Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: Q9PatkhGiq/LJxydZcOqITVqkHQF8RpDTcnocjKyTIk=
Subject key identifier: B0:89:F7:C5:37:B2:E5:05:55:05:44:5A:B6:15:2E:50:9E:03:90:46
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 01994EC049ECE55FD46E6E40C9DECF0DA284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 168E
Signing time: Mon 15 Sep 2025 19:00:48 +0000
Manifest this update: Mon 15 Sep 2025 19:00:48 +0000
Manifest next update: Tue 16 Sep 2025 19:00:48 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: je9yFSNnFmJ8JyV7wVA0aKiNJWMF2uinPOg8CB7lYN0=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:c0:49:ec:e5:5f:d4:6e:6e:40:c9:de:cf:0d:a2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Sep 15 19:00:48 2025 GMT
Not After : Sep 16 19:00:48 2025 GMT
Subject: CN=b089f7c537b2e5055505445ab6152e509e039046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:b4:49:e6:ba:1e:4d:66:4a:ae:48:88:f8:
41:40:78:91:78:45:89:70:30:4c:88:24:28:0d:eb:
8a:d6:16:fc:cc:1e:8b:a4:8c:2f:3a:9f:51:9b:42:
58:4f:93:5b:39:48:6b:31:6e:fa:17:1e:a3:36:ca:
29:9a:33:8d:dd:76:fc:75:72:0f:13:4a:41:9a:4a:
67:86:66:b3:21:26:7a:27:88:ab:f8:4e:52:a0:e5:
43:00:bd:b8:ce:a0:48:82:00:e3:d8:2b:3d:2b:0d:
62:ce:c9:ec:3d:6d:3e:c4:e9:c0:98:df:a6:87:5f:
0f:41:5a:9c:22:bf:de:d4:14:b0:00:6c:4b:80:ff:
97:58:67:ad:c8:56:43:e6:79:cb:f0:ac:bd:52:dc:
90:dd:3d:4a:a4:a5:01:dc:0a:a3:65:89:fd:da:c2:
61:e0:65:4d:09:c1:3c:39:3c:ca:ec:ef:7a:10:98:
b0:7b:80:b5:0c:ce:dc:3a:1f:46:1f:6e:1c:a5:c5:
68:8c:c8:36:d4:0f:a4:f9:2c:9f:b6:b8:a6:bb:6c:
35:de:f7:85:d6:6d:fd:ba:d4:b6:59:35:48:6a:0c:
f9:d7:aa:aa:1b:33:ef:e9:17:0f:00:9c:26:e3:38:
c9:e0:a1:c9:0a:ea:64:08:7f:ab:40:80:27:4a:1a:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:F7:C5:37:B2:E5:05:55:05:44:5A:B6:15:2E:50:9E:03:90:46
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:df:e9:94:a7:f2:89:57:7c:40:77:b9:c3:ad:f5:39:4e:fa:
63:7f:97:a2:3c:13:6b:d8:92:2d:1d:1f:b5:de:52:ab:61:77:
a6:1c:30:5b:e9:a3:c6:46:d5:92:52:11:98:c8:9e:be:97:a8:
ad:63:83:e9:d6:55:5a:d3:00:67:7d:12:52:d9:8c:f1:3e:29:
17:bf:e9:b7:eb:58:18:50:f6:a2:b1:3a:94:e6:f6:2b:dc:73:
d4:ec:d0:ec:8f:e5:4e:97:55:ab:f2:2f:2f:51:9d:24:b3:f3:
6d:0a:8e:c6:63:12:54:47:bc:0d:d5:59:80:44:99:e9:5a:92:
58:68:c6:60:80:cc:89:9b:c5:74:e8:51:e9:75:df:f6:62:15:
05:77:14:94:b4:00:05:cd:b9:e9:e8:f6:bc:93:43:2a:c8:21:
cf:0d:d8:16:ca:f0:cb:2b:b3:9f:4a:9f:b4:c2:6e:71:82:41:
cd:64:1b:84:a8:fe:23:62:92:a2:55:80:1b:82:d2:97:5f:c0:
40:84:73:38:25:08:a2:84:e9:ec:9d:6a:8a:a9:90:ae:d3:bc:
ed:09:29:d5:a7:e2:53:66:d4:90:af:43:da:84:11:26:13:b2:
25:73:1e:72:7b:77:00:17:a5:92:4c:3f:55:1b:04:28:f6:96:
da:11:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 22:50:22 2025 by rpki-client