Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: 2LWApFmgl9VMOi+Ivoi6qNyPHAuH6CA13uCXcg5xk1c=
Subject key identifier: 7E:20:66:8A:BA:28:07:DD:1B:97:E0:CE:57:B1:21:1E:D5:E7:9A:2E
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 01987CADFCAB4CCC8AC10E42768D49DE3F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 00:00:33 +0000
Manifest this update: Wed 06 Aug 2025 00:00:33 +0000
Manifest next update: Thu 07 Aug 2025 00:00:33 +0000
Files and hashes: 1: 52v68hN6UT4PPJjjqq1uuE_KUSs.roa (hash: /ZapQrg7UEXSt0NcWwZ+kj+0zgSiaiRBd7g+qhPDHBg=)
2: 8S9ibO6esCTeLY2sD14WhmMZOvI.roa (hash: bmTNDF41Sq+c7Se/EWf8YA8iGIHNg20TI2zfC/lGrO0=)
3: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: Tm/LVMG/+VTDll8yiJoQVeNZcNjkl0R/8Dz8jksEw0Y=)
4: WvCj9VbsFj7fqJOx6tk2wit_WpE.roa (hash: /cLe2CDT0v+6sDR4E14KbBpNPCZZWPI/9CgtItdZn+0=)
5: a5Civ4TQY8vU2rue9PuRjdGc5Mc.roa (hash: QP4yk7Jx/AL7wrs9Y5ybfTghTEkjk/U3Nsn5OFbBsqk=)
6: gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa (hash: hvyUYeos7vf6+TZ2NgvLPFstgzyNO3xqXZO7/gB/Dow=)
7: i6WUIDE1FurqyNNZ1EYEHsIVqvc.roa (hash: n8PwD1+DrWnTVld/M9MqGCrSY8HTEouEds18pHnIKJc=)
8: ih3tlDmlbrDwbuabWdJCxXWHffo.roa (hash: 80OP5bzoyzQkUOxJ3u7VzQr4QzoK9uZZaNU7fzcue8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ad:fc:ab:4c:cc:8a:c1:0e:42:76:8d:49:de:3f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Aug 6 00:00:33 2025 GMT
Not After : Aug 7 00:00:33 2025 GMT
Subject: CN=7e20668aba2807dd1b97e0ce57b1211ed5e79a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:2a:b7:d8:39:07:80:da:03:06:d4:92:39:
5c:41:b0:53:a4:f0:76:53:63:61:62:e5:78:b0:17:
98:ca:14:de:a2:31:d4:70:27:14:84:c0:b3:db:bb:
39:4e:82:bc:60:89:37:32:98:a2:d2:ae:02:f9:81:
f6:4f:ee:af:57:61:f0:d8:47:cb:53:76:4f:32:68:
e8:5b:c4:b8:c6:ea:3a:f3:62:ed:73:a5:86:af:c1:
54:6e:15:e7:1e:08:06:74:f1:23:4e:33:ea:d9:b9:
b9:ad:3e:e6:91:64:66:17:e3:60:5b:2c:30:e1:65:
ad:0a:f3:87:11:47:5c:28:6a:dc:ed:a2:ff:52:6d:
5f:15:e1:d2:2f:c0:9b:6e:d5:56:34:80:7f:07:2b:
3c:d8:7f:52:97:f4:f6:1d:40:42:2f:cc:7a:c1:32:
75:fb:0c:94:a3:0f:a6:71:ff:8d:16:4e:7c:f0:ba:
36:92:85:18:dc:e6:8f:51:db:cb:51:b7:43:fd:1b:
87:e3:d1:bc:a5:f5:f0:2c:dc:f2:42:9a:19:f3:e5:
46:79:d4:01:cc:c0:7b:61:80:94:f1:bf:7b:c4:5e:
d6:65:6c:a6:ba:96:96:6c:24:12:46:a8:3c:2f:30:
53:60:a6:b1:e9:57:f9:44:87:11:d4:b7:0e:50:2f:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:66:8A:BA:28:07:DD:1B:97:E0:CE:57:B1:21:1E:D5:E7:9A:2E
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:4d:2e:67:a7:10:5d:28:d0:40:23:a3:6d:4c:e4:f2:e4:
8d:a8:36:24:b7:c5:c5:48:bb:e7:c4:dd:92:3c:5c:67:90:ac:
7c:04:66:48:8d:6d:52:0a:70:bb:78:9b:39:a6:16:fa:98:f1:
47:9f:fa:4c:60:b4:5f:40:49:d5:77:e7:ff:8d:12:29:17:12:
99:15:6e:13:e6:2e:31:d9:97:6a:c9:0f:ab:a8:22:de:e4:77:
8b:75:e6:3e:eb:10:40:e7:dc:6b:f4:f4:50:fd:d1:9f:84:6f:
5a:57:89:89:bb:f7:af:65:d7:6e:2f:8a:ac:b9:64:43:da:3d:
8d:71:1b:cc:9e:94:98:71:ee:95:2f:81:6b:55:6c:e9:4c:a3:
81:02:e6:d7:64:7e:cc:0d:a3:0a:25:20:d9:82:0f:79:e5:7e:
71:fa:4f:32:43:d9:59:a6:65:08:b4:d5:f5:a4:9f:4e:c2:27:
6f:bb:70:1c:0a:82:16:39:fb:ed:1f:4e:f1:b8:98:cf:79:b4:
46:10:54:d2:d5:76:52:05:ae:ad:ba:1b:f5:e7:78:0a:44:0b:
ce:b6:b5:8c:3e:60:2a:c0:e4:8d:b3:42:9f:67:86:d2:8e:eb:
83:fc:6e:c4:6b:63:b8:38:d0:4c:a4:f8:0d:1d:43:4e:21:91:
d7:c8:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:25:49 2025 by rpki-client