Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: 5yhIP5A9LcjdVQrnQ6dtYHA2pAgf+KSH3TzEeYoYboE=
Subject key identifier: 15:0E:2D:E6:94:6D:A7:39:EA:D2:42:78:F0:9B:1A:5C:D3:30:AC:1A
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 019A228AD70BA29373CE7C910DD56EC9C330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 0F94
Signing time: Sun 26 Oct 2025 22:01:55 +0000
Manifest this update: Sun 26 Oct 2025 22:01:55 +0000
Manifest next update: Mon 27 Oct 2025 22:01:55 +0000
Files and hashes: 1: AoPTcwy6H2m6XsU7z7Y2AN7ROE0.roa (hash: EkcAF/FP1ByxQSttbvF051kXzqctUYj/EMjpBXkG1v8=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: yEHJgllDCtBd7bA1uKFXEsjH9xZoDQ0AtEgrViDTDlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:d7:0b:a2:93:73:ce:7c:91:0d:d5:6e:c9:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Oct 26 22:01:55 2025 GMT
Not After : Oct 27 22:01:55 2025 GMT
Subject: CN=150e2de6946da739ead24278f09b1a5cd330ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:05:97:4a:55:89:00:cc:c0:68:66:0a:eb:
f9:a5:e9:f4:02:9e:a1:49:0c:14:81:67:d5:a4:4d:
b8:a3:18:94:ed:1f:f3:ee:ac:c7:8d:a4:73:76:23:
cf:f3:56:e7:a6:13:0e:57:a4:04:65:3b:8d:84:71:
0a:4a:d0:0d:23:eb:39:b1:b7:32:b8:b9:d2:f5:88:
fd:df:5e:e5:80:e5:11:87:8a:0c:54:18:67:7a:54:
18:ab:b7:8b:7a:c2:5e:dd:a3:68:86:82:49:97:fc:
04:62:a3:85:4a:27:35:49:38:5c:90:3a:3b:2b:e4:
26:8a:60:7d:cc:97:39:b7:5e:52:f4:ec:0d:b3:32:
e0:0e:71:58:8d:51:7d:a8:14:3f:0f:2a:07:a4:e0:
75:06:0e:96:fa:35:b1:94:1c:3d:2e:2c:0f:bf:cc:
48:9d:ef:81:e4:3e:40:b2:43:00:5a:d2:93:9b:bd:
fe:4a:d8:57:45:08:a8:6f:0b:8c:90:dd:bd:81:4f:
f7:3a:62:87:30:d8:ca:b2:57:0e:c7:00:c0:93:29:
25:ec:b1:fb:90:c7:5a:af:40:b0:d8:9d:85:81:aa:
97:71:74:5e:26:91:9d:4b:97:3f:a0:bb:8f:29:b3:
f9:02:62:a2:b9:76:c1:bf:74:50:09:2a:31:ed:e7:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:2D:E6:94:6D:A7:39:EA:D2:42:78:F0:9B:1A:5C:D3:30:AC:1A
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:00:42:6d:03:f6:1a:02:38:98:10:e3:9d:6c:4e:14:27:63:
ab:91:7d:62:35:eb:59:95:ac:ca:cb:2a:8a:1e:3a:b5:52:da:
10:ca:95:03:80:ed:a0:95:d2:b1:f8:0c:fe:8c:2e:aa:ea:c9:
53:a1:3d:f9:f0:c4:f6:17:c9:8c:34:13:d8:05:f6:67:58:56:
a9:56:68:e6:5f:73:a2:74:18:0c:25:71:60:4b:2c:19:20:92:
85:68:46:30:61:3e:2b:7c:9d:f6:08:e5:fc:22:b2:36:a4:28:
a1:3a:11:2a:bd:89:ed:ae:d7:2d:5c:3c:4d:2c:be:c9:a9:23:
1d:8d:02:42:38:a4:c2:b0:83:71:8b:9f:25:73:c3:68:a5:62:
72:c7:26:9b:d9:53:8f:86:49:d1:d8:a3:cd:e5:c4:dd:d7:c7:
a0:6e:2a:8e:3d:99:ed:88:39:31:ca:96:7a:20:ed:c8:5d:da:
01:98:81:17:1f:be:e8:2d:87:4d:11:09:f3:9c:39:bb:2a:83:
63:f5:f4:ee:67:8a:d2:de:5d:e4:8f:d7:17:92:4c:0e:9e:d6:
cd:1b:9a:02:8e:ee:0d:48:07:c0:f8:04:e6:23:03:ee:45:d3:
f7:0c:8f:23:aa:24:d4:72:bf:e8:71:c9:1f:cb:6a:4f:48:df:
fd:4b:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:27 2025 by rpki-client