Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: TDrwDmHl7ex/AEDmXgNAVUApy0rZJB57J58nHTi1EU0=
Subject key identifier: 23:6C:E6:7D:99:43:43:08:23:CA:1C:95:14:6C:3E:03:C9:C2:E5:7B
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 0199D4A5F3081B9D0E5DD93E97B275C50BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 08BA
Signing time: Sat 11 Oct 2025 19:01:09 +0000
Manifest this update: Sat 11 Oct 2025 19:01:09 +0000
Manifest next update: Sun 12 Oct 2025 19:01:09 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: WsCfVfiTYUbUj/IM22mzv8kEE4z0uLxWjFxVEvlbV1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:a5:f3:08:1b:9d:0e:5d:d9:3e:97:b2:75:c5:0b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Oct 11 19:01:09 2025 GMT
Not After : Oct 12 19:01:09 2025 GMT
Subject: CN=236ce67d9943430823ca1c95146c3e03c9c2e57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:86:10:05:34:95:87:45:36:d2:93:5f:0d:
57:aa:52:cb:c1:e0:8a:46:79:f6:34:62:cb:54:a7:
2e:78:e4:0e:ec:b8:2b:3f:df:7d:50:d0:c8:61:a0:
41:b4:bd:e4:8d:39:cc:90:3e:91:98:3d:a9:e4:4a:
72:9b:eb:b0:de:ae:7a:80:fa:d0:ee:57:1b:00:44:
85:be:cf:5d:6b:1a:69:b7:7d:f7:d8:38:fd:bf:e2:
e3:6a:08:2d:7e:dc:39:f6:f1:a4:3a:4a:f5:1d:90:
53:71:98:56:c7:5a:4c:69:66:7d:57:b1:e4:7d:ac:
b9:7e:74:0b:cd:86:6e:c1:2f:20:67:db:90:c4:1e:
a4:f9:23:43:70:1b:1f:b7:ed:28:7b:59:00:ef:ed:
8b:70:9c:c4:8c:9e:0d:5d:09:09:57:6d:9b:d8:fe:
fa:96:db:aa:8b:30:79:4e:a5:1d:4c:c1:c1:32:9c:
2d:2d:e6:48:53:db:a8:c7:1a:cf:21:84:61:13:0f:
24:6c:82:3e:51:17:d4:bd:3f:8f:d0:40:a1:e9:a8:
bf:95:ce:cf:b1:ea:bb:35:68:dc:33:fd:92:04:0b:
82:ba:28:7d:0d:04:8e:32:1c:4d:57:68:17:6d:f6:
09:7f:35:3a:ae:19:f2:c6:c9:c9:b5:2a:97:17:b8:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6C:E6:7D:99:43:43:08:23:CA:1C:95:14:6C:3E:03:C9:C2:E5:7B
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:44:3b:51:57:88:d8:53:97:f1:3a:59:72:bb:26:54:f6:bb:
9a:b8:f1:da:5e:81:2a:ca:41:4b:8e:d0:2f:fb:68:f6:6b:c5:
c8:b3:9b:3a:73:f0:ce:7f:c7:b9:51:85:2a:69:06:36:25:41:
ef:33:5a:e9:c1:1d:b9:56:97:59:66:61:e5:a3:da:d5:22:bf:
d2:3d:97:c6:fe:75:56:43:45:da:69:b3:47:9a:47:47:17:1c:
5a:81:ad:1d:a7:32:a2:a2:32:2d:35:d8:24:04:55:41:9e:bb:
76:7c:02:f7:84:d9:a3:3b:b2:60:42:38:1a:5c:69:64:aa:d7:
e5:94:db:b7:0a:ff:9d:eb:0b:3d:c7:29:7a:70:31:f8:80:72:
e4:e7:c8:ee:dd:00:16:d5:27:a1:76:55:57:f6:f0:26:aa:22:
91:ed:6a:0b:cd:75:c7:69:02:10:78:96:88:fc:89:0d:a9:79:
de:91:a7:7e:4c:15:22:be:ba:38:af:eb:8a:b7:f1:5b:59:4d:
0d:f4:6d:6b:87:d6:51:77:06:46:e1:68:42:39:92:4b:64:59:
9a:e9:f3:1a:22:23:9f:a9:71:cd:7c:21:76:6b:90:d9:f7:bc:
4c:cc:43:48:b4:64:b5:5d:bc:52:3d:30:a0:04:a3:01:a5:d2:
ad:1a:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 20:38:33 2025 by rpki-client