
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: WLBvRos76VpU2Nq/XzzSqK4Ml0wpKyFMZQq2ulmYXLo=
Subject key identifier: 8E:E8:C4:D2:22:38:43:9A:B4:32:21:6E:A0:30:95:30:6B:4B:9B:EF
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 019845F6D499787E41F0643BC3C14AE0DF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 09:01:00 +0000
Manifest this update: Sat 26 Jul 2025 09:01:00 +0000
Manifest next update: Sun 27 Jul 2025 09:01:00 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: /AH8XKB9/MhnHqj4r//NizyqY1ZbbSf6A5MGAlZa2bs=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:d4:99:78:7e:41:f0:64:3b:c3:c1:4a:e0:df:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Jul 26 09:01:00 2025 GMT
Not After : Jul 27 09:01:00 2025 GMT
Subject: CN=8ee8c4d22238439ab432216ea03095306b4b9bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:c3:46:a2:6a:62:9f:b9:9f:95:d6:c2:6e:
9f:fd:9e:c3:cd:fb:a0:11:60:47:05:2b:51:ac:cb:
84:12:36:de:19:65:4b:6b:9e:12:60:2e:3a:c1:30:
a1:83:d9:50:d6:d0:98:1d:36:9e:ff:99:43:f0:09:
b0:3a:17:76:e5:e0:90:df:04:6a:7c:4a:de:e3:1a:
1e:0b:44:7e:04:80:6a:71:8b:24:1d:5c:d2:40:a0:
d3:4d:b8:f0:04:15:41:db:4b:bc:f0:0e:f7:03:36:
9a:54:30:a7:e6:81:56:06:98:6f:98:dd:e9:90:c3:
0c:2c:19:24:95:4b:59:1e:5b:16:76:2f:8b:b3:16:
1f:93:f4:42:06:5f:0b:d4:dd:f6:6e:3c:e9:e5:d7:
e7:ee:83:10:49:74:f8:30:1d:90:5e:f3:74:dd:6d:
e0:91:e1:a5:f6:8c:aa:3f:aa:cd:f2:de:56:a0:22:
7b:58:44:2d:f9:fd:28:f4:35:b9:a8:b6:77:f9:bc:
66:5b:66:64:69:4e:d6:5a:ec:5b:8a:e5:09:d0:5d:
0c:9d:e8:51:cc:8e:5c:8e:87:31:95:f7:78:2e:76:
9e:ae:0b:a9:1d:0b:c5:a4:71:ce:18:f6:39:0f:f6:
82:61:86:8d:d2:fb:0f:11:f7:d4:7d:12:44:50:02:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:C4:D2:22:38:43:9A:B4:32:21:6E:A0:30:95:30:6B:4B:9B:EF
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:dc:cc:5b:bb:e5:ca:b4:f1:07:9d:2a:ef:8e:28:ce:94:4a:
49:ee:16:3e:19:6f:bc:bb:f8:36:f1:37:ae:c6:8e:a7:87:aa:
51:df:c6:25:3a:37:0f:29:d2:ed:81:2b:a1:be:71:3e:83:bc:
dd:30:f8:de:52:7f:5a:52:73:cc:2d:ed:78:44:5c:64:d5:92:
22:89:50:b5:5f:88:50:9c:40:0f:95:d6:96:2d:2d:a8:df:13:
bf:58:12:16:31:9a:19:60:90:38:25:e9:2f:ee:3c:89:d9:e6:
a5:74:b7:f6:53:9e:3d:d6:b9:bb:0d:f3:ac:7e:23:6e:a8:eb:
e1:1f:36:f2:4d:50:96:86:56:3a:ed:5b:3b:60:bd:dd:91:a2:
f5:6a:72:36:72:96:4d:e5:9b:3d:f7:80:0b:9d:15:c0:3f:bc:
dd:ce:56:0a:ba:50:4a:07:15:09:36:f5:65:77:77:62:a4:b1:
7e:2d:3d:76:1b:80:11:50:da:ed:f9:67:a6:70:0b:97:a5:f7:
c4:ee:00:4d:eb:d8:af:83:a2:24:73:d9:ef:5a:c2:79:b2:be:
54:c7:f7:0a:fa:f3:79:0b:43:ad:cd:9a:b2:80:ea:06:23:66:
19:49:04:5b:31:ea:4e:f4:6c:25:a4:c2:2b:a3:b9:ce:2e:b7:
d7:1d:ea:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:34 2025 by rpki-client