Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: VyHNtteT/kzHBCuT0qX8bfpxuVR3tOKwcbRPAUKRAow=
Subject key identifier: C3:5E:BD:91:C8:AB:AF:7D:53:B7:98:65:1B:61:E9:B9:34:AA:F0:87
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 0198729856E064082173B1BF2B3DBC30A64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 01:00:42 +0000
Manifest this update: Mon 04 Aug 2025 01:00:42 +0000
Manifest next update: Tue 05 Aug 2025 01:00:42 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: azkMgnMswXsUIk66hjCpmRd/r+Bmd+M5wnNMRUNPLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:56:e0:64:08:21:73:b1:bf:2b:3d:bc:30:a6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Aug 4 01:00:42 2025 GMT
Not After : Aug 5 01:00:42 2025 GMT
Subject: CN=c35ebd91c8abaf7d53b798651b61e9b934aaf087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:e5:bc:c4:ac:36:a7:68:46:ef:ef:a0:3f:
96:6b:62:fe:ae:68:6f:d6:9e:36:70:79:d9:b8:ff:
23:1a:5c:d0:3f:d4:47:00:05:16:bc:c2:f5:77:4a:
60:d5:be:13:84:f7:15:3b:30:8f:4a:20:4d:c9:0b:
b4:da:98:50:f3:08:d5:aa:40:35:7d:3e:bb:6e:fe:
76:48:d2:41:d6:94:12:bb:51:d8:d3:a2:20:fa:ea:
fe:c3:14:71:df:ef:5e:ce:55:9c:f4:b2:d0:b3:e5:
db:89:09:cb:5c:28:a0:28:d3:2c:ac:3f:20:9c:bd:
d4:d0:f9:58:f5:61:9c:15:a0:bc:a3:da:45:f3:9c:
01:96:3c:d5:ba:e7:9b:a7:4b:fd:cc:ae:38:d5:e8:
a8:8a:fb:8b:4d:2c:94:d7:71:7c:ad:4f:2f:65:53:
ce:ec:20:35:12:92:bc:7a:d6:e6:3b:a2:18:5d:c3:
9f:56:1a:cb:26:fa:c6:f8:0c:f0:56:a7:5c:83:73:
4f:19:59:3b:b1:c5:1b:fc:69:29:2e:a9:2e:0f:bf:
a1:dc:f0:3d:75:38:30:e0:a5:95:35:91:5c:f7:24:
ce:c2:21:c2:c9:03:01:cb:c2:96:5f:8c:84:fe:a6:
b5:09:bd:6b:6d:a5:1e:84:90:74:4c:dd:19:20:79:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:BD:91:C8:AB:AF:7D:53:B7:98:65:1B:61:E9:B9:34:AA:F0:87
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c9:b2:55:b8:e8:96:75:1c:0d:94:66:c4:d6:d8:36:be:8c:
48:8c:58:67:d6:f9:aa:4c:c5:c6:e1:3d:21:4d:fb:09:cc:77:
ad:d7:db:bd:bc:8c:58:d4:1a:7e:36:64:a1:a8:fb:7a:d0:9e:
6d:71:88:d3:05:7c:31:bb:74:10:98:10:4e:5c:64:0a:44:00:
0d:17:af:05:87:a1:44:a5:d0:44:9b:fb:18:f5:4f:60:ae:81:
6a:8d:bd:4b:b2:82:fa:81:47:5e:74:d6:c1:5b:de:0c:69:27:
a2:1b:ca:d8:95:c9:bb:58:8a:7b:58:77:1b:21:87:3e:03:b0:
df:cb:63:21:b2:16:40:87:8a:6b:31:cb:48:f1:21:d5:2a:c6:
54:f9:92:70:02:f9:1e:d8:17:e4:b2:12:88:4b:fa:89:a4:9b:
7a:fd:47:70:34:93:b7:a8:90:13:e9:4f:47:28:7d:77:bd:ae:
88:0a:0a:59:a0:a8:d8:7e:8c:6a:df:38:1f:23:ac:be:14:b4:
93:da:b2:90:e1:6d:fe:73:6c:85:c0:06:d4:1b:79:14:05:7e:
3c:bf:57:bb:8a:da:ee:b3:e4:77:b7:4a:11:e5:6f:29:b6:54:
94:fa:a3:f8:b1:67:64:35:8d:88:25:b8:5c:bf:a6:e0:6f:e1:
60:ac:34:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:56 2025 by rpki-client