
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: Radnc3noMLZzfU5OtdM0IZdlWTcZ2fJVbs5MOOSgMfM=
Subject key identifier: CA:D1:61:38:2D:BF:30:1B:C3:4C:B0:CA:D6:68:40:59:27:EB:9B:E5
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 019880F8F1D350100BDCB4B51FE471BD76CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 20:00:55 +0000
Manifest this update: Wed 06 Aug 2025 20:00:55 +0000
Manifest next update: Thu 07 Aug 2025 20:00:55 +0000
Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: Sf9IFl1zY4tB3KeK6xBjZwrIytjdRdZwmRa9b35R1ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:f1:d3:50:10:0b:dc:b4:b5:1f:e4:71:bd:76:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Aug 6 20:00:55 2025 GMT
Not After : Aug 7 20:00:55 2025 GMT
Subject: CN=cad161382dbf301bc34cb0cad668405927eb9be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:f3:8e:69:d1:3a:01:4d:71:88:ce:7d:06:
4e:7e:38:b8:4f:8e:ce:23:b2:ed:98:65:dd:ab:db:
3f:89:77:a3:df:0c:2a:f8:cb:9a:e0:27:a0:ca:73:
05:b4:27:9a:da:62:86:a5:6e:63:64:a3:3a:f7:98:
88:52:a1:a3:d7:89:44:71:fd:3b:08:48:8e:d9:00:
f3:cf:fb:4d:ca:d9:6f:47:e1:d5:e5:ad:a7:00:69:
67:2b:23:55:bd:f9:75:66:29:a5:cf:32:55:8b:c9:
11:6b:40:18:94:ab:9b:1c:e4:a8:2f:4e:61:2e:17:
e4:10:d9:3a:ae:2f:5d:80:09:6a:85:76:0d:89:ac:
c8:bd:d9:48:5d:d1:21:f3:64:9e:61:b2:d2:68:22:
58:e2:47:13:51:14:f3:86:8a:ca:10:8e:45:5f:bc:
8c:61:85:13:aa:34:0b:54:2d:a2:dc:11:b1:d0:e5:
f4:c6:f4:31:14:b6:85:3e:05:6b:00:20:e7:1d:79:
a1:1e:35:0b:4b:35:71:ca:e4:68:7f:45:c1:e9:24:
ae:0e:27:0c:a9:35:bf:3f:5c:e4:f6:bf:3d:50:2b:
39:31:09:58:cb:45:21:44:9f:44:b9:80:43:d8:d4:
d4:d6:ed:17:c3:5c:56:66:58:9e:11:02:9e:bb:c4:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:61:38:2D:BF:30:1B:C3:4C:B0:CA:D6:68:40:59:27:EB:9B:E5
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:68:96:77:08:64:d2:09:11:4b:87:ec:3c:3f:91:91:1a:98:
92:9d:0a:2a:ad:7a:1c:a8:4d:40:fb:72:9b:a9:a4:35:0e:c6:
65:c2:34:17:47:ac:5d:2d:da:8e:ff:12:e0:fc:a8:dc:96:9a:
f0:8a:70:f2:6c:97:09:84:04:ca:9a:d8:45:3c:2c:8b:1a:88:
9a:8d:9a:e3:44:d6:28:0f:6c:2a:f7:43:6d:b0:a9:f8:35:44:
e2:7c:7a:6d:55:1e:75:97:37:c9:e8:0f:72:bd:ac:47:fd:5f:
96:6c:8b:7c:e2:d2:01:cc:7c:7d:d4:91:af:2f:e2:32:26:ea:
df:9a:1b:18:b2:fa:0c:7a:54:50:bf:78:75:c0:2e:44:c9:d3:
9a:ad:60:35:05:86:6a:72:39:7c:52:ae:fe:b0:6b:07:a5:a4:
36:0b:bb:eb:e7:34:cd:d9:e5:8e:bd:fc:4d:4b:66:4c:aa:89:
03:ad:18:ea:fb:9e:42:8d:9f:24:dc:9c:77:9e:7c:24:52:84:
05:1d:5f:59:55:89:60:b3:44:6c:1d:70:63:63:22:44:7d:fc:
e4:05:d0:18:3c:3f:9d:6e:70:38:c5:53:ca:97:7e:cd:32:8e:
91:ac:71:1a:29:74:20:01:a4:64:86:9b:d1:60:24:80:2f:67:
7a:fc:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:38 2025 by rpki-client