Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: NkcL9+iJkAW5YjOn8UwA5ljhOU1KzXwZtdIXkTa9pLU=
Subject key identifier: 58:47:F7:09:CE:F3:ED:7F:F5:D2:EA:78:10:01:98:5A:A2:00:90:CD
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 0198D5F1241FCD495A741F26AF25B398349E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0D6A
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: 6rV9eDtLqjrWZLXprUqcr99pZaA.roa (hash: dlsrhoQ5PwXdAjp/9r3Vgwhl3pAOBofCxgLlYlDOE18=)
2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: CwC+MV8YfmVpclgSb6ZQSVIos15ZY7XhWmftl83vTrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:24:1f:cd:49:5a:74:1f:26:af:25:b3:98:34:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=5847f709cef3ed7ff5d2ea781001985aa20090cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:06:3c:49:ee:6f:09:09:35:1f:b9:69:62:
a6:52:d1:0f:e6:d0:7f:8c:2b:7c:0a:72:3b:34:cb:
7e:e4:ff:e0:32:30:85:e5:f6:66:6f:cb:b0:7c:84:
1e:50:6e:19:8a:11:87:95:c9:cb:fd:56:93:3f:96:
5d:5a:95:b8:4e:7a:a0:98:75:47:25:bf:03:e9:bf:
b6:a0:4e:8f:d8:5f:23:be:6b:a7:77:d8:fc:16:c1:
c4:e7:08:26:64:b5:33:f5:fc:11:f3:85:77:be:1f:
72:11:c4:d6:ee:e4:0c:ff:e5:98:4f:1c:5b:5d:8b:
b3:b1:b2:a9:3f:2b:4e:22:dd:91:3c:28:c4:04:f2:
c6:a6:1d:56:36:a4:68:c0:fe:90:c4:29:f9:b2:bb:
9f:4f:d0:e6:4d:58:34:22:0d:26:d8:9b:e4:b3:5a:
2e:e4:93:d7:de:6f:92:23:0b:ef:91:56:b9:07:83:
75:b5:df:40:09:83:69:16:c4:22:5d:b7:db:ba:d3:
ed:5d:00:29:28:f8:b5:4c:5f:6a:09:79:5e:71:71:
0a:21:05:ad:13:09:2e:81:f3:5c:57:6e:af:1a:f3:
dd:3b:b0:81:28:5b:93:57:7a:19:aa:06:7e:1e:44:
db:76:90:c4:3a:b2:81:58:7d:29:8e:af:c0:3a:d4:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:F7:09:CE:F3:ED:7F:F5:D2:EA:78:10:01:98:5A:A2:00:90:CD
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fc:a0:6d:0b:1e:4f:4c:6b:a9:9a:7e:9b:ec:93:27:86:32:
36:3b:c2:e8:ec:d3:7c:97:bf:9b:f6:42:7c:45:ad:19:48:68:
b4:9c:b0:81:a8:cd:66:eb:d7:9e:19:f5:6f:9c:c0:f8:30:87:
cc:95:c9:ae:18:ab:48:35:41:7a:18:f7:83:1a:94:5f:73:c1:
d9:de:e3:95:33:6f:4a:54:4f:e6:b9:26:d7:27:f1:f6:58:b3:
6d:a4:28:07:12:8a:99:74:b4:06:27:a0:dd:96:33:9d:0a:9a:
3a:46:8b:52:66:7b:35:7e:38:b8:b2:27:a5:96:22:e0:de:5c:
fa:b9:3c:14:c9:52:14:9d:0c:9b:16:22:a1:09:5a:53:00:25:
a6:cd:24:d7:e6:c0:ae:b7:05:ae:f3:c6:be:e9:0f:83:29:37:
1c:5f:84:2f:a8:ce:12:7f:fa:f4:c0:a8:63:1c:62:02:98:b6:
b1:bf:c9:ba:5a:ef:16:03:35:8b:8d:34:3c:c7:9d:a7:01:c0:
dc:68:25:6f:41:61:06:4c:c0:b1:f3:76:1e:13:af:b3:0b:cf:
e7:4d:2b:73:38:4c:4b:db:38:4e:08:90:08:69:6e:8d:3a:e9:
df:61:8a:ce:57:46:c4:ec:70:9b:af:ab:1c:c7:5e:0d:b5:3d:
e1:c1:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:10 2025 by rpki-client