Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: 7zRCKUBRzt3h/iEDBAakUJ8gVbRg0fZo7xx3eUB15XQ=
Subject key identifier: 43:E3:9C:72:74:DD:5C:20:10:6A:97:23:AA:56:D6:85:8C:19:72:23
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 0198936D646F815E68F81E608B42D4529C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 10:01:16 +0000
Manifest this update: Sun 10 Aug 2025 10:01:16 +0000
Manifest next update: Mon 11 Aug 2025 10:01:16 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: F3Hp2Wo/PHJYL4762IfmIhpPnfkOjwRtBqOKiTklqic=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:64:6f:81:5e:68:f8:1e:60:8b:42:d4:52:9c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Aug 10 10:01:16 2025 GMT
Not After : Aug 11 10:01:16 2025 GMT
Subject: CN=43e39c7274dd5c20106a9723aa56d6858c197223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:24:f7:d9:c3:67:b8:1d:e8:9e:5b:d3:39:
9f:ee:a4:9c:30:05:f2:6f:07:f4:f0:3c:f8:89:55:
d8:ac:0b:5c:c6:32:11:ef:57:6c:b5:a3:59:c7:35:
01:3a:dc:cc:f1:cf:f1:14:d8:0f:80:c5:27:e2:69:
1d:ad:e8:8c:83:ca:77:b9:d3:a9:b5:00:66:27:dd:
45:b6:08:54:2b:0b:8b:0b:d4:69:f1:79:ef:22:db:
0f:82:df:96:27:9c:24:02:f5:cf:ec:72:56:2f:59:
b3:03:fc:2b:06:3c:e8:96:8d:e0:ae:44:d6:3a:f0:
d9:bf:5c:4e:ff:9a:41:6b:b1:16:8b:30:30:3a:e0:
8c:55:43:cb:e9:27:5f:60:89:dc:d8:78:7d:4b:77:
e0:df:5f:e4:43:52:8a:5e:9a:17:18:9f:36:a0:51:
ba:5b:4a:0f:9c:dc:86:24:5e:c0:87:cd:fa:df:24:
6f:67:bc:d1:5b:96:36:f7:6a:d9:39:8e:37:81:29:
54:36:f3:1a:bc:3c:01:53:98:09:51:94:45:d2:58:
8a:3f:f6:46:e3:63:d0:06:9c:c8:65:22:d4:05:b2:
5e:24:e8:cd:45:18:57:6d:eb:67:eb:9e:73:55:e8:
d5:3c:86:f4:8c:00:ad:62:8e:03:bc:56:28:42:0b:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:9C:72:74:DD:5C:20:10:6A:97:23:AA:56:D6:85:8C:19:72:23
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9c:8d:a0:17:7c:b4:4a:5e:87:29:cc:64:e4:4d:3c:57:a4:
6a:77:a9:8f:3a:5e:5b:d5:01:6a:78:6c:e6:7e:d0:1e:a6:26:
9c:3c:d2:ab:f9:1b:4b:72:6c:49:01:81:04:8a:71:ac:15:0b:
7f:03:54:61:af:28:cc:4a:f8:e5:51:b5:6b:12:98:86:ba:35:
f6:c4:ca:aa:31:7c:95:5b:07:f6:df:9a:e9:1d:d6:ce:ca:24:
59:9c:cb:d4:7e:77:3b:1f:15:4b:6e:f8:ad:8b:36:6d:e5:da:
6f:3f:70:2b:1d:6f:18:e7:53:ca:99:52:92:f3:4a:da:39:a7:
25:65:92:d7:43:83:07:fb:ef:2d:0e:64:9e:62:04:fe:14:00:
93:71:77:fe:fa:7b:ae:6f:4a:0c:2d:0c:65:e4:50:f3:bc:0d:
2f:87:be:c2:ef:be:49:ca:be:ef:96:a6:b8:2e:bd:9d:bc:4a:
d3:d2:d3:85:bd:6b:b3:e3:65:87:79:1f:81:df:33:f9:bc:b9:
70:16:30:57:cd:d2:5d:2b:dc:68:28:d9:04:32:3c:92:ed:bf:
9a:d7:b7:61:4d:75:6f:82:19:1c:9f:f8:8a:6e:52:5c:77:f6:
fa:3d:42:10:e3:b8:c8:70:29:7b:17:67:7e:97:91:4b:71:51:
72:10:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:14 2025 by rpki-client