Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: EhxM8IJxIm9b9YLk88uk9N/9Zo+dWkxcwHqUgNWSpsc=
Subject key identifier: A8:6C:20:2B:70:2A:90:5F:B0:13:9D:21:9C:F5:9D:61:40:8A:83:19
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 019896DCAA3075000EE071BEA5C5C5AB4E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 02:01:40 +0000
Manifest this update: Mon 11 Aug 2025 02:01:40 +0000
Manifest next update: Tue 12 Aug 2025 02:01:40 +0000
Files and hashes: 1: DrD2EGGK8WeukKhW_YJ8LCGTR78.roa (hash: b5xoiz2oFHur8HWu35m6ElddpxbfSrT/Y2/iqOY1S6Y=)
2: IcWYNvOBamTxu6amEYkiVctQe18.roa (hash: DVw0i9jC2LodVXO+VD00rdFIuWtsdo/jV9gSa2jJOsM=)
3: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: Dph2nfoE5sSg/1d/5qThWBfi9Yc6hYC+28MVpXs3uII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:aa:30:75:00:0e:e0:71:be:a5:c5:c5:ab:4e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Aug 11 02:01:40 2025 GMT
Not After : Aug 12 02:01:40 2025 GMT
Subject: CN=a86c202b702a905fb0139d219cf59d61408a8319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:76:79:60:81:7d:16:87:98:aa:5b:ce:35:
01:e7:f1:b1:44:fb:15:34:41:f2:a0:db:59:88:10:
fa:8c:aa:99:90:c3:75:c2:6e:fb:22:05:b0:e5:8d:
2a:96:6c:83:eb:88:2d:e4:dc:cd:84:88:87:69:e2:
e8:b9:1c:16:89:f0:da:4b:d4:86:4f:97:2d:58:11:
92:71:a1:a4:75:50:64:ce:a8:b3:e3:d8:1e:e0:9d:
38:1e:fe:81:28:d6:8e:dd:ff:cf:e5:00:5c:4d:c6:
bc:61:fe:1b:1f:71:ee:f7:b1:a1:22:1f:2a:de:8a:
0e:09:c5:fb:1f:da:99:70:6e:10:32:ad:a4:16:b0:
a7:66:33:f0:6b:3e:7d:55:9e:8a:ff:02:66:fe:f4:
7c:5d:63:c3:fa:e8:c7:a4:58:98:94:e9:53:06:3f:
85:95:8d:fa:cf:6a:9f:6f:1f:92:90:b8:e1:bf:c7:
8f:f3:30:2b:ee:b0:00:b4:4e:44:60:ce:4e:e5:47:
db:41:30:23:4c:84:7d:21:4f:c8:56:e6:19:73:bf:
e3:49:d4:27:5f:b7:06:f4:63:e9:b3:7e:77:34:e2:
ce:89:53:73:20:d8:96:1b:a3:5c:f1:c5:5f:78:1a:
33:8c:ae:c0:6a:52:c2:00:79:d9:48:c3:8c:65:d2:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:20:2B:70:2A:90:5F:B0:13:9D:21:9C:F5:9D:61:40:8A:83:19
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d9:63:62:66:84:55:57:f0:66:36:4e:41:9d:f0:df:5b:6e:
eb:e7:aa:ab:18:0e:a5:c8:c1:54:d4:2e:82:60:ec:9f:e3:86:
1e:ab:f4:7f:5d:0c:6e:23:03:db:fb:9e:e4:1a:b5:46:ff:05:
0d:e7:f3:c1:71:cb:68:2b:dc:09:5b:50:95:91:57:b0:c2:9e:
b5:79:56:b1:2c:4c:e2:a6:44:78:d4:39:36:b9:6d:f6:f9:6c:
6e:48:0e:3d:78:1a:8c:d4:3d:94:6c:14:b8:85:ec:46:b8:78:
22:4d:c9:15:bc:fb:48:49:a1:d0:5d:ac:0c:7a:bb:8e:71:4e:
d9:7b:cb:f0:6a:0c:0c:5b:25:94:04:1f:d3:b6:36:4c:06:4d:
13:9e:9f:ab:88:c8:b7:4f:e4:11:ff:66:a8:5b:2a:a2:d8:ec:
7c:58:e0:1a:a9:8e:30:7a:78:69:39:06:11:98:cc:93:39:94:
31:5b:1d:94:66:a1:3a:8e:27:4d:8a:d5:85:c7:b8:06:10:cb:
2a:de:40:4b:0e:12:c6:f1:39:71:39:bb:d6:32:03:f1:23:fc:
19:be:ff:94:f4:10:8f:96:7e:20:6e:e5:05:d6:c6:9c:de:d0:
4c:68:0e:1c:6a:72:6e:8b:5d:e7:44:ac:3d:f6:22:5b:b7:53:
54:99:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:39:37 2025 by rpki-client