
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: 6v8JXgoQFWYZQ86T5VjncgdC9bPAMJWoHm7CJeDIUSI=
Subject key identifier: 14:07:42:9B:8E:F1:07:20:A7:CC:E9:F7:B4:80:09:79:DE:9D:8C:A9
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 019851C3615B2DFF5D13B4C3615752B61232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 160E
Signing time: Mon 28 Jul 2025 16:00:15 +0000
Manifest this update: Mon 28 Jul 2025 16:00:15 +0000
Manifest next update: Tue 29 Jul 2025 16:00:15 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: VMb9Ms0emUf2tsGP1b+AwAvE9U85SUyETO7Hez+jm0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:61:5b:2d:ff:5d:13:b4:c3:61:57:52:b6:12:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Jul 28 16:00:15 2025 GMT
Not After : Jul 29 16:00:15 2025 GMT
Subject: CN=1407429b8ef10720a7cce9f7b4800979de9d8ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:45:27:cd:b4:00:99:1e:bb:c1:d3:2d:a7:
a4:db:29:8a:50:df:5d:06:b6:98:04:50:49:b5:ec:
73:9e:66:69:34:71:46:7a:2d:60:5c:c1:b7:e2:f4:
2f:25:db:ca:9f:13:bf:ee:27:5e:92:42:86:3d:48:
de:97:d4:77:9f:6f:64:9e:ad:da:09:3d:34:7b:11:
94:20:b3:da:2e:ce:ed:bd:81:b9:1e:fc:20:93:40:
4c:2d:01:37:02:72:c4:81:ab:32:70:17:87:6b:dc:
04:5c:36:79:09:f7:38:db:48:bb:d9:fa:37:86:cd:
87:cf:c7:ce:1e:fe:91:66:a3:4b:22:bc:ee:68:e0:
6f:4f:00:a2:8e:7d:9c:a7:2e:9c:06:eb:39:3d:0f:
19:2a:c1:af:a3:da:be:2c:55:2b:de:65:35:0c:eb:
79:26:7a:b2:82:7a:12:fb:a3:bb:f4:cb:dc:fc:a8:
ad:2a:22:08:73:d7:e3:7f:c9:ec:cc:5c:d2:36:aa:
36:ff:d6:00:d7:23:96:3d:aa:7e:93:d9:d7:3e:0c:
23:eb:de:e5:da:e4:0c:9b:9a:b2:2a:d8:3e:5f:18:
a7:f3:51:23:1f:b0:f5:e6:2f:66:17:16:cf:da:cf:
e1:c3:11:7d:ab:57:87:a1:54:10:b4:8e:84:f6:cd:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:07:42:9B:8E:F1:07:20:A7:CC:E9:F7:B4:80:09:79:DE:9D:8C:A9
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d3:6a:e5:c4:8b:0c:f1:d9:4a:3e:61:de:fa:08:fa:a6:c9:
10:3f:ec:f5:f2:0b:c2:8f:b6:bf:cd:a7:b1:b2:73:fe:d9:e0:
22:32:41:2f:fc:98:e6:71:39:7f:21:e9:ea:84:e1:e8:bb:5e:
a9:1d:42:2c:81:cc:2d:c1:0f:ea:76:aa:4d:f4:68:60:d3:97:
d8:53:e9:33:61:b7:b3:2f:b1:2c:91:a6:68:6f:7f:ed:e7:6d:
cf:a4:f8:38:53:f2:47:73:f8:2b:a5:f7:5b:ca:d7:da:c6:11:
61:d8:23:1d:a7:00:17:6a:5b:60:9b:00:9c:53:ee:42:42:38:
96:29:27:6e:bf:c5:c8:da:af:af:53:b5:ad:81:a4:14:6a:e5:
df:85:91:5a:0f:f4:a8:8b:41:6e:2c:cb:77:92:97:d7:fa:9b:
c6:83:f3:4c:bb:74:96:bd:58:94:7b:79:e6:4c:a7:08:2a:1f:
9c:54:b8:9a:dd:99:ba:9c:1d:e5:cb:09:b9:07:a9:56:d6:c5:
15:5c:e4:0c:8f:d7:a9:8f:ce:d6:4f:5b:fb:d6:0a:ab:15:8e:
fe:7b:76:6a:2a:fc:6b:80:54:18:59:50:4a:d8:ff:f2:6f:ae:
67:b5:d8:a0:51:e1:6e:69:eb:21:b8:12:ef:59:ea:45:4a:e9:
1b:49:42:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRw2FbLf9dE7TDYVdSthIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2ExYTFlM2QwOTI1NDIzMzEwYzE1NGI1MDJjMjg0Mjg4
OGU2MTIwHhcNMjUwNzI4MTYwMDE1WhcNMjUwNzI5MTYwMDE1WjAzMTEwLwYDVQQD
EygxNDA3NDI5YjhlZjEwNzIwYTdjY2U5ZjdiNDgwMDk3OWRlOWQ4Y2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXdFJ820AJkeu8HTLaek2ymKUN9d
BraYBFBJtexznmZpNHFGei1gXMG34vQvJdvKnxO/7idekkKGPUjel9R3n29knq3a
CT00exGUILPaLs7tvYG5Hvwgk0BMLQE3AnLEgasycBeHa9wEXDZ5Cfc420i72fo3
hs2Hz8fOHv6RZqNLIrzuaOBvTwCijn2cpy6cBus5PQ8ZKsGvo9q+LFUr3mU1DOt5
JnqygnoS+6O79Mvc/KitKiIIc9fjf8nszFzSNqo2/9YA1yOWPap+k9nXPgwj697l
2uQMm5qyKtg+Xxin81EjH7D15i9mFxbP2s/hwxF9q1eHoVQQtI6E9s2K9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQHQpuO8Qcgp8zp97SACXnenYypMB8GA1UdIwQY
MBaAFELKGh49CSVCMxDBVLUCwoQoiOYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEt
NDM2YmZiOWU3N2VkLzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEtNDM2YmZiOWU3N2Vk
LzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNNq5cSL
DPHZSj5h3voI+qbJED/s9fILwo+2v82nsbJz/tngIjJBL/yY5nE5fyHp6oTh6Lte
qR1CLIHMLcEP6naqTfRoYNOX2FPpM2G3sy+xLJGmaG9/7edtz6T4OFPyR3P4K6X3
W8rX2sYRYdgjHacAF2pbYJsAnFPuQkI4liknbr/FyNqvr1O1rYGkFGrl34WRWg/0
qItBbizLd5KX1/qbxoPzTLt0lr1YlHt55kynCCofnFS4mt2Zupwd5csJuQepVtbF
FVzkDI/XqY/O1k9b+9YKqxWO/nt2air8a4BUGFlQStj/8m+uZ7XYoFHhbmnrIbgS
71nqRUrpG0lC/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:57:13 2025 by rpki-client