Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: 6IOUF3qRzlqMqNchajnKXa6LPdbPN2GjfopzfaIa+78=
Subject key identifier: D9:BD:A9:B9:86:85:DE:E2:1C:EC:1E:C6:3F:7E:DD:A6:36:05:99:22
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 0198C6B68B7B03092692F1526090F36A6DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 1643
Signing time: Wed 20 Aug 2025 09:01:48 +0000
Manifest this update: Wed 20 Aug 2025 09:01:48 +0000
Manifest next update: Thu 21 Aug 2025 09:01:48 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: wy+D0QaPFz4ImVxdeV3h5tpF6XEbgfXOEfx2O6bl/w8=)
2: uU_Epbh4k-iNlfIsi_aGVBuYX3E.roa (hash: oN88HQNaxlS+SnkVrt2tuPqyaZ78GSR116CcNBSWxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:b6:8b:7b:03:09:26:92:f1:52:60:90:f3:6a:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Aug 20 09:01:48 2025 GMT
Not After : Aug 21 09:01:48 2025 GMT
Subject: CN=d9bda9b98685dee21cec1ec63f7edda636059922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:ef:0a:56:8c:63:8d:bf:4a:27:96:63:18:
6a:42:75:86:c9:59:cc:b3:e2:b5:bd:b3:e8:b0:8b:
35:68:b8:b5:fb:70:f6:1c:72:22:92:43:32:f7:44:
e2:f1:2c:44:b7:84:d7:ce:c6:2c:52:44:11:2c:c2:
8c:8d:ae:f7:e1:d7:98:5c:24:13:33:a2:90:b6:b6:
e5:44:7e:3f:af:0b:82:77:81:3d:8d:78:61:38:ce:
db:e1:be:18:b7:66:d7:8e:48:a7:dd:5b:a6:0f:83:
7f:d9:0a:fe:ac:72:65:85:31:e7:27:db:b7:40:f6:
6f:4b:39:75:b0:73:3d:14:d9:d8:7d:e3:d7:89:a4:
35:51:66:b9:43:d2:28:bc:9f:1f:32:d8:8f:72:7b:
22:cb:3d:09:a9:d8:d0:ed:de:88:b1:dc:d0:ba:49:
7d:5a:ae:ec:9f:41:13:f3:28:01:85:9b:3d:61:09:
75:9a:53:c3:6e:86:03:a9:76:e3:bb:c4:d3:55:c4:
e1:dc:89:c1:1c:9d:7a:43:22:fc:a3:3d:85:e4:08:
8f:15:f1:c7:97:4d:b9:d7:cf:4a:a4:1a:ee:c4:41:
f6:c0:58:99:02:fc:49:ba:35:ea:d1:58:1a:f0:20:
5d:00:75:40:ad:27:5d:b9:8e:44:6b:43:fb:28:d6:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:A9:B9:86:85:DE:E2:1C:EC:1E:C6:3F:7E:DD:A6:36:05:99:22
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fa:46:bc:83:2f:56:61:47:39:71:60:d8:4e:1a:06:bf:f2:
09:e4:5b:af:b7:bc:e8:a8:89:9a:81:60:84:c8:ce:d1:2e:27:
06:a2:5e:c3:30:54:9d:7b:d9:9b:93:3d:3c:46:ef:a5:ce:bc:
b4:bd:df:bc:aa:e2:01:5f:39:33:f6:d5:69:ce:2d:93:42:16:
36:c7:0a:aa:4a:16:59:ef:b8:02:bc:ff:ed:1f:d8:4f:23:46:
29:8f:6c:1c:9f:f6:85:be:98:5c:39:08:42:e2:a6:9e:7d:42:
a2:db:3d:3c:bd:f3:b9:33:ff:a1:dd:38:c0:29:02:6e:98:c4:
24:90:2f:b9:0d:94:de:79:67:4d:b9:72:bb:0a:06:d0:4d:a7:
61:7e:0a:35:b7:d4:49:3f:85:32:ee:7b:5f:5d:db:b5:59:32:
bb:29:56:a5:3b:fe:aa:16:6c:ea:a0:c5:3f:f1:74:6a:02:0b:
33:67:24:82:8a:81:c1:0e:82:fe:4a:fe:80:a6:39:de:0c:5d:
18:ca:8f:ce:2d:78:f9:c0:5b:29:01:91:e0:e8:70:6b:df:34:
77:e0:ec:5b:3d:6a:5d:82:ea:75:88:dd:1f:c8:45:a6:14:8d:
8b:bf:bf:c4:0b:da:9c:3a:86:2a:f4:c6:3a:1f:98:a8:e7:2a:
92:11:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:42:34 2025 by rpki-client