Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: 5T2TIiHT1nvdk/gEW94RmZ2nnukkbSsliEFKc2kgs0s=
Subject key identifier: 11:4D:11:00:EB:38:76:1D:1E:27:4B:69:A2:06:2B:68:02:17:52:B8
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019933EE147E7F723FE8A2C31D6CDF74BCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 160F
Signing time: Wed 10 Sep 2025 14:01:04 +0000
Manifest this update: Wed 10 Sep 2025 14:01:04 +0000
Manifest next update: Thu 11 Sep 2025 14:01:04 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: wXLFGD2quEq9JhsfvCx8stH5ZkTfU7KTXO4rVsxEjrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:14:7e:7f:72:3f:e8:a2:c3:1d:6c:df:74:bc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Sep 10 14:01:04 2025 GMT
Not After : Sep 11 14:01:04 2025 GMT
Subject: CN=114d1100eb38761d1e274b69a2062b68021752b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:34:18:fe:a4:a3:0a:28:88:2f:56:93:cd:
17:ff:6f:8d:16:d8:d2:de:2e:2d:50:43:52:d7:d3:
09:b9:81:b1:26:98:84:56:16:3d:5e:ee:fb:03:ee:
54:84:a1:84:24:68:44:b9:10:66:5e:1e:4e:07:dc:
92:87:b8:42:9a:4f:8a:d1:50:f5:03:89:ba:ca:d4:
99:30:85:30:dc:8b:f0:be:23:c8:62:65:06:45:2a:
e0:51:a8:68:f7:e1:53:7d:68:e3:65:de:06:3c:ad:
f0:af:9f:d1:8b:2e:13:bd:3d:49:bc:1b:29:90:99:
6f:fe:c4:6b:8f:e7:8e:76:c5:29:e4:42:41:d2:cf:
61:91:be:10:57:d2:02:d3:ad:36:95:aa:8f:76:4f:
fa:58:41:48:a7:83:6c:f3:38:8f:cd:46:b4:ea:c7:
f6:6a:49:90:de:ab:2e:12:c5:dc:68:8d:58:59:8b:
41:78:88:ee:3f:7e:35:27:a0:f6:24:1a:05:16:54:
5a:bc:b4:17:b7:36:2e:d1:8b:e2:ce:9b:32:b4:f7:
e4:15:a7:b2:28:31:03:0a:d9:ed:81:e9:bc:9d:65:
f5:f0:4e:1a:f2:50:a6:06:a2:9b:04:70:f7:5e:d0:
7a:eb:df:d9:de:61:50:67:25:e6:42:cd:c7:00:cc:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4D:11:00:EB:38:76:1D:1E:27:4B:69:A2:06:2B:68:02:17:52:B8
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:1b:3d:a3:1a:a6:fa:a6:c8:dc:c8:8c:88:de:29:ac:d9:
8e:ce:3f:98:87:c2:0c:c0:18:fd:06:79:7f:f6:45:2b:3b:5a:
b5:16:94:bf:6d:b6:7d:38:a8:1a:18:67:bb:e4:6a:e8:27:21:
ac:50:90:83:17:fa:c2:ba:73:37:16:ca:1d:5f:8c:71:9c:8c:
2c:26:1d:e7:c7:a7:f8:64:09:d6:69:0f:cf:b1:c9:b9:e6:51:
c1:da:ea:7c:d0:60:b3:13:0c:1a:8b:11:44:e8:7e:1a:ec:f4:
ca:e5:67:7c:21:4c:5b:52:15:cc:84:ce:71:7d:4e:fb:da:5d:
af:af:dc:81:e4:a5:c4:3d:32:88:67:76:3e:b1:8a:b0:08:e1:
33:12:0d:ce:85:77:eb:8c:df:a3:99:a4:b9:19:c7:17:8f:c7:
b3:5d:93:ff:fd:4a:51:20:62:1d:bc:12:d3:47:f4:df:77:52:
0b:d4:4d:bb:f3:93:d1:a7:b4:b6:7f:a0:d1:64:54:49:a1:82:
a5:d3:05:0f:fb:4b:8e:8c:6c:d3:32:31:35:a6:37:61:02:f6:
3c:61:fd:12:47:5a:06:bb:9f:a8:68:ba:30:65:a1:61:ae:97:
a1:0a:da:93:5b:ea:7a:75:28:c5:da:8d:d0:77:1a:4b:db:15:
c5:26:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:01:27 2025 by rpki-client