
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: EmzbWlcge9Tscg+Y2GuM/mgdtg/tly8CjR9KSh67sWM=
Subject key identifier: 69:E6:E1:5B:DB:74:2D:B2:76:E2:DC:60:8D:91:3A:58:30:CA:98:29
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 019882434F5C86AB99D576979A8C9901920D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 02:01:45 +0000
Manifest this update: Thu 07 Aug 2025 02:01:45 +0000
Manifest next update: Fri 08 Aug 2025 02:01:45 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: dmNAfqjooZsBfavKJhZYHAGMKl352tImE8lA6ZtGIBA=)
2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=)
3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:4f:5c:86:ab:99:d5:76:97:9a:8c:99:01:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Aug 7 02:01:45 2025 GMT
Not After : Aug 8 02:01:45 2025 GMT
Subject: CN=69e6e15bdb742db276e2dc608d913a5830ca9829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:bb:b4:99:52:45:e3:91:36:ff:83:9c:7a:
49:2b:2f:6a:c7:bd:51:90:8a:ee:68:03:c7:6b:9b:
cd:d4:eb:74:ba:ca:0b:a6:91:ac:9f:48:77:53:f1:
32:37:c4:15:4b:c3:a7:a6:bc:8d:53:fb:fa:79:d4:
de:7d:eb:eb:f6:fc:95:cd:12:05:35:70:ca:e0:cb:
00:84:03:7b:bc:4f:1d:3f:3a:a1:a1:41:63:b0:5b:
a0:84:bf:9a:26:c7:67:e3:5b:a3:24:fb:cf:23:ca:
27:fd:55:39:80:92:fe:3a:32:25:5e:84:42:48:37:
29:a0:64:57:e1:6e:db:da:c7:75:c9:8f:8c:ab:17:
e9:19:4c:bd:a8:92:62:43:54:1f:55:7c:75:e9:95:
82:91:f2:06:48:dd:ce:3b:6d:1f:29:f8:a1:95:8a:
72:fc:df:64:ef:60:5f:c8:b1:a3:ba:70:f5:5e:b4:
cf:c1:f5:f7:22:26:51:ee:c0:e9:76:59:e2:75:36:
78:55:19:5d:1e:72:c1:f2:16:50:47:4b:8a:b9:ea:
01:49:56:cd:2c:37:72:39:b4:4e:8b:5a:5a:9c:35:
97:59:e1:65:7e:cd:7b:d4:d2:d4:c5:e8:62:0b:e1:
d1:23:64:e3:9a:2c:3c:5f:ca:09:79:08:20:ce:ff:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E6:E1:5B:DB:74:2D:B2:76:E2:DC:60:8D:91:3A:58:30:CA:98:29
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:30:33:62:4c:1f:50:6d:05:c1:2c:27:8d:2d:89:74:44:7c:
cd:0f:71:ca:30:25:59:0d:64:8e:57:64:28:98:b9:0c:98:7e:
d2:67:56:ed:fb:d8:c0:bb:bf:b6:40:23:a5:f4:ef:30:62:65:
02:44:06:f8:ac:95:3a:83:60:a8:cc:d1:20:8f:79:04:f0:88:
d4:4b:60:6f:0b:8e:60:4a:9d:ef:63:4c:68:9f:e0:e3:47:cf:
38:ab:66:3b:b4:4f:74:f0:a3:55:f3:59:6f:db:5f:9e:fd:b7:
f8:d5:1e:bb:e2:87:20:d4:d0:ed:ba:78:18:31:97:32:53:9b:
f5:0d:b0:fa:ef:de:10:a4:07:b1:7f:8e:10:88:c9:37:ab:c1:
fb:8b:e1:98:49:2d:34:84:90:de:39:08:06:eb:f6:d9:11:ca:
d3:21:04:37:0e:cc:d4:17:6b:ef:62:e4:30:53:48:b4:46:db:
93:4c:18:b9:2e:2e:91:e3:22:52:55:bd:9f:51:11:5c:48:20:
87:75:95:c4:f0:f3:d6:61:da:3c:79:c5:66:a3:69:a1:97:77:
ab:88:dd:1b:4f:a1:d7:75:fd:9e:d7:cf:f0:af:17:da:09:db:
94:8c:50:27:89:15:45:b1:0f:16:1b:f6:22:d7:6d:ba:f2:d7:
ef:78:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:07:48 2025 by rpki-client