Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: oMY+gYgzm/i5+btKyaZh408k6FNYa5HSKFXcmbR+K30=
Subject key identifier: 6C:34:35:6E:53:8C:DC:C3:BF:B2:DA:9F:2C:9A:5E:8C:42:27:DC:F6
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 0198808B94052DF24C020DB4B640937E7768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 18:01:27 +0000
Manifest this update: Wed 06 Aug 2025 18:01:27 +0000
Manifest next update: Thu 07 Aug 2025 18:01:27 +0000
Files and hashes: 1: OltzXJJiE9XyxoEWZKwac5KxNNc.roa (hash: MXwRj0eiEFB7lamZjGpRz17XKhXqe6VMpTtPXa7Dwss=)
2: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: dHSV7zju4F1QS9v0C4JvubRJYt1IT3kLfrd/TfTQIIg=)
3: cBOMK4GkmfUj8zCER3y-I6RRUx8.roa (hash: XEyKrzUWCu1JpQ8Kf3Wpk7S9z0xsu1o5ymfdHv6j4Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:94:05:2d:f2:4c:02:0d:b4:b6:40:93:7e:77:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Aug 6 18:01:27 2025 GMT
Not After : Aug 7 18:01:27 2025 GMT
Subject: CN=6c34356e538cdcc3bfb2da9f2c9a5e8c4227dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:82:80:39:d4:70:3e:0e:51:50:2e:c3:f7:
eb:d0:87:8b:ac:72:20:b3:7e:40:ef:2c:61:37:bd:
a8:6e:7a:0d:db:58:90:82:dc:f0:88:20:c0:60:54:
39:31:9b:2c:45:5c:78:d9:24:47:b3:7a:5c:64:58:
1d:94:7a:51:32:5e:18:fe:4e:ca:c6:46:ef:ac:62:
f9:a8:ae:43:57:93:20:5a:a8:ff:16:22:c4:0f:8f:
72:24:83:f5:ca:5a:3a:50:47:26:d1:c2:f9:70:a2:
38:df:b2:e0:cf:ef:8c:68:a6:89:99:31:bb:4b:66:
b2:eb:36:45:f4:c9:55:55:78:d9:5f:52:a4:a7:ae:
a1:8e:37:30:75:a2:de:d5:a5:6b:27:34:6f:f4:77:
f0:d0:d5:7e:a9:89:e7:a9:fe:b6:11:fb:ac:ed:8a:
79:2e:6d:f8:3a:de:cc:15:e6:c8:a3:42:6e:21:3b:
85:85:a2:92:75:42:a6:71:b9:4c:b6:51:76:4b:4b:
40:c7:51:c6:ff:8c:e6:ca:7a:5f:a2:c7:2a:ac:17:
49:65:c8:2c:4d:0c:89:a2:2b:55:89:a2:7f:01:40:
84:4c:1e:db:66:aa:58:6c:87:95:b9:7e:a0:f6:0e:
9a:c4:b1:2c:c2:ec:d8:fe:11:ba:e2:1d:1d:b2:78:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:35:6E:53:8C:DC:C3:BF:B2:DA:9F:2C:9A:5E:8C:42:27:DC:F6
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:77:76:90:2d:9f:89:80:02:3a:3a:b0:08:09:9c:28:2e:
46:6b:a8:33:5a:e3:41:7b:e5:fb:b4:7e:8c:87:8d:90:bc:18:
3a:09:3c:1b:3c:55:17:d7:08:f9:19:0f:d0:03:6e:2f:67:44:
68:c3:f9:18:91:6a:ea:0f:bc:a3:00:72:f0:7a:88:2d:eb:12:
a1:cb:8b:02:7f:f9:87:a0:94:b0:09:ba:e6:6d:ed:32:da:97:
0c:14:73:18:70:a7:7d:59:08:7d:a7:6d:68:08:c5:23:fe:19:
00:4a:dd:e8:32:56:28:41:32:5c:b0:6b:d6:9d:3c:1e:4a:49:
bd:11:8a:72:f6:a5:67:fb:a3:c3:fd:a7:c8:a3:17:4f:67:a0:
38:c5:cf:fd:58:d2:84:34:84:76:a5:2e:89:45:a8:70:69:0d:
65:59:53:92:ea:0c:94:3c:7d:ad:99:ba:63:ad:6b:ae:87:97:
9f:17:0a:be:6e:98:cb:35:15:04:94:f2:f9:d5:c0:8c:4f:4e:
09:56:07:08:f1:1e:ab:c6:23:8d:3a:cc:7c:15:6d:0e:04:08:
30:67:b4:d6:ca:4f:2f:0e:29:35:42:4e:5d:db:68:68:d8:58:
ec:33:7c:db:f4:d5:79:1f:eb:a9:d9:2f:e9:5c:10:f4:35:32:
45:2c:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:57 2025 by rpki-client