48:6d:
ca:3f:7d:54:14:11:46:9c:09:e1:4d:0d:27:5b:43:
aa:31:89:d5:b0:fb:86:26:76:ae:3c:99:e0:06:93:
be:43:34:d1:23:af:dd:1f:18:a5:c1:50:86:b6:69:
37:f0:d6:b1:de:a9:1c:f2:ba:a0:6b:69:13:92:b1:
ea:e1:c7:27:b3:29:8d:ed:a7:d7:9b:0a:7d:12:cb:
4b:d9:5f:7e:6f:f3:44:49:2a:f0:ee:11:7a:77:98:
ba:36:b0:2b:65:58:5e:b5:6e:01:b8:0f:a8:df:f2:
fb:d6:b7:ac:7f:03:0d:05:c8:4c:1f:75:a1:fa:00:
26:19:f2:d9:9c:17:cd:6e:89:94:75:43:77:c8:fa:
4c:90:a3:ae:cc:41:76:da:22:70:f4:0d:7f:aa:26:
91:0e:3e:d0:37:35:c3:67:f7:52:1f:e5:c2:15:4f:
18:b6:d9:8a:f7:8b:46:e5:08:73:40:52:3b:3e:75:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4C:D2:A4:FC:C9:B8:9F:1B:1A:A3:7E:04:58:51:55:B0:41:93:9A
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:87:41:4e:57:79:f6:9e:b1:60:01:46:a3:90:fc:f2:12:2d:
27:f7:b6:5a:fe:99:4d:bf:bd:1a:a7:e6:38:7d:8d:f4:98:f8:
71:70:5a:01:8f:9e:89:03:62:8e:a8:ee:c9:99:c2:dd:94:ca:
cc:63:8d:17:8b:ce:9f:f6:2d:4a:ff:8a:50:02:52:2a:52:92:
d8:cc:f5:17:8b:63:e8:85:43:71:3a:34:b5:2f:3c:6d:c1:ad:
52:e7:46:89:33:1a:df:36:84:cb:5c:3a:51:2a:5c:30:2f:5c:
ba:2c:1b:cd:71:8f:10:22:f8:42:c0:b4:00:09:4a:4f:d2:72:
07:a6:97:82:f5:8c:c3:d7:ac:39:38:fb:72:79:62:3f:18:28:
23:ba:78:08:2f:52:33:b0:cb:dc:1e:32:11:b1:9b:97:95:46:
a3:b4:83:30:bb:77:74:4e:28:c5:24:20:e5:ba:a2:4f:42:0c:
53:19:77:7f:cc:03:cf:46:63:84:9e:07:c3:23:aa:55:15:26:
f4:b8:99:37:2b:74:09:8a:04:24:ce:95:95:2c:33:fb:7d:cc:
1c:4c:f5:bc:7e:a1:ea:66:41:78:04:e6:fb:6b:fd:8d:9e:a2:
b8:64:1b:9c:57:57:b9:97:64:36:99:00:02:b9:80:9c:40:ec:
95:ef:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:35 2025 by rpki-client