
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: 7nUJh3etrykjqtyhAc1IzqErxAUOKN3My93VlVsNYiQ=
Subject key identifier: 65:3B:04:83:C1:70:E3:A6:54:FA:21:40:31:FE:46:45:62:EB:F9:E8
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 01988B7D759F698149B7F1CBCE6AB4AE6101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 21:01:51 +0000
Manifest this update: Fri 08 Aug 2025 21:01:51 +0000
Manifest next update: Sat 09 Aug 2025 21:01:51 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: k0jXvVgniPwxVBC3zqIF26ifmgEqGivmFLQ2eYtIUq4=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:75:9f:69:81:49:b7:f1:cb:ce:6a:b4:ae:61:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Aug 8 21:01:51 2025 GMT
Not After : Aug 9 21:01:51 2025 GMT
Subject: CN=653b0483c170e3a654fa214031fe464562ebf9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:60:ed:ab:99:5a:30:c7:21:95:7a:64:a3:
24:eb:e3:60:d4:50:ca:3f:ed:86:97:6e:db:11:42:
6a:08:7b:e5:5f:a2:7e:6b:63:d7:d4:14:0e:8e:40:
8d:e0:9b:4d:a3:48:75:f0:90:0c:ba:de:00:fb:a2:
1d:d7:42:29:15:38:2a:f5:20:a1:7a:c5:f6:30:ac:
f1:06:01:4d:1e:5f:69:b4:ab:bf:c3:6f:8b:0f:d4:
91:ed:d6:f1:9f:53:34:14:38:89:d3:16:ec:0c:34:
9f:5b:1f:ca:e0:64:ad:bc:71:f5:2a:dc:c9:e8:e2:
0a:7e:09:9a:8b:bb:50:a8:09:db:4e:cb:5c:90:34:
f7:5b:30:79:bf:41:a5:97:e0:23:25:a1:07:e5:73:
db:c4:cb:6e:d2:7a:8d:b4:ac:32:98:4a:b4:c3:07:
4a:36:ad:08:e6:c1:51:70:a7:10:da:b9:e5:5f:94:
c6:ed:cd:12:09:17:d7:a1:30:98:a7:85:5a:29:81:
01:1d:69:29:3c:2c:21:36:b4:00:5a:fa:0c:49:ed:
cd:30:0b:8f:23:d6:f9:22:3f:35:65:2a:72:79:dd:
30:52:34:f2:ce:84:54:c9:c9:82:b5:b7:9b:97:e1:
3b:13:53:1a:bc:2a:ba:7c:51:3a:5b:dc:8f:90:70:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:04:83:C1:70:E3:A6:54:FA:21:40:31:FE:46:45:62:EB:F9:E8
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:25:11:73:ad:c7:6b:40:a5:76:4f:88:d5:b0:9a:cd:3b:8a:
34:52:2c:e6:dd:62:4e:c2:99:ff:b3:f8:4b:09:a4:38:72:d6:
17:3b:ba:f2:57:9b:42:da:be:9a:05:26:10:5e:53:bd:74:11:
56:c1:86:15:2e:ad:d7:00:d5:cb:07:ed:4a:95:f0:f2:61:f0:
31:95:f0:ac:a3:9f:41:93:27:08:99:51:30:4d:ae:bb:4f:43:
ab:db:e3:16:30:cb:e4:04:55:66:bf:33:9d:ca:99:d4:98:c4:
09:cc:d0:40:6e:7d:32:f2:52:f5:7f:08:7b:ce:9c:87:0c:e3:
e6:48:17:63:12:42:c6:d3:47:d0:47:f5:aa:31:59:46:3b:8d:
22:d1:5d:ed:cd:ce:14:d8:93:19:49:84:27:f9:07:ae:4d:ec:
04:59:65:00:57:a3:9a:8c:37:36:25:29:6b:66:39:95:77:a1:
e1:90:e9:5f:d3:40:c9:57:6b:c3:40:30:3a:ba:c0:76:ba:7e:
e5:f3:5a:3b:88:54:d0:07:0b:76:65:3c:a4:3a:4d:51:d5:51:
55:e1:aa:6e:42:68:5b:6b:13:68:bb:0b:f2:91:8c:7b:0e:97:
d7:42:1f:17:60:55:3f:43:5f:77:70:14:22:3f:f1:c3:9d:d5:
12:52:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:21 2025 by rpki-client