Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: yK7Rm8C9RG7xt6je4Ua6XjkODAvP3LA6inELIi0Wq3U=
Subject key identifier: A2:95:3A:59:17:1E:A1:A1:B8:E3:10:DA:6E:EC:A2:00:02:BC:BA:3F
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 019935A4F501DBAA78783F4EFE2CA5568AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 156C
Signing time: Wed 10 Sep 2025 22:00:26 +0000
Manifest this update: Wed 10 Sep 2025 22:00:26 +0000
Manifest next update: Thu 11 Sep 2025 22:00:26 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: flkEReRgT3wBRkJu/xnLwAR7fuW3ha1vTQz3Qri5kek=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a4:f5:01:db:aa:78:78:3f:4e:fe:2c:a5:56:8a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Sep 10 22:00:26 2025 GMT
Not After : Sep 11 22:00:26 2025 GMT
Subject: CN=a2953a59171ea1a1b8e310da6eeca20002bcba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:3f:1d:2f:83:12:0f:75:b2:9a:5d:e5:07:
58:a2:f2:1f:ff:14:38:f1:52:d0:23:88:2a:30:92:
81:01:ed:74:5b:19:53:c9:fe:fa:46:46:3f:5a:f4:
c4:9f:dc:20:32:81:d0:0a:49:3b:8c:8f:57:0f:f9:
36:cf:0c:7a:da:a8:4a:b5:6d:84:d3:3e:93:25:a8:
b5:72:05:fa:26:5a:95:c9:cf:08:3f:e6:95:e8:db:
ba:88:98:29:14:09:05:9e:f0:49:be:a6:85:5c:28:
54:fd:63:39:3e:c5:8b:af:97:a7:88:4c:dd:9a:2b:
f7:e8:8b:42:06:48:32:06:5f:36:39:a6:a8:48:b1:
a6:78:30:0d:e3:5a:68:a8:4a:02:83:88:8e:ee:41:
b4:d5:f6:c9:99:74:ff:42:05:63:01:e4:30:3c:2c:
fd:b5:77:4f:b7:cd:22:19:be:8f:eb:01:b5:a1:6a:
e7:4a:f3:18:21:60:7a:3c:bd:dd:ac:46:10:1a:cf:
0c:6d:02:20:39:28:63:2b:b7:d3:65:5d:fb:5b:95:
cc:90:7f:6b:a2:7d:c2:0c:4a:2f:79:b9:fd:8a:7e:
0e:12:e5:74:55:f0:ce:9e:01:f5:6a:a0:5b:b6:2c:
81:f3:32:5a:30:8f:e8:b3:66:39:2e:3b:f1:d2:f4:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:3A:59:17:1E:A1:A1:B8:E3:10:DA:6E:EC:A2:00:02:BC:BA:3F
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:82:61:b0:d6:42:47:f3:8c:82:2e:58:44:c7:9e:f9:c1:ca:
a1:b4:cb:6b:50:6e:24:ba:c5:25:dd:73:43:0f:90:87:dc:65:
3d:5e:f2:17:84:68:28:88:8e:12:a5:35:9a:24:7f:40:de:7a:
d1:86:1d:ed:ff:28:d5:cf:12:cd:90:b8:68:dd:b9:5e:8f:ce:
34:ca:4a:57:5f:84:21:d4:2a:d0:ea:da:49:50:a1:b9:9a:e2:
8d:a1:6d:d2:81:cc:ac:c3:9c:66:7e:d7:89:f3:e8:96:51:3a:
c7:dd:85:d7:f8:37:11:8a:14:ca:c2:7b:b9:98:be:85:d1:97:
fa:df:e9:49:97:a8:46:39:4b:ba:f8:00:75:bb:2f:d0:2d:72:
4c:3a:c2:a8:b6:3d:25:11:5c:c2:cb:db:64:e3:9c:68:29:93:
1e:ae:65:21:69:34:b4:3e:89:7e:a6:d2:76:73:0c:d0:27:2c:
84:2c:1b:f2:92:f6:84:80:9c:86:b9:c7:f5:bb:7e:33:64:58:
7f:22:c8:22:31:89:c5:41:15:a8:6f:f5:98:6e:7a:89:6f:62:
d5:57:fc:2c:0b:4a:66:02:4f:5e:5b:37:c7:93:e2:48:6f:05:
a6:60:b9:43:40:26:42:63:91:39:78:bb:5f:fe:6d:f2:79:b1:
4b:2f:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:46:04 2025 by rpki-client