Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: sOY0sEdcFi/Ivunkf5vrQhORCvRFHZqxcK5/D6DBsMA=
Subject key identifier: 92:A2:A8:07:05:A4:3D:4F:90:5F:A6:BB:37:F7:25:7F:9B:F8:8B:11
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 0198D73B9FD83032BA7D0F701DAC844FDC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:01:05 +0000
Manifest this update: Sat 23 Aug 2025 14:01:05 +0000
Manifest next update: Sun 24 Aug 2025 14:01:05 +0000
Files and hashes: 1: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: qXINBKjGA/h0N0Gtz8TNIHGs1E2inGwmFlP8TEH3zUc=)
2: raYuD2-oWYFkHeIeR6LIUYgtbtM.roa (hash: JU+hidsjRHQowQdjLtlmSpodi1Pd90fMaRJU/QLsDsg=)
3: zY-mc8ottsO0mlX2DbncV_JVaGI.roa (hash: IXtxsfxn422nBKB3kQxte4GM01lfDRPi2WPTNL4v8HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:9f:d8:30:32:ba:7d:0f:70:1d:ac:84:4f:dc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Aug 23 14:01:05 2025 GMT
Not After : Aug 24 14:01:05 2025 GMT
Subject: CN=92a2a80705a43d4f905fa6bb37f7257f9bf88b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:8e:81:ac:bb:2d:ce:a3:ed:33:f5:c0:5e:
60:82:46:74:4f:b6:4e:a3:de:c6:78:80:89:cb:33:
8f:ef:c9:d1:30:01:dd:d6:5f:a2:22:f0:ec:92:1c:
35:2b:05:15:05:4c:62:b4:f7:ec:8e:40:dc:14:83:
b6:ba:70:56:d4:72:2c:83:76:f2:5e:37:30:f1:c1:
ff:14:e5:2a:a9:f2:3e:56:38:d3:37:42:4e:4b:ba:
13:57:39:db:bc:8f:3c:3a:4f:e7:01:7d:a6:e6:91:
70:84:7a:6b:58:a1:66:53:dc:7b:ae:8e:69:74:20:
df:4f:0c:84:12:13:2a:4f:f9:32:39:75:21:90:c6:
e5:c9:72:e6:75:fc:1f:6d:80:33:dc:36:fd:d1:cc:
b2:bf:a2:ea:4c:1f:82:e8:b7:41:4c:c1:ca:4e:59:
e8:46:f0:c8:8a:88:dc:b1:41:18:b5:d5:c3:c4:b9:
d8:9e:ad:91:34:f0:47:7f:db:db:f4:69:99:23:6d:
3d:10:07:79:23:1f:9e:49:f7:27:3f:04:15:ec:ba:
d4:87:92:8e:9f:58:3f:04:5b:17:33:77:d2:59:64:
49:fb:39:6d:5d:4b:f7:34:0e:20:a8:89:97:50:2d:
66:38:de:97:d6:55:74:97:d9:45:4d:24:3c:b2:d8:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:A8:07:05:A4:3D:4F:90:5F:A6:BB:37:F7:25:7F:9B:F8:8B:11
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:07:62:61:0a:f9:96:ae:19:be:87:8c:e9:44:fc:68:62:b3:
2b:71:1e:77:fb:23:5c:8c:46:0b:72:12:eb:4a:d5:b4:ab:ab:
3e:38:89:d7:93:b7:0d:6b:bc:dd:10:a5:92:ee:8a:25:8f:30:
81:41:e6:2c:0d:6e:61:3a:f3:77:5c:86:dc:57:9e:ce:15:ee:
9a:c6:70:c2:c5:5d:e8:98:46:e3:e2:b6:56:15:c0:b2:82:ff:
43:05:ed:7d:0e:f2:a2:6c:06:fc:68:f2:37:f1:54:49:7e:d2:
db:e4:72:ee:5e:5d:e2:cf:68:eb:6d:43:c2:d8:b7:ef:d3:c5:
9a:80:42:74:e1:49:bd:fd:1c:61:70:22:2e:ca:b6:b3:11:14:
2c:86:7c:96:74:21:61:ac:16:05:0a:eb:d6:af:90:b8:ca:75:
a6:17:b2:62:9d:c3:02:8a:04:52:49:b3:21:b8:1d:0f:61:86:
8b:40:69:b9:81:63:e9:b8:22:92:a0:e7:51:c4:5c:91:0c:8e:
c6:76:e3:29:cb:1e:b8:40:d0:94:dc:d5:58:56:bb:70:d1:c5:
78:1d:b1:4b:79:a8:54:1a:ac:61:51:cd:a3:50:2e:26:2f:c5:
fe:1c:56:74:c2:82:ca:58:0b:bb:ce:4b:9a:11:99:7a:b0:c4:
38:9a:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:23 2025 by rpki-client