Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: PzmbxzTV7bSKv8Gwc6Az7wlPzOjjL9209yExmlEk3Uw=
Subject key identifier: A8:CB:83:8F:63:D6:51:E8:4D:F0:F4:BF:C0:84:A1:EE:48:AB:7F:A2
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 01988FFDF17A8963F4804902B44148E5A041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 18:00:41 +0000
Manifest this update: Sat 09 Aug 2025 18:00:41 +0000
Manifest next update: Sun 10 Aug 2025 18:00:41 +0000
Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=)
2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=)
3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: o/Bj6LnCDBs6EqtsZcx8BfYuthoGa5dFSOX7PJ7lqdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fd:f1:7a:89:63:f4:80:49:02:b4:41:48:e5:a0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Aug 9 18:00:41 2025 GMT
Not After : Aug 10 18:00:41 2025 GMT
Subject: CN=a8cb838f63d651e84df0f4bfc084a1ee48ab7fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:f5:89:a1:9d:f3:ea:35:ee:5d:df:83:1c:
87:5d:5f:f1:d6:cb:b0:4e:0c:7b:d5:3c:be:5a:d3:
ae:60:83:ee:fa:cf:d3:ef:01:06:21:ab:1c:be:35:
63:23:8a:7d:88:1b:0d:07:c4:56:bf:de:43:f7:73:
d9:2e:e3:38:8e:71:b2:9d:c2:3e:68:d9:64:b4:dd:
68:e7:9d:df:20:75:13:08:6c:60:e7:1f:c9:d2:82:
9c:5a:87:05:5c:37:45:8c:40:1f:b2:29:7f:e6:78:
9f:fc:1f:5d:2d:a3:3c:f2:ca:61:32:eb:87:48:ac:
c4:6c:a6:b3:4d:a6:dd:80:8a:f1:e9:2c:dd:b6:0a:
75:ed:13:90:0e:a4:36:57:32:bb:d4:4e:a6:1d:fe:
1f:98:05:dd:4a:a7:7c:dd:01:49:12:5b:07:71:7a:
b6:91:4b:d7:33:1d:08:c5:f7:5f:c8:43:27:74:a0:
b8:04:a7:56:98:88:7b:1c:4f:b3:a8:25:e4:a9:40:
55:11:47:8f:a2:56:1b:fb:3b:2b:ea:4e:bf:b5:aa:
02:38:df:58:1f:93:00:22:01:2a:59:6d:cd:71:6d:
a5:be:ea:14:91:11:a9:49:ae:f7:39:9b:55:de:01:
37:92:9f:37:0b:45:1f:31:d9:aa:b0:01:2f:d7:eb:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CB:83:8F:63:D6:51:E8:4D:F0:F4:BF:C0:84:A1:EE:48:AB:7F:A2
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:87:8b:15:94:9c:76:c8:1a:d1:0d:0e:04:4a:1e:39:fb:42:
c8:08:ab:9b:b4:be:59:f8:c7:34:f0:a4:b1:9a:67:8f:14:9f:
1e:5c:a0:f2:08:82:c0:a5:45:ab:0b:bd:ae:77:e4:52:e5:ba:
db:1e:cc:15:8f:1c:7e:70:16:ab:20:0c:cd:25:28:62:13:60:
7a:f0:ef:df:b3:e1:28:64:f8:38:31:5d:2f:5a:de:94:fb:eb:
a7:68:9f:37:d3:e8:88:98:05:a0:89:eb:96:43:a3:12:66:68:
f0:8d:8f:45:7f:68:9e:cc:cb:0c:57:88:3a:19:12:77:92:d5:
08:19:e4:fe:17:c0:83:af:70:9c:e5:a9:42:90:7f:72:4d:1f:
0d:2e:ae:2d:0c:3e:e3:42:06:f3:af:c7:0f:df:7e:76:3f:ac:
a4:43:95:1f:49:34:fa:a0:75:6a:e9:c1:3c:ef:82:33:79:58:
9b:87:77:76:84:18:c7:1a:d1:09:54:a2:15:60:18:02:70:9d:
82:52:51:35:25:bc:91:28:a2:18:da:7a:9d:5d:c6:b5:02:b2:
fb:a2:7d:89:89:82:8c:3b:89:8a:9d:3c:7a:75:17:47:df:ff:
47:78:1f:39:9f:47:09:ec:a5:03:cd:0f:4a:25:dc:07:78:e0:
7a:f2:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:37 2025 by rpki-client