Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: +LEAJ0gDeqVsC9vYOT1/JI/FMWHhGhjOYllewXFB/SM=
Subject key identifier: DF:67:F6:AD:85:2D:01:81:9B:27:B6:F2:3F:C1:E9:12:0B:FB:3B:FE
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 01992255E1F59762C7D831E0301D0857D0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 04:01:17 +0000
Manifest this update: Sun 07 Sep 2025 04:01:17 +0000
Manifest next update: Mon 08 Sep 2025 04:01:17 +0000
Files and hashes: 1: JTBFzZ_Xd-qKEEB1M2yH_cqN0L8.roa (hash: UtmE2VrYOG/N+bYO3QuLYMQZyMdAh9FYCP1pfkSwK6Q=)
2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: omMz94Vw7gVlnerzDS+Nhz18BG8GXL/VSJsEa1Mx8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e1:f5:97:62:c7:d8:31:e0:30:1d:08:57:d0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Sep 7 04:01:17 2025 GMT
Not After : Sep 8 04:01:17 2025 GMT
Subject: CN=df67f6ad852d01819b27b6f23fc1e9120bfb3bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:ae:d7:e4:9b:6e:05:73:13:4d:5d:24:14:
10:56:bb:ac:72:4f:c5:b5:c8:a3:c3:06:b3:66:e4:
fe:44:db:77:9e:62:33:ac:c7:11:57:42:4b:b0:eb:
2f:7a:ee:ef:28:eb:df:09:78:7a:41:5c:70:84:36:
4a:c3:17:b1:ee:de:1d:f1:a3:03:89:da:e8:23:e3:
09:a9:fe:32:ed:8c:3a:9a:84:44:2b:50:1f:ac:03:
33:4a:fd:0d:57:25:c7:63:93:34:c0:fb:17:eb:ad:
06:d6:b1:19:03:d0:50:1f:f7:63:49:e5:32:25:30:
a9:ee:6a:85:d7:0d:76:8b:10:e5:40:52:3d:94:72:
92:c4:ad:05:5f:99:b0:35:b8:17:6c:c6:84:2f:99:
3e:82:ff:54:bf:8a:db:7b:bc:b4:6a:27:78:84:bb:
93:4b:31:ec:22:88:e5:92:aa:95:0c:09:8f:87:38:
45:7e:dc:7c:8d:87:56:0c:ba:5a:d6:1f:3a:e4:68:
3e:45:53:e7:34:6a:31:f4:f5:81:aa:84:47:f5:bb:
5a:4c:2a:10:5a:68:da:3f:64:e1:70:4b:66:65:18:
8d:ba:ce:bc:03:9d:44:a8:d5:de:7a:14:26:df:fd:
84:f4:fc:fd:f8:06:66:cf:f6:4b:71:de:6c:f9:38:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:67:F6:AD:85:2D:01:81:9B:27:B6:F2:3F:C1:E9:12:0B:FB:3B:FE
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:32:f8:c2:69:c8:d2:9d:43:a1:e2:c6:57:79:cf:9d:1c:c5:
f5:43:00:09:7b:6c:28:66:8e:b9:e0:6b:cc:64:8e:15:39:10:
9c:f1:56:f2:da:37:7e:7a:8b:bc:4a:49:56:03:35:26:b9:8b:
02:d1:44:16:d3:f4:88:d2:0b:8f:e9:64:7e:da:19:f5:5f:ba:
fc:de:db:ef:e1:aa:1c:cd:8e:11:d0:9c:7d:e1:a8:55:6c:72:
7c:d5:91:3d:e0:07:86:b8:3b:f0:63:4f:c8:dd:17:c6:3a:6b:
61:4d:34:03:5f:ad:3f:bf:32:83:ad:0d:6c:f4:98:17:c6:9c:
bc:5f:e8:fd:59:0a:35:83:9d:c7:de:38:eb:94:22:93:1b:da:
05:6c:e0:f8:7d:7c:29:ba:d6:34:a8:19:ad:95:c1:d1:89:15:
30:05:85:44:c3:9a:4d:5e:b0:1b:7c:e5:b6:34:16:55:2b:49:
54:44:e7:b1:bd:2f:5e:32:a0:56:9e:bf:29:a7:f8:80:88:b6:
6f:d0:0f:ab:40:84:7b:e4:37:8f:d1:90:57:30:d3:54:df:56:
e7:db:cf:03:7b:33:70:b3:c1:2d:f3:45:aa:09:91:88:d7:c5:
c7:1a:89:7a:4d:fd:63:1a:ae:b8:ab:94:86:3c:68:97:d7:e1:
9f:fd:0c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:26 2025 by rpki-client