Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: 2U94EnudqIu4J9q6oVEUcEWhT05t8bSvjSTsJq73elg=
Subject key identifier: C7:24:40:A6:BD:D5:DD:AB:B6:9B:12:C6:DB:FA:1B:49:6C:06:D6:28
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 0198572172CF0683650EC408635053485FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 17:01:06 +0000
Manifest this update: Tue 29 Jul 2025 17:01:06 +0000
Manifest next update: Wed 30 Jul 2025 17:01:06 +0000
Files and hashes: 1: DrD2EGGK8WeukKhW_YJ8LCGTR78.roa (hash: b5xoiz2oFHur8HWu35m6ElddpxbfSrT/Y2/iqOY1S6Y=)
2: IcWYNvOBamTxu6amEYkiVctQe18.roa (hash: DVw0i9jC2LodVXO+VD00rdFIuWtsdo/jV9gSa2jJOsM=)
3: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: e7aXc17ZLDnNO9NuSqJ46BX1Rrf1jqkKeZKBCzeow2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:21:72:cf:06:83:65:0e:c4:08:63:50:53:48:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Jul 29 17:01:06 2025 GMT
Not After : Jul 30 17:01:06 2025 GMT
Subject: CN=c72440a6bdd5ddabb69b12c6dbfa1b496c06d628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:95:05:82:b4:e6:04:45:04:71:e4:2f:8e:
50:06:0f:8c:22:1c:e0:6f:3e:e7:ba:f2:a0:0f:c2:
32:e4:94:0c:26:0a:21:5a:8e:e9:50:4d:5d:88:b5:
f6:75:60:79:87:ed:92:00:92:f3:c9:1a:e6:4a:9b:
39:4c:91:b8:68:8b:9a:71:20:31:b8:6d:05:bb:cd:
a4:ea:35:5a:81:2b:75:fd:f6:80:63:1e:7d:95:79:
80:fc:6d:91:f8:4b:62:0f:68:1c:8c:a5:bc:4d:a0:
79:1f:04:6a:a8:94:b2:ec:70:7c:fd:70:3e:31:cb:
71:8d:69:ae:f0:db:17:df:6e:1a:34:70:01:03:90:
a2:16:38:3a:38:4e:17:66:fa:cb:ff:75:c1:19:30:
76:31:a9:15:56:20:36:31:96:a7:04:76:68:34:d8:
90:63:4d:3a:25:e9:6a:d7:15:b4:d9:1d:2b:33:27:
78:14:80:c9:0a:1c:f3:d4:52:6c:12:ff:c3:cb:ba:
a7:cf:db:e0:41:34:4f:a4:1f:12:5b:bc:a2:14:16:
a8:a8:3e:63:8f:b8:06:a5:9c:cd:4e:95:4f:7e:bb:
ba:e8:5b:dd:e5:17:13:b7:7a:28:2a:31:f8:8c:2d:
60:21:9a:c1:5e:f2:96:94:39:03:95:2e:40:23:e7:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:40:A6:BD:D5:DD:AB:B6:9B:12:C6:DB:FA:1B:49:6C:06:D6:28
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f0:5b:bd:cc:4c:eb:7c:b9:f5:e7:6a:60:8b:2e:36:dc:0d:
eb:fb:53:fe:c4:f8:d7:4b:90:88:19:8f:16:0d:d4:d7:75:3e:
c2:12:a7:7b:11:19:a1:c0:97:56:52:74:3e:51:8f:31:5e:41:
e1:3e:32:67:0f:cf:89:99:84:12:17:7b:2d:89:c6:83:33:32:
13:d2:27:99:d3:65:e1:eb:1d:7b:e8:80:b8:10:7b:2c:e9:84:
72:cf:ba:da:b0:fe:f7:0c:57:29:50:06:4b:98:83:b2:e7:f6:
af:df:50:fe:b6:5e:f6:0b:37:38:d7:4e:16:39:57:19:b8:e0:
81:cd:0c:a6:e4:37:7b:e1:f1:66:dd:72:72:94:09:dc:cd:6b:
17:2d:c9:8c:e2:38:72:73:70:0d:dd:01:d2:f1:9b:3f:e0:04:
c5:37:eb:cf:ff:0a:1a:77:02:1b:73:db:14:5e:5f:be:71:a9:
86:70:cf:10:8e:21:33:1c:9e:77:8a:dd:89:35:d5:f0:5f:21:
ba:e7:4c:3b:68:c7:5d:7a:c6:8c:34:f5:48:e4:7c:9c:fd:b6:
22:e0:31:f9:8c:2d:ff:d8:1d:c7:9e:60:91:fe:f6:96:07:fd:
8b:4d:01:33:1c:16:23:f8:e4:4e:28:9c:69:6f:bb:91:71:97:
2d:9a:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:47:10 2025 by rpki-client