Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: XtJodG+YOsEs/51W8Zz07t5wLCNIDeVEo7S1najYwBo=
Subject key identifier: B0:FB:5A:11:F0:A4:B6:EA:D0:54:D9:E6:0F:79:A6:07:CA:31:29:F2
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 01988167DB86417B657D61425E53EDAB09BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:02:03 +0000
Manifest this update: Wed 06 Aug 2025 22:02:03 +0000
Manifest next update: Thu 07 Aug 2025 22:02:03 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: FVt+I8p4eOyVZsOAIYx4NpWCSDCTREvIMSNIGO+aD5U=)
2: wQqY6GzbDftcPzXJa8kVYZmeUUk.roa (hash: JDvmaY6VGQlVNt+ZPlklOrTqgJ6a+KsUqH/Pcr7SIcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:db:86:41:7b:65:7d:61:42:5e:53:ed:ab:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Aug 6 22:02:03 2025 GMT
Not After : Aug 7 22:02:03 2025 GMT
Subject: CN=b0fb5a11f0a4b6ead054d9e60f79a607ca3129f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:eb:91:7c:c9:09:dc:5d:de:37:0f:92:e3:
82:47:63:ac:b5:78:db:93:48:cc:84:79:ea:4e:7e:
ba:91:f0:55:26:88:83:ff:42:e1:02:ca:d5:52:84:
2a:04:b5:10:43:7f:b7:cc:50:5e:28:ae:ca:f6:06:
52:d8:17:24:71:b4:57:43:6a:99:6c:dd:45:20:1b:
c7:4b:e2:36:3a:b6:0d:7e:62:66:da:7e:9e:ce:36:
61:1d:55:04:fb:51:f8:39:80:72:52:16:76:f5:a6:
a5:9a:cc:e7:ab:7a:e4:7d:26:6f:87:84:af:24:86:
1b:35:54:53:4c:2e:b0:f9:ad:b0:66:f3:0f:d8:76:
5e:12:d9:a7:a2:43:34:42:ad:ce:3d:4c:bf:c5:65:
c6:d3:3b:e5:fc:0d:2e:08:23:f6:f3:03:96:13:52:
77:cb:8a:2f:76:dc:d8:70:3a:2e:09:a7:87:b9:57:
38:89:ec:4f:63:cc:ec:bd:5c:aa:01:75:aa:97:c0:
0b:e3:8c:fc:2d:22:62:a8:d1:ee:8c:c0:d9:1f:72:
62:f4:0b:17:67:2a:78:cc:cc:c2:7f:f9:4f:3e:62:
55:80:e7:c6:71:40:76:a2:1d:e0:55:b9:6c:4b:5e:
61:1e:33:97:24:0f:a1:66:67:15:a2:35:84:23:c8:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FB:5A:11:F0:A4:B6:EA:D0:54:D9:E6:0F:79:A6:07:CA:31:29:F2
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:50:a0:d5:1d:cf:3d:fe:72:57:3d:02:94:ee:3f:92:32:48:
04:fb:97:82:7a:f9:4e:94:76:d5:42:8e:06:46:56:59:fc:12:
aa:c4:20:bf:85:55:1c:53:d5:1b:79:c7:53:31:7c:db:8d:0f:
cf:c6:69:8d:f7:4d:34:97:56:64:8c:98:45:e1:c1:f9:4f:34:
93:3d:e9:82:0e:f8:5a:30:ea:db:2e:1a:58:46:f2:5d:4b:04:
da:a9:8d:0b:39:25:03:b9:aa:4b:1a:87:f3:85:0f:a6:f6:32:
23:3c:14:11:a9:f9:ba:17:93:48:58:8f:a8:16:17:9d:55:91:
99:16:68:12:92:b0:f1:65:7f:47:31:42:3d:50:91:43:4e:bc:
f5:c5:1f:79:41:81:05:37:8b:ad:c5:54:f1:35:ef:de:ad:99:
e5:6a:4b:51:1a:ee:09:86:82:d9:f3:b1:bd:1c:af:64:bc:a3:
b8:5b:14:d8:6a:2a:d0:5b:f1:60:2f:40:8d:da:b8:6b:25:55:
30:6c:ce:94:01:4b:22:d4:5d:1b:e2:85:b7:16:24:27:a3:7c:
e5:1b:73:e3:5c:f1:88:d8:57:e0:e5:3f:7f:e4:2d:fe:6f:fe:
f0:ce:05:4f:97:0f:eb:1b:f3:7b:84:71:54:96:3e:65:8a:7a:
9b:34:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:37 2025 by rpki-client