Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: sQ3oNpEXlzofhrkgUpHhG+qoG5pehJq79CUdVHoYK2Y=
Subject key identifier: 86:6F:39:5F:B0:CB:51:AC:0D:AC:E4:70:5A:5D:E6:8C:02:0F:39:44
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 0198481C086B26FF3D719A580A7DD742F449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0E93
Signing time: Sat 26 Jul 2025 19:00:53 +0000
Manifest this update: Sat 26 Jul 2025 19:00:53 +0000
Manifest next update: Sun 27 Jul 2025 19:00:53 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: MHX2jZd1/3oDjDR3sCE0FKzjgRsCFkI+tQLN8oFNcho=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:08:6b:26:ff:3d:71:9a:58:0a:7d:d7:42:f4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Jul 26 19:00:53 2025 GMT
Not After : Jul 27 19:00:53 2025 GMT
Subject: CN=866f395fb0cb51ac0dace4705a5de68c020f3944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:9c:da:ea:a6:76:1d:b8:7d:41:a3:d5:9f:
b0:eb:69:80:61:f1:fc:73:75:c5:2a:b8:90:a5:36:
d1:b1:6f:67:9a:1d:db:dc:b8:1a:43:71:1d:47:e1:
c6:37:d2:dd:49:3e:3a:31:d1:ab:da:cb:dc:9b:4c:
79:2b:b8:81:4a:4c:89:45:e5:7f:ad:4b:12:64:41:
50:f8:91:1c:0a:52:94:ce:60:48:84:b0:86:68:89:
ea:aa:8c:f9:af:90:35:07:84:e1:9b:63:2d:8c:89:
7b:aa:50:59:9b:14:1c:a6:c6:f2:f9:93:77:fc:9c:
7c:59:de:7f:f2:fb:02:42:14:82:b1:6a:c6:65:9b:
28:0a:f4:04:6d:5d:c9:80:21:90:7a:1b:83:e2:e6:
0c:f6:08:98:67:67:8f:aa:84:d4:a5:e4:2d:fd:37:
ac:40:85:3d:73:fa:f9:05:93:72:af:35:10:3a:a9:
00:f0:e2:4a:93:f2:86:da:99:a4:4a:b9:3b:35:eb:
a9:da:3e:12:ba:93:e7:e3:6b:e5:7d:de:96:32:fc:
14:60:75:2e:2b:38:8d:e0:76:3d:aa:bc:9b:f9:20:
ac:20:39:d2:6d:50:c3:d3:9e:1b:4a:33:7b:be:d5:
57:3e:66:34:74:24:34:5d:85:83:93:d5:79:0d:f9:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:39:5F:B0:CB:51:AC:0D:AC:E4:70:5A:5D:E6:8C:02:0F:39:44
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3f:76:4b:8d:cd:09:77:d0:cc:b2:f3:e3:68:2b:d6:0e:21:
43:60:63:11:76:4e:fa:f6:7f:eb:aa:22:e3:65:e3:ca:a8:ef:
8b:51:e8:46:6b:8e:bb:5a:4c:25:13:5d:2b:94:94:b3:6b:5e:
96:1b:0b:3e:43:a5:17:6f:a9:24:10:be:1a:32:9a:f8:9b:c3:
fc:b5:c4:09:f1:4f:48:5d:b0:91:bb:7e:fd:7e:bd:ca:67:3b:
d4:f8:fd:71:b0:94:3d:53:76:b5:15:fc:e0:56:5e:c8:28:f0:
04:74:27:eb:f8:e8:b6:3e:d8:84:0b:48:70:6e:cb:b0:13:99:
ba:51:cf:65:1e:d1:96:55:69:34:30:87:3e:f1:d0:fe:36:33:
c7:78:bb:44:90:07:1f:c8:47:cb:eb:7c:20:17:89:0c:1d:ce:
45:a1:85:ff:55:c5:44:6b:54:dd:53:d3:32:05:cf:f4:c7:86:
82:f6:02:2e:15:93:85:f3:f6:ea:29:2e:e9:43:fb:49:69:7c:
e3:06:35:a6:db:31:e1:70:47:66:02:4e:f3:e2:5f:f9:68:74:
74:8e:de:72:c5:52:8c:68:cf:69:fa:a3:3d:92:82:0c:87:92:
c0:f7:fc:80:33:99:0c:33:e0:c1:48:4f:20:e4:37:2d:9f:0e:
c4:0e:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:16 2025 by rpki-client