Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: Tr4SQM2FV5QMDE/ZlLWzV/F/bIhrNPyLI9strt7jT8o=
Subject key identifier: D3:BB:9D:A6:07:B9:EE:58:03:1D:5C:11:E1:84:2F:AD:0B:82:F0:DE
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 01988FC72437D18BDAE9654B45C8316A882B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 14BD
Signing time: Sat 09 Aug 2025 17:00:49 +0000
Manifest this update: Sat 09 Aug 2025 17:00:49 +0000
Manifest next update: Sun 10 Aug 2025 17:00:49 +0000
Files and hashes: 1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: tAHTA1Cl8dbwAZava5v7/YW6QX7Tvv8suLB51+ChVjI=)
2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:24:37:d1:8b:da:e9:65:4b:45:c8:31:6a:88:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Aug 9 17:00:49 2025 GMT
Not After : Aug 10 17:00:49 2025 GMT
Subject: CN=d3bb9da607b9ee58031d5c11e1842fad0b82f0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:29:35:a8:41:fe:c1:db:4c:eb:5c:fd:43:
3a:b1:75:e6:f2:f6:bb:00:f1:20:03:31:6d:25:0d:
e9:d9:ee:49:d7:77:2f:9b:20:57:b3:02:b9:e8:80:
b3:a7:f3:fa:6b:34:64:23:61:0c:22:fd:7c:a6:77:
d0:d9:5f:9f:22:ca:da:4c:ef:48:e7:8f:81:a7:51:
2e:e2:59:b0:8a:8e:f7:67:69:77:2c:3c:95:46:a2:
13:45:21:29:96:a5:9a:2d:d5:b2:b6:47:3a:27:a5:
cf:2b:09:2e:bc:0c:5e:c2:3d:9a:4b:5e:35:c5:eb:
c8:06:94:d9:ed:e5:5d:b7:74:4a:7c:f6:9e:0a:08:
8b:17:8b:e9:9b:43:70:a0:95:19:65:c1:a3:ca:3a:
70:90:01:5a:dd:38:60:f8:bc:b9:72:b6:9c:ad:8c:
8a:66:66:3e:0f:43:23:b1:98:ba:71:f5:ec:ed:d7:
52:19:3f:40:58:95:49:53:f0:81:80:26:4e:bc:61:
7a:81:ec:c1:71:3c:7f:27:ae:4d:c4:f6:14:39:1c:
21:cd:23:10:61:61:6d:bb:7d:41:dd:a4:39:1e:26:
f5:93:9c:23:dc:d7:f5:a6:d1:11:55:b7:00:1e:05:
1d:5d:33:9c:ca:5d:d0:09:03:61:0e:aa:e5:c4:45:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:9D:A6:07:B9:EE:58:03:1D:5C:11:E1:84:2F:AD:0B:82:F0:DE
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:0f:35:7b:aa:66:76:32:59:37:30:c6:bb:1a:df:9a:1d:
a9:2f:ce:2c:3f:b8:f9:e7:ac:8e:89:80:9e:2f:bf:f5:4b:9b:
4f:07:58:f5:44:b0:0b:58:93:9d:13:ce:5b:b7:3a:a5:f7:fc:
a7:04:c8:30:e4:cd:8e:59:a7:1a:f9:ea:72:ef:eb:3c:3a:b3:
3a:56:87:fc:e3:82:8a:80:26:6c:0c:f0:a3:b2:b7:36:e8:58:
43:13:42:f3:19:73:ed:d2:20:6b:7c:63:8a:b4:ab:1a:e4:ee:
a9:5e:b7:e7:9e:00:24:4f:d1:20:4c:d7:c5:5c:68:5d:09:fc:
26:d0:fc:ba:a0:8a:0f:64:b7:ef:12:36:be:51:d4:ce:92:b8:
68:68:25:a6:a0:49:97:00:38:df:70:33:58:39:ac:ba:e4:87:
d4:12:4d:61:43:5e:29:f0:e7:d5:af:13:1a:a9:c6:53:14:e7:
18:9b:1a:8d:dc:88:0f:5c:77:0d:c7:6f:2f:ab:ae:63:11:85:
fd:3c:6a:9a:da:7d:1e:4a:5e:49:0d:71:e6:e3:6f:df:e9:ea:
08:89:21:6e:5a:d4:5f:49:f4:e0:87:5a:a9:fd:f1:63:8c:d7:
23:8f:52:87:82:34:9b:37:15:81:76:94:4a:f8:b4:8f:0c:49:
70:9d:7d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:45:10 2025 by rpki-client