Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: 4bAxHC8R/l3xaFWxLS9/9uC21pBt1FP2yR3iaZd0ogA=
Subject key identifier: A5:70:BC:2D:02:FC:3A:64:9D:61:9E:7F:74:44:6F:5B:8E:24:A5:56
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 01993725AC850C51D1BE1812CD827E65262A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 05:00:39 +0000
Manifest this update: Thu 11 Sep 2025 05:00:39 +0000
Manifest next update: Fri 12 Sep 2025 05:00:39 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: 3c0arbbEfRyVWT6wvwOb62pyy/u+bViCaTiTNAiVUyo=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:ac:85:0c:51:d1:be:18:12:cd:82:7e:65:26:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Sep 11 05:00:39 2025 GMT
Not After : Sep 12 05:00:39 2025 GMT
Subject: CN=a570bc2d02fc3a649d619e7f74446f5b8e24a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:87:51:fb:b8:e7:f1:fd:f8:f1:31:10:07:
7d:01:ba:91:31:80:c0:12:6d:40:4b:cd:99:23:80:
fd:a0:0a:c7:9d:c6:91:45:4c:40:1f:c9:36:ed:6c:
a4:d4:ce:66:d8:cc:60:7f:30:98:5c:74:6e:76:24:
29:3c:bd:60:53:09:0b:1e:70:3a:5f:67:9c:86:c8:
8e:10:61:26:f0:e5:93:b2:5a:33:2d:26:30:2c:61:
6a:d0:5b:44:e5:5e:fa:6c:50:28:ba:62:c6:d3:60:
0a:e3:f2:73:64:8d:8d:50:7a:d3:97:52:9f:e5:c6:
6e:7f:f0:f3:47:9f:cf:03:25:c6:2e:89:ae:a3:64:
14:f7:8f:6e:2d:0a:a4:f9:6b:84:8b:6c:98:95:c9:
5b:5e:91:24:1c:8b:78:95:a1:cf:36:ca:a9:e8:2b:
3f:bb:86:4c:1f:00:be:0f:d7:98:0d:95:e1:e2:34:
c1:d0:45:e9:73:29:26:a9:16:b3:4d:fc:f6:a9:7f:
18:d6:8b:4d:ff:3a:ce:85:96:4b:23:77:75:7c:aa:
63:af:4d:86:76:29:7d:b1:d4:ab:04:f1:05:09:05:
ec:b9:ec:5d:8e:2c:51:11:f2:b0:e5:24:f7:dc:3e:
4a:02:ca:93:e1:46:69:f1:7b:09:c7:d1:65:2b:cb:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:70:BC:2D:02:FC:3A:64:9D:61:9E:7F:74:44:6F:5B:8E:24:A5:56
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f8:3c:af:9c:7a:01:4c:41:b3:71:93:b7:21:53:0b:51:c4:
f1:80:d5:09:95:05:8f:0e:bf:35:51:b6:f3:8f:a2:d1:2c:d6:
30:3e:43:06:43:e9:f4:92:b9:a2:51:da:1b:86:07:ad:d0:fa:
09:97:95:25:dd:fd:f1:bf:af:5f:d0:5d:db:9d:2a:fe:e1:35:
ca:c8:b2:c0:cf:13:18:f4:e2:c3:3e:de:ad:7e:25:34:12:86:
fe:a0:1c:8c:cf:98:26:46:a4:bf:78:2f:d9:31:08:9b:91:87:
20:a9:12:16:67:74:a8:1c:0a:10:da:21:5f:84:fd:d0:b8:4a:
54:ff:74:8e:9e:5f:32:4b:90:fd:d7:f7:11:86:7f:1d:e8:af:
cf:6c:bf:6f:49:e7:a3:c5:54:af:8a:9a:34:fa:57:c9:ff:17:
16:a4:85:44:a6:a1:a3:1d:c2:ae:a9:87:02:43:00:9a:a4:17:
84:39:c5:ce:ad:13:ce:60:ae:2b:b5:8c:b1:e6:30:71:34:e5:
17:54:36:17:fc:30:6f:92:90:3e:f3:71:5e:cf:e6:58:a1:9a:
cd:66:ac:8a:9b:af:c7:9d:b3:34:fb:39:6f:0e:e1:ca:a2:c1:
19:30:fb:c4:5c:bf:08:38:7f:39:31:5b:a2:95:09:82:b4:25:
d1:da:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:08:10 2025 by rpki-client