Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: Um+KV1a7PMHmM8POlQ8ug0UZjWLVY5xvi8w+roh6Dyk=
Subject key identifier: 17:BC:71:54:C7:CB:C7:AE:09:9D:D6:C0:ED:AD:20:BB:57:81:21:83
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 019A1271EB199EBDD4C2436DE9A9C53589E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 1681
Signing time: Thu 23 Oct 2025 19:00:46 +0000
Manifest this update: Thu 23 Oct 2025 19:00:46 +0000
Manifest next update: Fri 24 Oct 2025 19:00:46 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: nh5thP8YwPAG2qgqBm11nQnNCRmRJ5zRx7lSOtJFSAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:71:eb:19:9e:bd:d4:c2:43:6d:e9:a9:c5:35:89:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Oct 23 19:00:46 2025 GMT
Not After : Oct 24 19:00:46 2025 GMT
Subject: CN=17bc7154c7cbc7ae099dd6c0edad20bb57812183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:7d:b9:69:51:c8:dc:37:c3:21:0a:0b:a5:
e9:eb:21:0c:30:ee:a5:bb:a2:db:18:19:64:7c:30:
2c:ce:48:35:13:ad:b6:6f:8b:f5:d2:29:20:d8:ac:
75:4e:7b:d2:c6:01:b4:cf:78:6f:e7:90:5c:68:bb:
4a:e8:91:7b:d0:ec:38:12:7e:a6:6f:93:55:3c:41:
cd:2f:0e:44:40:7b:a1:88:29:65:f9:fe:01:f0:33:
7e:e8:f4:09:c7:0d:51:9e:09:d8:12:f9:02:c6:a3:
35:6f:4a:4b:fe:13:19:d4:b4:d9:da:07:a8:e9:27:
27:2b:4c:45:0f:c9:87:4d:30:6f:75:16:d8:a0:0c:
e3:a4:8b:e1:af:3c:b8:a6:4d:0f:3a:de:f8:04:f2:
fa:87:50:de:f0:9b:a1:c2:b9:d5:b9:17:ad:f6:94:
f0:44:45:3d:02:56:cd:22:ac:c2:38:6b:7d:dc:97:
fe:4c:92:fd:48:4e:6d:2b:c1:5b:18:99:31:9e:ae:
e3:83:a3:3a:ba:76:a8:d4:df:91:b7:0d:7c:5a:38:
63:b9:cc:0d:cb:ec:1f:d6:d6:ef:39:aa:43:58:be:
68:8d:25:a7:f0:8c:1d:8e:40:2a:89:04:51:e0:fa:
e2:15:5a:7c:cd:2c:0a:a0:4c:6f:cc:39:9c:e1:fd:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:71:54:C7:CB:C7:AE:09:9D:D6:C0:ED:AD:20:BB:57:81:21:83
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e7:ef:56:cb:14:86:c5:cf:c6:d4:76:36:92:4b:b0:bf:80:
ee:39:9e:46:5c:d9:33:91:77:03:e6:a9:df:b2:95:b7:cc:ae:
98:fd:98:aa:50:cc:d7:55:1e:32:cf:70:0c:65:b1:47:44:3f:
84:84:55:f1:29:33:a8:de:1e:bb:65:39:c0:d3:38:b2:87:c3:
c2:c9:b4:ba:df:50:87:88:75:8e:5d:2f:bd:e6:a5:20:67:5c:
57:0a:da:0f:1a:ba:15:85:26:2d:f5:68:68:5f:a8:02:60:28:
50:be:da:b8:b4:40:dc:39:78:08:00:db:d9:b6:31:39:b4:bf:
62:3a:6c:fe:47:eb:f0:c5:4e:bf:63:73:23:5b:a7:83:44:72:
3d:e1:b8:8d:ef:91:f1:18:61:5b:9b:1b:6f:a0:b9:3e:b7:c5:
20:95:3e:22:c3:94:6f:98:bb:f4:15:ed:56:d5:8a:ef:fb:50:
06:cf:3a:0d:85:ed:c7:d4:3c:f9:32:49:65:0f:8e:97:5f:60:
f8:2f:de:3e:7b:85:78:29:1d:a5:f7:78:43:69:a0:8c:3d:46:
cc:d6:b0:e5:62:af:8b:af:b7:f7:19:ad:21:14:41:60:31:f7:
ab:fa:2a:c1:74:62:8b:f6:18:c6:c4:8f:e6:7e:cd:74:d5:c8:
9a:9f:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 03:21:55 2025 by rpki-client