Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: /K03mfqf2sLPX8mViuttn33OzLLv84BgeppPCb1/ROw=
Subject key identifier: C1:59:11:5B:14:46:04:5B:EA:74:EA:40:FB:5B:A0:75:C8:3F:CC:F4
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 0198808AF4B539E08DE7FE6919BF34333BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 18:00:46 +0000
Manifest this update: Wed 06 Aug 2025 18:00:46 +0000
Manifest next update: Thu 07 Aug 2025 18:00:46 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: ljphGihcdkYd/ZqS69hv0jwnnBjHqC364L6+PbpImXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:f4:b5:39:e0:8d:e7:fe:69:19:bf:34:33:3b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Aug 6 18:00:46 2025 GMT
Not After : Aug 7 18:00:46 2025 GMT
Subject: CN=c159115b1446045bea74ea40fb5ba075c83fccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:4d:e7:6b:43:48:a4:12:e5:5e:39:c8:a3:
5c:90:ca:5a:72:b7:bb:40:0f:c0:d5:4e:79:d7:e5:
4a:34:7b:1d:c7:70:43:7d:11:c2:c8:9f:d5:24:a3:
44:1b:aa:6e:ca:bc:50:d5:cd:11:6a:c1:93:3d:81:
0c:a6:d7:cc:75:50:dc:ef:3d:48:9e:26:c0:b9:43:
e8:05:2d:71:e6:68:73:ae:1f:75:67:d4:59:b9:cc:
2c:2b:fe:b9:7e:78:2d:3c:18:06:be:29:57:2f:9f:
37:b3:76:a3:89:ba:d4:85:89:e7:51:fb:09:98:51:
3d:3d:5e:57:4c:58:e5:71:fa:19:e2:de:c8:d3:ff:
7d:52:e1:3e:1d:15:a1:02:3b:f4:a8:73:17:96:2f:
19:d8:e8:b4:ed:dd:4e:ce:fa:6b:85:25:cc:b9:97:
3d:2c:39:cb:7f:28:af:7a:81:ec:55:6f:e2:4f:04:
0d:3a:ee:81:93:3f:80:31:74:61:26:f5:82:7d:8e:
ff:75:2b:e3:ef:8e:5c:9f:fc:c8:69:a6:6d:7c:a1:
f9:f7:06:79:5f:57:ad:54:86:c2:69:e4:dd:1e:05:
25:be:dd:93:76:09:6e:84:4e:19:f8:e8:77:48:58:
f7:7f:2f:b5:0e:55:3a:db:51:96:c4:3c:d4:db:96:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:11:5B:14:46:04:5B:EA:74:EA:40:FB:5B:A0:75:C8:3F:CC:F4
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3e:69:90:83:7b:33:1e:02:21:9f:83:92:9d:d6:75:82:a4:
3f:24:9d:80:b3:37:23:68:e2:19:09:ae:b1:4f:b3:d1:d0:a4:
1f:b4:d5:6e:f4:f6:59:71:21:32:9c:27:25:a1:3a:07:b3:d5:
ae:4a:d3:85:aa:7f:fb:2e:ca:fd:83:05:1f:a4:ec:34:dd:31:
4f:b1:56:c7:9c:27:55:ea:bd:73:5b:6e:66:f2:a7:28:c3:62:
30:25:48:3f:59:40:89:3b:6e:17:52:49:03:ff:6f:7c:d1:23:
91:18:33:27:6d:86:2f:9d:6b:9f:e6:e7:22:94:6d:d0:57:3b:
60:35:8c:18:cb:ae:58:f2:6e:10:41:29:19:a3:96:24:fd:31:
42:81:0c:8d:a2:7f:f6:39:b5:5f:e3:c1:3a:12:ce:49:b9:6e:
b1:fb:6b:d0:81:77:7e:64:7a:19:6b:a0:cf:cf:10:ab:dd:85:
52:62:22:73:f1:3c:e9:a2:f3:1f:8f:89:c5:29:c3:52:24:d5:
61:a8:b1:b4:61:b6:98:44:8d:7d:d5:09:b9:19:55:0d:8a:37:
e6:bc:c8:0a:3a:30:76:bf:a1:30:c3:07:01:1f:16:a0:b3:1e:
d3:48:03:ac:ef:76:36:f8:49:5d:75:00:f0:af:40:28:33:0f:
89:12:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:34:02 2025 by rpki-client