Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: lFUFYxjjeVrCs33nJfXO9tSlYK4Rz0Dcspo6lWiGk0k=
Subject key identifier: E6:45:C7:D2:00:A1:93:1F:C0:3B:0F:BD:E3:7F:4F:2F:F5:2E:BD:E1
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 0198733DC70C5D9210EED2ECE70CBC9AE12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 04:01:25 +0000
Manifest this update: Mon 04 Aug 2025 04:01:25 +0000
Manifest next update: Tue 05 Aug 2025 04:01:25 +0000
Files and hashes: 1: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
2: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (hash: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=)
3: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: dr0U9YIS73ju0YOGrG/6ZJcdHNPGNFuH8EV6nC1Mgc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c7:0c:5d:92:10:ee:d2:ec:e7:0c:bc:9a:e1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Aug 4 04:01:25 2025 GMT
Not After : Aug 5 04:01:25 2025 GMT
Subject: CN=e645c7d200a1931fc03b0fbde37f4f2ff52ebde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:ca:68:c8:af:06:76:92:90:d0:54:4c:75:
c1:88:57:49:16:94:ba:09:c5:37:9d:e6:dd:ee:a6:
bf:c1:f2:ee:02:c9:83:bc:fb:d5:4c:fa:9a:75:66:
60:cb:ef:7b:0b:ef:d7:97:01:ad:6f:de:7c:cd:37:
58:4e:3d:dc:ce:38:60:fa:9b:14:60:74:37:b6:53:
9c:52:e9:50:f5:9c:46:19:e8:b0:ae:18:d7:63:6b:
de:8c:2e:de:38:54:c5:50:c8:ca:8f:43:7b:6d:50:
8b:ab:67:49:79:b3:93:cc:91:a3:b6:bf:f3:48:76:
98:fe:47:93:87:c3:dd:cd:4a:12:08:62:c7:d7:e4:
a3:e4:60:68:15:59:c1:41:ad:31:d2:f6:ce:59:bb:
9c:e7:41:19:3d:fe:49:7d:37:7d:b5:33:65:76:47:
f2:eb:e7:c4:ce:9c:bf:fa:24:9b:59:1c:2d:9e:09:
47:c4:ff:64:6a:96:06:ba:0d:cc:28:09:40:a0:e5:
ab:bb:fe:40:83:a1:1f:86:20:18:4b:23:9d:36:b9:
e1:80:b0:aa:07:bd:a8:d3:db:56:e2:03:5a:29:14:
ec:59:2c:31:15:e5:21:a2:f0:c0:01:41:35:94:22:
a5:2f:76:37:c8:c0:8e:2d:16:50:3a:b7:03:28:ee:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:C7:D2:00:A1:93:1F:C0:3B:0F:BD:E3:7F:4F:2F:F5:2E:BD:E1
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:76:b9:56:93:a1:6f:07:ae:d4:3c:98:2d:b7:45:0a:00:4b:
b7:44:2f:f2:91:e2:38:40:6b:52:57:ca:bc:00:e5:17:b1:9f:
a5:92:e1:d1:8f:13:47:9c:c2:5e:75:31:0f:86:21:6d:e9:63:
f4:2b:74:95:2b:46:37:c2:be:4c:ea:72:6d:91:97:7c:50:0b:
cf:9a:83:e8:3d:0e:bc:4a:91:3d:71:a2:4b:e6:ad:d4:50:03:
a4:75:f5:6a:ec:e2:d7:b1:bc:da:ee:ae:72:b4:a3:ce:7b:4f:
f0:4a:fc:47:6f:b0:b1:f2:57:8e:d8:d0:59:09:bb:6e:3c:4e:
6d:96:1a:d6:6f:0f:c9:11:a2:f9:de:c6:64:73:49:bc:bd:7d:
cd:60:c5:31:6d:4a:36:2b:3b:60:2c:22:74:6e:fe:d7:a7:15:
f5:f5:f8:85:11:c8:05:92:eb:b8:2b:ec:68:d2:21:fd:4b:8f:
df:8f:be:9f:1e:55:b1:07:a7:70:f8:32:be:39:b3:99:85:fb:
33:12:04:1f:45:dd:a3:80:d4:2b:d6:e5:8e:0c:32:c5:f9:a8:
b4:96:79:93:c6:5d:2b:84:4e:b7:d1:6f:5e:50:eb:dc:1c:90:
f0:e8:59:93:42:44:0b:be:3e:5b:dd:64:a2:e7:92:2b:dc:a1:
97:7e:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:57 2025 by rpki-client