Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: AhlGuA2GeHORmgT3JTFantngehy+a5mp5kK20nB8nuY=
Subject key identifier: 8F:DF:EA:76:5C:49:C4:10:6F:06:07:B7:DF:B0:BC:B8:D6:7C:02:3D
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 0198560E9180F0B8E4D10AE34ED500188DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0D98
Signing time: Tue 29 Jul 2025 12:00:51 +0000
Manifest this update: Tue 29 Jul 2025 12:00:51 +0000
Manifest next update: Wed 30 Jul 2025 12:00:51 +0000
Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: nJ1PX6OFvxO7xGhYIrGPtMiJaQNuygh/MzeU248a5v0=)
3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:91:80:f0:b8:e4:d1:0a:e3:4e:d5:00:18:8d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Jul 29 12:00:51 2025 GMT
Not After : Jul 30 12:00:51 2025 GMT
Subject: CN=8fdfea765c49c4106f0607b7dfb0bcb8d67c023d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:62:6c:f2:f6:02:17:49:6f:d5:92:54:39:
3c:08:03:f7:99:f6:e6:41:18:50:0f:30:68:da:ec:
a9:ba:05:b7:e6:42:af:6e:5c:3d:41:3a:2b:21:c6:
b9:cb:34:0e:85:ea:90:63:a3:dd:ac:b7:ca:10:29:
b9:bd:bc:d3:49:8d:42:61:82:2f:a8:b4:01:f9:f0:
80:fb:03:db:9e:b1:37:27:86:dc:db:f6:71:7b:95:
0b:a6:6f:08:32:83:8d:ab:93:8b:33:23:a7:d3:eb:
c5:bb:af:4b:50:ab:84:b2:54:72:e5:40:4e:d7:46:
30:76:c6:c3:be:22:a9:65:16:cc:04:a9:a1:55:49:
02:2f:a9:c5:97:40:73:67:eb:a6:ac:e9:39:ba:1d:
83:f0:bf:4d:ca:a8:f9:27:53:47:5f:a8:8e:eb:61:
1a:cd:a7:85:a9:89:0a:d5:2e:0c:3b:f0:05:e9:79:
f3:fa:75:61:e1:56:e1:d2:a4:75:53:f7:5a:d9:64:
59:cd:85:7a:03:2e:f2:68:f4:45:42:5c:92:a3:1d:
90:1d:45:e8:b3:e4:c1:31:41:a6:64:70:96:2e:02:
00:81:88:8b:e6:71:42:54:5d:93:d5:ab:23:cd:8f:
0d:26:0c:d5:3a:c5:4a:81:61:9a:d9:bf:80:70:49:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:EA:76:5C:49:C4:10:6F:06:07:B7:DF:B0:BC:B8:D6:7C:02:3D
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:14:c3:f3:4a:64:c2:46:76:3a:0e:b7:9a:6d:52:ac:d2:ba:
ee:8c:e8:07:6b:a2:87:c0:6e:a0:cf:76:1b:50:68:bd:bc:22:
b4:96:09:65:5d:17:e3:93:c2:bf:5a:b3:a7:46:24:37:58:a2:
2e:5c:e8:f0:b4:54:59:7d:7b:5e:ca:83:f3:25:18:0d:e7:26:
03:05:9d:63:fd:d1:48:2c:19:c6:6b:05:e2:88:93:16:65:82:
d7:81:c2:04:b7:46:5c:a5:ef:82:65:64:22:30:78:15:69:58:
14:2e:1b:f0:f6:8a:28:6b:5d:e3:9f:66:45:a6:89:4d:46:00:
84:ca:cb:89:a6:75:8c:3b:76:a5:0b:eb:4b:d7:17:2a:1b:81:
88:89:fe:00:0f:16:9b:71:a0:c4:93:7d:94:3c:5e:40:b7:da:
8f:06:f2:f3:91:43:bf:1f:6f:f9:10:09:ca:94:a4:cc:65:40:
bc:91:5c:d8:40:fb:42:72:d1:ea:d3:02:0b:f6:59:4c:fb:19:
0e:52:f6:84:3a:08:38:7a:0e:f9:92:b8:8c:c0:f9:2f:b8:79:
a8:d9:1c:54:47:7d:95:d7:b6:65:db:7e:5d:4e:da:ce:7b:a8:
16:a3:eb:91:a6:ab:13:eb:81:96:c1:8c:17:d6:96:bc:07:f0:
6b:7d:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:36 2025 by rpki-client