Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: pMEG/5FiT2n2JHhIMC9kYS0zR2z/YUbX1K9d0fdrpTY=
Subject key identifier: 98:36:95:47:E7:99:70:1A:B3:2D:58:F7:A9:B1:A7:4E:90:20:5D:A5
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 0199228D2284FC417FAD1F9243676FE659BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 1412
Signing time: Sun 07 Sep 2025 05:01:38 +0000
Manifest this update: Sun 07 Sep 2025 05:01:38 +0000
Manifest next update: Mon 08 Sep 2025 05:01:38 +0000
Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=)
2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: 4g/F8A//AuR6reHuPv+4lMobLZrX9fAwoF2wAsIkFt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:22:84:fc:41:7f:ad:1f:92:43:67:6f:e6:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Sep 7 05:01:38 2025 GMT
Not After : Sep 8 05:01:38 2025 GMT
Subject: CN=98369547e799701ab32d58f7a9b1a74e90205da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:55:8e:dd:59:b2:53:00:4f:9c:51:10:64:
fc:ec:1f:64:ba:1e:8b:47:ce:2a:81:53:ed:08:76:
43:1a:08:69:4c:d4:71:3a:c8:a6:1e:16:c8:10:d2:
3a:d5:de:56:bb:46:df:f1:94:17:76:33:fc:81:e4:
24:18:f0:4e:88:d6:82:d0:63:8a:97:fb:c3:51:20:
43:07:0f:27:8b:2e:d6:d7:b0:97:2a:fe:f7:68:8b:
18:66:21:d1:5a:08:7d:71:53:49:e3:53:d0:a9:eb:
da:06:f1:07:e5:87:12:3c:74:1b:34:63:3c:90:bf:
fa:fa:9f:16:2e:4d:c3:10:7e:6d:b7:4b:9a:46:1c:
4d:f0:af:2f:df:f9:47:a7:ee:8a:44:00:ea:4b:35:
a1:7f:c7:e2:65:62:1a:db:1b:2b:8c:ee:24:9f:d5:
5a:5a:ed:10:94:d4:1e:cb:fa:d3:48:2b:5a:27:7b:
30:81:34:26:4f:41:bc:e0:5f:ff:f1:ec:1a:f5:76:
63:35:23:37:5d:f8:cc:54:8a:38:2a:7a:83:08:07:
d3:c3:b1:ea:45:0a:0b:cf:26:1d:41:51:a3:3d:7c:
0a:de:0f:a8:12:34:f5:7b:16:cf:02:94:82:44:6f:
82:d8:a3:ea:18:8a:e7:96:4b:84:81:4b:a1:5e:74:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:95:47:E7:99:70:1A:B3:2D:58:F7:A9:B1:A7:4E:90:20:5D:A5
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:58:0a:b9:82:9a:24:6a:ef:99:37:ac:ec:cf:51:a4:1f:94:
94:b5:8a:fc:37:c8:bb:0a:8b:08:86:d0:83:a5:a6:be:c7:13:
9b:d0:d8:c0:f6:df:da:be:21:10:82:04:7e:cd:68:97:9f:c1:
a2:4b:b6:e1:78:8c:e2:74:d5:92:07:b0:76:4a:e1:c0:0a:72:
24:89:37:6d:5f:42:88:6c:05:35:1b:ca:33:bf:15:9a:ce:69:
1a:b8:38:8e:72:76:a5:b3:bb:0d:5a:e9:da:d3:e7:cc:b8:f5:
73:9f:40:4d:e7:b5:b3:51:dc:6a:d0:1b:61:86:da:d2:75:d7:
58:79:f1:fd:26:5a:ad:73:ab:1e:31:ee:93:be:a3:5c:ca:33:
60:e8:16:a5:04:12:38:39:cb:0c:0e:d6:3c:6c:de:31:fe:4b:
b6:ad:22:b9:f6:03:f5:e4:62:76:81:eb:16:c0:e9:32:0a:85:
9e:88:76:b8:74:d3:ff:1c:f8:64:52:11:9e:39:13:fb:fc:7f:
29:58:e5:d0:88:71:f5:c7:2a:83:21:44:d6:91:b4:d2:8c:88:
ae:61:1a:f6:cf:21:40:d2:dd:4b:69:20:60:93:13:65:56:4a:
4c:3c:c5:5f:b6:2f:ce:77:c2:b4:dc:60:9d:15:e6:5c:11:c5:
ca:d6:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:55 2025 by rpki-client