Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: uTy7Ir+ob0TAgsLfuH4FalQ1vDOkVgbYzkK5ffWlZqI=
Subject key identifier: 7C:33:37:CE:5C:C4:4F:A4:DA:12:43:5D:47:93:AA:22:9A:8C:9D:BC
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 019A4AE06C62DE04448EE9870734CC821AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 170C
Signing time: Mon 03 Nov 2025 18:00:13 +0000
Manifest this update: Mon 03 Nov 2025 18:00:13 +0000
Manifest next update: Tue 04 Nov 2025 18:00:13 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: IViSIE6DndXKyzJFY57YabHPRGR0fpZ0GzOdXXGP1nk=)
2: uU_Epbh4k-iNlfIsi_aGVBuYX3E.roa (hash: oN88HQNaxlS+SnkVrt2tuPqyaZ78GSR116CcNBSWxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:e0:6c:62:de:04:44:8e:e9:87:07:34:cc:82:1a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Nov 3 18:00:13 2025 GMT
Not After : Nov 4 18:00:13 2025 GMT
Subject: CN=7c3337ce5cc44fa4da12435d4793aa229a8c9dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:27:b7:49:54:46:41:24:de:79:47:c3:23:
7a:6c:0a:7e:db:d6:08:90:44:bb:91:e1:58:5a:cc:
30:d2:77:0e:2f:c5:4e:65:53:9d:72:0a:0d:32:4b:
6b:c8:5b:d2:6c:83:56:33:bd:80:34:34:bd:44:5e:
61:e9:af:5d:9c:c9:30:a3:df:4d:23:07:60:bb:4d:
bf:e2:df:b5:50:3f:63:b5:f3:39:4e:64:d4:a8:6c:
2b:45:d5:41:53:56:87:9f:4c:dc:8b:99:63:15:32:
51:f4:c2:65:a9:0d:a5:b0:9a:94:42:06:15:79:e4:
bd:6f:6a:32:9b:76:19:35:93:bb:12:f5:05:46:cd:
9d:ac:d2:be:b9:cc:5b:56:82:02:93:d4:80:c8:f1:
7a:cd:12:2b:01:83:0e:b4:0a:6e:41:63:cf:da:89:
2b:30:9e:4b:b9:84:22:48:b6:08:c2:3d:73:06:40:
3f:8e:36:03:37:43:67:1f:e4:f1:04:4f:a8:4c:3a:
da:d4:bf:cd:8f:84:c4:40:72:bb:2f:3c:cb:d0:29:
71:b3:63:e6:59:36:9d:05:64:21:0b:67:f1:09:72:
da:14:e6:de:6e:31:93:8c:93:97:1c:8b:55:02:0c:
79:1d:5d:10:64:2b:c9:c1:43:ad:80:90:e4:96:e3:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:37:CE:5C:C4:4F:A4:DA:12:43:5D:47:93:AA:22:9A:8C:9D:BC
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d2:49:9a:f0:b1:e3:e8:b8:75:3f:b8:fc:24:38:b1:75:3d:
60:d4:fc:52:03:cb:fe:8a:ff:43:86:49:4d:2c:ff:5e:36:8c:
0a:7b:88:2b:c0:c0:5b:28:98:01:13:ee:3c:10:6d:8b:3e:94:
75:f7:55:32:91:46:81:e5:be:fc:64:39:4c:1b:38:a7:10:21:
81:35:c9:62:35:aa:fa:c7:eb:4d:83:26:61:c3:1d:c7:77:69:
fe:e2:80:43:58:37:41:99:ce:f4:58:60:94:09:dc:e1:d0:d7:
42:99:72:56:51:ea:a5:1a:a2:44:8b:b6:34:dc:54:23:7e:02:
3c:ea:d2:ad:36:4c:24:b3:ec:9d:df:7c:20:42:6a:93:e6:9a:
1a:22:86:27:cf:6d:81:23:d3:a0:35:f7:62:97:e0:ea:7e:27:
52:c0:4f:d7:bf:56:8e:90:d5:c9:74:9f:e3:dc:b4:93:e3:64:
96:3d:cc:12:6d:5b:6d:aa:bb:71:c2:ab:2e:36:fe:7c:45:02:
31:0d:51:97:79:2b:3d:00:3e:f5:b8:de:50:ef:b3:60:18:b4:
85:af:67:06:b6:7d:7c:a8:7b:57:b2:b5:28:6f:e9:94:24:da:
8e:63:9f:f7:d8:26:0c:dc:39:9f:4e:87:e4:72:0a:2b:97:82:
b6:c4:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:02:02 2025 by rpki-client