Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: 2FClKkom3S++YHcP6D2e9IPXr8gvNagpGRHfWw2awy8=
Subject key identifier: 96:68:82:D6:DC:46:84:97:06:CC:DF:C4:3D:D1:3F:87:2B:9F:17:07
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019848895693B88FA227F94A277FA42D211E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 160A
Signing time: Sat 26 Jul 2025 21:00:16 +0000
Manifest this update: Sat 26 Jul 2025 21:00:16 +0000
Manifest next update: Sun 27 Jul 2025 21:00:16 +0000
Files and hashes: 1: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: bHrKyXbFB0Mnz91UwLr8ZYuBkiD9yW6a7A5Xw9M98oM=)
2: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=)
3: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=)
4: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=)
5: oi0U9f8KU3xL5hcxj-l_j_oxaQE.roa (hash: VaBV5SBKPM+Ny0Aym3FdNVG9ABI2dtE3XxpwOFbyKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:56:93:b8:8f:a2:27:f9:4a:27:7f:a4:2d:21:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jul 26 21:00:16 2025 GMT
Not After : Jul 27 21:00:16 2025 GMT
Subject: CN=966882d6dc46849706ccdfc43dd13f872b9f1707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:e2:8f:94:25:0c:97:01:c3:f3:73:04:01:
cb:ef:20:e0:7a:d3:76:71:a2:68:ef:a8:73:b4:ca:
a7:c8:02:18:7f:76:4f:c2:b1:81:a0:94:8a:29:35:
a2:a0:8f:89:19:69:28:8d:ac:d6:d1:38:d3:e4:cf:
29:e0:a0:46:22:3b:d8:06:4f:57:83:a5:3f:26:a3:
8e:a6:cf:04:09:3b:3a:18:a7:fb:18:13:ea:5d:53:
02:4e:26:26:2e:48:0c:2f:a6:19:3b:a7:07:50:5c:
1c:bb:38:4d:b2:59:90:c4:30:52:13:f6:8d:34:c1:
48:14:29:ca:c8:96:31:21:a8:65:1d:7e:96:e5:36:
2b:1c:76:e4:58:56:e4:b0:66:18:71:6c:7a:0d:71:
cb:69:d3:8b:f1:04:a8:5a:b0:c7:3a:f5:6b:34:57:
8b:95:c6:ea:39:e0:74:da:01:40:47:bc:f5:68:47:
02:80:e8:67:fd:0a:fd:82:cb:09:3d:6a:30:91:c1:
52:e6:d4:80:2e:0b:e3:f4:83:14:e6:61:b8:ed:ba:
7b:d4:9a:59:e8:10:35:87:78:cf:30:01:64:84:74:
ac:74:80:9c:a0:80:f7:d7:06:95:79:3f:a8:8d:ca:
09:de:de:d7:43:3c:a6:ec:00:51:bb:51:e4:4f:9a:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:82:D6:DC:46:84:97:06:CC:DF:C4:3D:D1:3F:87:2B:9F:17:07
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:42:43:02:88:f2:dc:a2:7d:fa:8b:8f:af:b9:aa:00:1c:61:
f5:70:87:10:b9:49:58:0b:d0:33:d2:c9:55:5c:b2:45:6b:b1:
b5:48:da:eb:ab:e5:b2:d3:9a:d3:16:55:cc:41:c4:66:8f:b5:
1e:5e:79:84:fe:c3:5b:85:7f:04:80:8a:de:e8:f8:63:52:87:
8b:a2:85:6f:f9:92:89:fb:00:bd:b8:a6:bc:a8:55:11:e4:d1:
ca:03:86:88:c2:60:cc:eb:58:4d:d6:6a:8a:87:7a:1e:f1:0a:
75:06:40:3f:ff:98:a3:3a:47:90:8a:66:80:0a:9d:fa:f4:5d:
70:b3:6b:71:c3:68:6f:f6:e6:ed:25:68:73:17:90:b8:01:dc:
b3:5e:a0:95:db:55:84:72:74:0e:67:80:91:78:ad:1e:f4:43:
3f:24:16:88:4d:d4:d2:02:f2:6a:c3:53:85:77:e0:47:21:3b:
79:f3:c2:11:f4:1a:37:67:89:83:21:79:5e:63:1d:a4:e1:cb:
9f:7d:3b:fe:89:43:2d:67:99:15:c9:5d:c0:35:88:fa:92:b8:
5b:97:60:5f:65:df:a2:8e:e4:0f:0f:54:1d:34:ce:30:a2:73:
b3:48:15:02:8d:24:d3:6b:3d:ac:43:64:0e:a7:d5:aa:b1:d6:
8e:a4:75:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:06 2025 by rpki-client