
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: hQsCu1QfQsjfvyCdMc4GIt9EQ1PtC7q5RfevtAAwr8Y=
Subject key identifier: 7F:25:C4:7C:D7:74:3E:F0:10:D3:43:DD:F8:D4:3D:8F:AA:75:2C:0E
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 019880C2223264E35DB46ABBC1D1D7D7506F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 15B1
Signing time: Wed 06 Aug 2025 19:01:02 +0000
Manifest this update: Wed 06 Aug 2025 19:01:02 +0000
Manifest next update: Thu 07 Aug 2025 19:01:02 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: 9ZTPjeT2YMdJu4/7ZdE/hJcCYspqw/w3P5AdXJPraMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:22:32:64:e3:5d:b4:6a:bb:c1:d1:d7:d7:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Aug 6 19:01:02 2025 GMT
Not After : Aug 7 19:01:02 2025 GMT
Subject: CN=7f25c47cd7743ef010d343ddf8d43d8faa752c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:39:88:4d:a8:bc:9c:cc:60:a3:d0:9b:c3:
f1:74:6f:36:02:1a:46:4d:ba:3b:f8:9b:49:56:73:
41:63:df:58:19:32:3d:c6:de:fc:19:aa:dc:b6:98:
62:30:f2:97:45:28:f2:cf:95:12:70:b2:96:1e:bd:
ad:b1:9f:ab:96:87:d0:b4:0c:3b:84:f0:34:25:b7:
3b:29:1d:e6:23:74:72:33:ae:6b:9f:11:17:7d:28:
4d:af:6c:5e:ed:a1:62:60:5a:f8:e7:85:9d:9d:c2:
74:3e:77:ef:a9:61:41:c0:04:bf:83:0c:71:2a:95:
da:ae:bc:74:dd:b5:2c:35:e0:fb:6b:01:c7:89:52:
a3:1e:ef:1a:c3:17:fe:e9:08:3f:e4:75:4f:e7:d1:
70:6e:9b:c3:3e:8a:b1:da:80:8e:b6:01:df:94:1c:
cc:e9:55:25:2c:3f:17:e3:7b:a5:dd:84:68:dc:ab:
cc:fc:fd:0b:8c:cd:26:42:39:e4:49:ec:54:2b:18:
5a:29:9f:be:99:ef:52:50:99:82:f8:b9:03:ac:ca:
70:ac:c4:77:09:5c:78:71:60:5c:ab:7b:d2:88:6d:
ac:af:67:f7:3f:31:90:89:f6:d6:ed:85:81:b4:bc:
d1:07:b6:4f:c3:a4:1a:82:ed:5a:8b:7d:2f:d7:06:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:25:C4:7C:D7:74:3E:F0:10:D3:43:DD:F8:D4:3D:8F:AA:75:2C:0E
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ae:3e:56:a6:9f:6a:b7:00:42:ff:3e:54:45:9e:c0:81:2d:
2b:25:6b:47:ce:0e:77:c9:e0:34:83:43:3a:e4:44:90:eb:33:
3d:8c:52:fc:c9:ce:ea:ea:bb:69:ad:5c:ab:67:5d:14:08:a1:
bf:f4:f9:12:de:8d:3a:85:85:4c:9b:72:58:cc:c9:a8:5b:f0:
36:c5:ba:21:ce:27:45:6e:60:13:5d:94:a3:3b:a7:31:e7:51:
e4:f3:2a:ba:55:98:0d:61:49:90:6f:fa:57:c5:d8:8a:a5:b5:
2b:92:2f:6f:d9:0d:1f:a7:1a:27:77:c2:86:aa:38:34:f7:f4:
7b:85:07:f4:fb:4b:dc:a2:22:03:88:d5:61:db:6b:3e:05:43:
c9:ef:e9:31:ed:4d:ed:d2:8e:db:ce:8c:92:d5:04:b4:10:07:
87:cf:02:5c:43:30:f3:53:e6:82:d0:ca:6d:61:24:1a:a6:8d:
d0:1c:82:fb:a6:fc:01:42:74:bb:f4:73:a9:26:6f:b3:98:8c:
0e:b1:5e:49:79:3f:67:4c:ba:7c:fb:24:68:d3:b4:8b:36:44:
14:05:2c:39:cc:74:7a:11:33:8d:e6:a9:53:ff:0b:21:93:49:
d0:9e:e3:59:35:a5:b0:35:d8:4e:d7:90:14:83:e6:e3:22:0b:
03:70:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:52 2025 by rpki-client