
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: lZMxyFitAy60UZrmtBxwVQUI4CE/3mQJVnX5orYvdHE=
Subject key identifier: D7:E0:10:65:C4:3E:49:D9:40:1B:ED:82:EB:47:33:7C:C4:2B:5C:57
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 01989713968103D213D6FD7F838B03C406D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 162D
Signing time: Mon 11 Aug 2025 03:01:39 +0000
Manifest this update: Mon 11 Aug 2025 03:01:39 +0000
Manifest next update: Tue 12 Aug 2025 03:01:39 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: p6HaqtfBPslg8g9SzjNsKIWD+fTK5kNLwHH18wXt1hw=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:96:81:03:d2:13:d6:fd:7f:83:8b:03:c4:06:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Aug 11 03:01:39 2025 GMT
Not After : Aug 12 03:01:39 2025 GMT
Subject: CN=d7e01065c43e49d9401bed82eb47337cc42b5c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:69:f1:28:1a:7a:f7:fd:a2:e8:bb:7f:cc:
45:8a:b8:5d:f6:71:7d:2f:ec:72:dc:96:ab:0f:29:
c4:a4:cc:c6:5c:92:ee:26:5d:4c:c3:0f:c7:b8:48:
a1:ea:6e:6f:02:8d:f7:73:96:08:0d:36:d9:6c:26:
f1:d9:23:a8:7f:86:6d:03:a6:75:52:e4:a3:0e:63:
f2:54:c8:2e:41:b0:e0:62:01:29:f3:fa:f4:16:7c:
9a:0e:ae:ff:a5:3a:11:e2:a5:3e:05:71:3d:a3:99:
93:15:5f:a7:f9:3f:8e:79:60:74:6e:02:f2:a1:06:
6f:54:f8:23:8a:5f:13:6f:26:5b:f8:ec:2a:2c:66:
ee:2e:3b:e2:62:78:b7:97:ee:4d:10:2c:e7:28:cf:
db:5d:34:4e:9f:39:db:09:12:1b:c4:90:5e:3a:ed:
eb:13:c4:5c:9c:16:34:fe:5c:b8:01:9a:fd:cd:72:
6b:99:d7:74:15:fb:14:3c:3a:4f:11:ad:06:06:64:
3c:79:86:af:01:f2:52:08:3a:7a:32:03:e0:e7:7d:
d6:25:8e:81:51:40:f5:92:86:34:69:7f:be:68:a7:
f2:97:cc:b6:92:24:0a:33:8e:ee:ea:97:a9:a7:19:
ac:36:5c:1c:b3:00:cd:4c:53:d1:fc:d8:76:54:08:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:10:65:C4:3E:49:D9:40:1B:ED:82:EB:47:33:7C:C4:2B:5C:57
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:db:2e:bc:64:4d:8a:12:6b:cb:60:26:ee:61:bb:0d:1d:f0:
93:2e:bf:45:25:6c:a8:92:34:a7:25:30:78:7e:97:40:49:d3:
18:8e:e9:7a:94:7a:49:a7:2f:13:dc:b9:45:e5:5a:01:30:0d:
48:f7:0f:f6:70:df:f0:4a:fe:99:2c:53:ff:6e:aa:10:09:16:
34:f9:e8:aa:cf:43:d5:99:7b:fa:f6:f4:6b:2b:81:0e:b7:15:
6f:22:9d:bb:96:21:35:4b:4a:fc:08:39:6e:4e:15:7a:cb:e8:
6d:02:ab:50:c9:62:e1:27:b7:94:14:b4:aa:5a:07:6d:39:40:
d7:37:b5:95:9b:44:e4:ce:83:83:10:cf:ae:41:3d:7e:a3:67:
30:4c:ed:f2:47:4d:c2:67:24:fb:0b:e2:25:8f:ef:99:a6:d0:
b3:b7:8a:9a:81:c4:d1:58:a7:92:b6:9d:48:08:a4:dd:96:61:
8b:06:0b:ec:15:06:41:a8:91:1d:83:d1:83:96:cd:30:90:1d:
03:ae:9f:80:8c:9e:bb:f3:4e:cd:2e:af:43:bd:c7:91:b1:26:
21:4f:9f:8a:a3:22:11:5a:d5:c6:ed:a7:50:e7:0c:66:67:da:
0e:5d:35:cd:00:bf:0e:62:b9:50:52:9f:56:dd:fc:ba:17:0c:
d7:45:d8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:49:02 2025 by rpki-client