Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: cqoOinVzshSCx4Rfqn+fpFSIcLDTbgamxfGlqJFfxco=
Subject key identifier: 5C:8A:B4:32:21:60:6D:E7:1B:FF:CC:F6:1C:A1:A9:BE:7A:51:6B:39
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 019844E3A042F92FBE65DEFCF016695BCDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 04:00:24 +0000
Manifest this update: Sat 26 Jul 2025 04:00:24 +0000
Manifest next update: Sun 27 Jul 2025 04:00:24 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: Pkozxvd5TZBiYeFuTXBRotoF9M+IvIVysuog5lif31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:a0:42:f9:2f:be:65:de:fc:f0:16:69:5b:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Jul 26 04:00:24 2025 GMT
Not After : Jul 27 04:00:24 2025 GMT
Subject: CN=5c8ab43221606de71bffccf61ca1a9be7a516b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:08:21:39:ea:21:39:69:6d:5d:0b:dd:0b:
3f:e3:11:11:fc:08:12:d3:d2:b3:1a:6d:6b:5f:47:
51:4b:76:55:75:de:cd:6a:ae:79:7d:38:01:b6:7b:
4c:bb:77:df:da:d8:1d:69:9d:a1:8e:63:41:ff:e6:
a0:23:89:f2:4c:1a:8d:ef:ae:0b:8c:97:60:01:31:
3b:c9:b8:7e:28:14:fe:ce:75:74:8b:cd:41:8f:b1:
12:5e:a8:3f:91:41:89:f0:14:61:58:e2:ea:03:f5:
52:95:a9:85:6e:98:00:91:7c:89:34:de:70:20:4a:
fa:70:a6:f4:6d:b6:0f:90:dc:e6:61:0c:45:64:ab:
85:50:16:9b:57:4b:5d:b1:b7:05:e0:46:1d:9c:9c:
b0:4f:70:f0:66:ee:c3:42:ee:70:cc:ab:90:ec:51:
0f:fa:23:c2:fc:c5:33:c3:72:84:37:22:e0:5e:55:
ff:88:b0:e3:ad:57:d1:d9:6d:d3:1e:33:bc:84:cd:
48:76:f6:ce:04:2d:29:76:33:5d:f9:e8:fc:56:93:
dc:de:a4:b8:6b:9f:47:32:fa:30:f0:07:4d:31:96:
2b:44:13:d5:95:32:9b:d6:04:40:c8:d6:d6:42:3a:
a9:36:81:d3:e7:f3:9d:3a:f1:f4:51:31:aa:ba:a2:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:B4:32:21:60:6D:E7:1B:FF:CC:F6:1C:A1:A9:BE:7A:51:6B:39
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:79:fb:ee:26:06:8f:3f:62:ee:9f:b0:c6:67:4e:93:61:cf:
52:9c:2b:2f:40:4a:2c:47:35:13:58:46:e1:26:4e:a2:47:8a:
44:65:69:2a:29:a9:36:c4:d4:c1:d9:57:d7:c5:5b:68:16:75:
ee:b2:83:43:eb:04:d7:15:55:06:14:f0:9c:fe:e5:b8:fb:2d:
33:cb:1d:e6:0e:53:20:f1:fc:8e:54:6d:9a:f2:f0:36:47:ad:
f7:2a:5b:38:4f:c5:35:44:bd:1e:46:9d:b8:06:0d:b4:90:d0:
d4:89:80:f8:02:a9:3c:38:84:57:d2:aa:99:ba:3c:f6:5b:47:
2d:67:0e:94:08:2a:a6:3f:bd:7e:fb:55:55:e3:f6:40:8f:7c:
b0:b2:af:01:11:70:4a:b1:f5:38:e1:bb:cc:95:8a:34:4f:13:
86:e3:1f:72:23:a2:d8:5c:cb:ad:12:d9:89:17:3e:11:07:75:
d5:6b:e1:6b:09:29:8e:09:ca:22:9e:f1:1a:f2:20:6c:2a:d1:
02:a9:1a:14:46:39:07:40:9f:b5:4a:88:09:18:fd:69:cc:5b:
24:e8:cc:e3:a0:b4:23:47:7c:81:7b:e9:d1:e2:87:08:7a:4b:
4a:8c:01:c6:78:5a:5b:aa:a9:0b:49:89:6c:1e:f2:5a:06:8a:
20:62:50:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhE46BC+S++Zd788BZpW83HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmIyNDQwYTdjN2EyZGZjZjJlNDIxNmRhOGEzYmRlNjhi
OWI4OTgwHhcNMjUwNzI2MDQwMDI0WhcNMjUwNzI3MDQwMDI0WjAzMTEwLwYDVQQD
Eyg1YzhhYjQzMjIxNjA2ZGU3MWJmZmNjZjYxY2ExYTliZTdhNTE2YjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAAIITnqITlpbV0L3Qs/4xER/AgS
09KzGm1rX0dRS3ZVdd7Naq55fTgBtntMu3ff2tgdaZ2hjmNB/+agI4nyTBqN764L
jJdgATE7ybh+KBT+znV0i81Bj7ESXqg/kUGJ8BRhWOLqA/VSlamFbpgAkXyJNN5w
IEr6cKb0bbYPkNzmYQxFZKuFUBabV0tdsbcF4EYdnJywT3DwZu7DQu5wzKuQ7FEP
+iPC/MUzw3KENyLgXlX/iLDjrVfR2W3THjO8hM1IdvbOBC0pdjNd+ej8VpPc3qS4
a59HMvow8AdNMZYrRBPVlTKb1gRAyNbWQjqpNoHT5/OdOvH0UTGquqLxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyKtDIhYG3nG//M9hyhqb56UWs5MB8GA1UdIwQY
MBaAFKkrJECnx6Lfzy5CFtqKO95oubiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDIt
ZjJjNjdlY2EzZTViLzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDItZjJjNjdlY2EzZTVi
LzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXn77iYG
jz9i7p+wxmdOk2HPUpwrL0BKLEc1E1hG4SZOokeKRGVpKimpNsTUwdlX18VbaBZ1
7rKDQ+sE1xVVBhTwnP7luPstM8sd5g5TIPH8jlRtmvLwNket9ypbOE/FNUS9Hkad
uAYNtJDQ1ImA+AKpPDiEV9Kqmbo89ltHLWcOlAgqpj+9fvtVVeP2QI98sLKvARFw
SrH1OOG7zJWKNE8ThuMfciOi2FzLrRLZiRc+EQd11WvhawkpjgnKIp7xGvIgbCrR
AqkaFEY5B0CftUqICRj9acxbJOjM46C0I0d8gXvp0eKHCHpLSowBxnhaW6qpC0mJ
bB7yWgaKIGJQxQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:24:33 2025 by rpki-client