Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: /xhPjVDZPDrDXUh3RNxYV/wkDQaIPQ6h305ph/F++S8=
Subject key identifier: 55:57:7C:87:71:56:7E:55:AA:70:AD:04:AB:DF:70:E6:96:D9:71:17
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 0198D472893C65AC479CFD67A72255EC681D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: umL55RORMonFF8c/W/QswEGo44meutjX2P4n1NSCmFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:89:3c:65:ac:47:9c:fd:67:a7:22:55:ec:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=55577c8771567e55aa70ad04abdf70e696d97117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:91:9b:6a:d3:f5:41:ef:23:2f:ce:0d:4c:
71:0c:f7:40:d7:b9:12:7f:b4:a8:40:37:cd:8f:77:
1d:13:0c:f3:7d:e2:1d:42:1a:7a:b1:9f:c1:5b:9a:
28:d1:f9:75:0e:1e:ea:4b:87:ca:1a:88:d2:9c:fe:
5a:a1:e2:3c:95:9c:5e:fb:23:ec:b8:a7:2c:4d:54:
2c:46:2d:bc:74:6c:a7:40:59:35:51:2d:03:65:71:
ad:26:41:e0:03:d0:15:6d:a9:6f:3d:54:b6:39:95:
c8:42:7f:d1:c8:ff:0a:33:9d:98:24:16:2a:5d:c9:
c2:fb:8e:df:76:d9:be:31:f3:a6:23:f0:32:ef:84:
94:6b:3e:69:5e:86:04:54:7d:a3:a1:2e:52:e1:b8:
f5:3f:3c:e8:75:55:85:8a:dd:4a:de:e0:50:e4:06:
67:31:4b:a4:cd:e5:fc:32:e6:d9:0f:69:2f:dc:79:
29:2a:0a:12:5f:65:59:f0:b4:60:fa:76:85:86:6e:
bc:8f:86:12:a0:89:44:9d:32:b3:c8:a4:8b:fb:fb:
75:9d:2c:34:67:d8:79:fa:b7:10:f5:a7:5e:e7:92:
99:2c:cd:76:a9:ac:b8:fc:04:13:d1:be:36:7a:7e:
76:fc:a9:d4:5e:6c:71:7b:4f:1e:1f:03:1f:33:24:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:57:7C:87:71:56:7E:55:AA:70:AD:04:AB:DF:70:E6:96:D9:71:17
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0b:c2:ea:38:82:70:6b:7a:5a:52:bc:a4:29:ba:47:a2:63:
b4:21:58:f6:0b:73:51:bb:7a:77:d5:0f:91:d0:7d:25:99:13:
15:59:06:22:6e:8b:63:38:62:25:ff:b8:70:cd:53:3d:8e:a7:
00:dc:32:e8:c9:b4:02:5d:a6:f8:f0:84:ca:12:56:f8:9d:d1:
08:61:0b:bf:b1:02:55:e1:44:a3:e7:bf:8c:16:9f:fe:5a:e8:
7a:b8:f6:b4:31:47:59:99:c6:e8:9e:53:a7:a9:82:ef:4d:05:
7a:a9:fe:e2:89:41:d3:09:9b:1a:84:9a:c5:95:d2:1d:76:59:
cb:f7:5d:cb:85:f4:4e:12:28:a1:9e:3f:e0:9d:24:d9:a4:90:
40:4e:76:9f:23:fe:02:13:ee:8e:a0:ea:19:91:3b:2e:81:5a:
8d:6c:bd:57:31:3f:76:aa:5d:75:0f:cf:8a:43:92:0a:0c:7e:
5d:70:ad:24:e4:b6:8f:1f:01:57:99:26:c5:fb:1d:41:b4:7c:
01:ae:ef:b0:61:04:21:99:1b:20:20:f5:b6:59:1f:8a:b4:7b:
42:7f:98:e4:49:0c:6a:b0:85:0e:c7:07:d2:dd:a6:0d:76:55:
25:c4:cf:af:8e:08:00:bd:c3:22:bf:de:58:e6:f0:81:03:72:
48:d2:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:36 2025 by rpki-client