Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: RUOJFWzFob0L6BBEURo+rw/AowYRIx5pMEePGOytuts=
Subject key identifier: EA:D5:B1:1D:A5:38:EB:5D:AA:E1:A0:A8:04:15:6D:77:35:B0:AB:35
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01993124B80B924BA4419B8931863A75FDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 01:01:53 +0000
Manifest this update: Wed 10 Sep 2025 01:01:53 +0000
Manifest next update: Thu 11 Sep 2025 01:01:53 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: PMxS+eVnAXKAPZrSMzWb1mKmR1jgsbeRg/OnyuRnRjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:b8:0b:92:4b:a4:41:9b:89:31:86:3a:75:fd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Sep 10 01:01:53 2025 GMT
Not After : Sep 11 01:01:53 2025 GMT
Subject: CN=ead5b11da538eb5daae1a0a804156d7735b0ab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:6c:da:b4:f4:12:9a:40:31:cc:c8:9e:0d:
f4:53:f5:a1:96:df:dc:02:87:55:11:7f:0f:c9:61:
a8:66:1a:6e:04:c6:18:16:a5:13:35:27:0c:47:c7:
d9:d8:bf:7f:51:a2:da:d5:1d:c2:de:ce:dc:a3:be:
26:e0:e6:6c:d2:9f:41:48:e1:56:37:77:d7:1d:15:
0c:6c:3a:80:3d:13:93:d4:9d:9a:1c:0c:7d:7c:68:
3d:50:04:6b:77:25:96:f4:5c:ff:ff:c2:3e:6a:ff:
19:dd:d7:0c:a4:7c:cb:41:53:ee:1b:96:f9:00:e8:
f5:1d:3f:1f:ca:67:35:75:2a:44:00:37:73:0a:f4:
e3:cd:59:4c:8d:7d:59:3a:dd:40:89:9e:82:cb:db:
1d:e4:50:44:eb:13:cf:a6:74:a9:1d:56:3d:4e:cb:
5c:14:e1:76:24:cc:6c:ea:c3:c4:bb:63:48:e3:ca:
12:c3:92:7f:e3:a5:80:88:ae:8f:4f:82:79:57:7b:
63:2a:46:bf:f8:26:b3:2d:e8:85:7c:9c:89:3e:d9:
e1:66:b1:7f:a8:ac:bc:d0:5a:97:a3:5f:1e:df:07:
2d:e7:91:cb:51:4d:93:f3:a7:13:5c:1f:fa:7f:5a:
8e:f5:dc:f4:9e:e4:44:50:e2:ae:19:8e:db:0c:cd:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:B1:1D:A5:38:EB:5D:AA:E1:A0:A8:04:15:6D:77:35:B0:AB:35
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8b:ac:b9:cc:b8:e2:ea:f8:2a:99:3f:b1:90:f9:2b:90:fa:
13:db:ab:25:37:dc:f8:f6:86:aa:95:99:f6:38:5e:f3:b7:af:
f7:21:7b:6e:29:21:4b:7b:82:62:98:3b:dc:c4:8f:c8:be:cb:
61:fc:fa:20:82:60:7f:e3:49:9f:ad:9e:60:21:45:c0:de:13:
a1:d5:fa:2f:3b:66:33:b4:d8:37:1a:af:e7:6e:85:c1:b5:ca:
bc:fb:f7:a9:40:6f:cf:20:8f:a6:16:f3:c1:cb:85:d4:43:ee:
71:cd:bb:85:a2:af:36:f2:29:2f:00:3e:4e:b5:47:fd:8c:c8:
ab:5b:21:e8:3c:50:a7:28:7f:e5:8d:61:db:f1:29:1c:e7:86:
e8:d9:86:e9:34:68:d1:13:93:66:0c:21:c7:c5:5c:63:7d:0c:
83:3f:75:39:f6:47:14:eb:72:c5:4d:9a:b7:32:c6:13:cb:81:
ad:de:ef:79:ae:c3:77:d0:e1:00:55:ea:c6:46:d9:43:23:9b:
14:2b:e1:7c:7e:a9:b7:9f:60:c6:31:27:4f:e1:ad:a4:79:04:
c6:90:e8:6e:1d:aa:7e:49:95:62:71:5d:ca:17:ba:65:01:30:
28:c5:51:56:88:75:6f:1f:54:f0:73:c0:44:96:b9:e9:52:24:
6d:44:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:55:06 2025 by rpki-client