Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: wb/7SKlUkl7DtXZqGLZCBSbze5T1HnHTWVXMnrk6kjY=
Subject key identifier: 6C:AC:05:28:AB:27:92:E9:60:52:8D:AF:BA:5E:0C:0F:FE:0D:6C:10
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 019938DF53F314790EB40EEB2EA303936D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 0F1B
Signing time: Thu 11 Sep 2025 13:03:04 +0000
Manifest this update: Thu 11 Sep 2025 13:03:04 +0000
Manifest next update: Fri 12 Sep 2025 13:03:04 +0000
Files and hashes: 1: AoPTcwy6H2m6XsU7z7Y2AN7ROE0.roa (hash: EkcAF/FP1ByxQSttbvF051kXzqctUYj/EMjpBXkG1v8=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: AIZ9uSELPqnPKwT9LCCz0oCEyfc2US/EnfKudYehkoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:53:f3:14:79:0e:b4:0e:eb:2e:a3:03:93:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Sep 11 13:03:04 2025 GMT
Not After : Sep 12 13:03:04 2025 GMT
Subject: CN=6cac0528ab2792e960528dafba5e0c0ffe0d6c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:aa:b7:c1:f4:cf:32:93:4c:08:5f:73:fd:
3a:5b:f1:11:19:a9:f8:89:09:52:f5:5e:08:55:9d:
ee:54:7a:03:59:ac:f8:0a:eb:62:ea:29:9e:29:52:
a7:dd:7e:6c:b0:7a:4c:91:47:b0:01:e6:66:8c:38:
c6:47:51:5b:5f:a5:2a:e5:7f:55:49:27:f0:74:32:
ba:49:69:d8:a1:a9:56:ba:41:54:fd:e8:45:25:02:
14:2a:1c:c8:45:58:47:91:f6:fb:72:5f:51:03:f9:
7c:d7:77:3b:6f:34:68:f8:77:19:16:94:6f:55:29:
0e:2d:07:b9:e3:7f:0c:78:ff:26:9a:27:90:03:e1:
1b:21:b6:70:e6:20:43:13:31:ae:1d:a2:bc:64:58:
24:b0:4f:07:e2:bb:ba:af:90:86:be:f6:6d:3e:c3:
e0:d3:92:2a:3b:9a:74:e6:9d:6d:72:d2:96:fe:c5:
7f:18:07:9a:ec:93:b9:1e:8b:3d:9b:02:93:10:ed:
7e:e3:c0:44:15:ca:7f:df:d8:92:cc:8c:cb:d0:73:
31:79:e6:02:c3:e8:d0:fb:9d:e2:02:16:88:49:95:
16:d2:fc:63:e5:a7:e5:c6:84:bc:77:02:dc:b5:fb:
4d:c7:2f:18:d3:2a:99:c4:83:93:27:60:1b:75:e2:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:05:28:AB:27:92:E9:60:52:8D:AF:BA:5E:0C:0F:FE:0D:6C:10
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:17:a3:69:3a:8b:8d:f6:88:42:c7:91:d7:17:95:cf:d9:4f:
5f:2b:e5:0d:58:b5:88:03:7e:fb:20:8a:88:72:24:be:e2:8e:
b1:a2:f5:c9:c8:43:7f:f9:56:aa:4f:b2:09:02:11:78:5a:55:
5f:71:49:08:34:31:5c:04:73:f4:33:06:2c:ee:44:9d:36:41:
52:e3:84:e2:3f:39:00:ae:f0:48:3f:4a:ce:1d:df:a1:35:80:
c1:7f:68:ff:dd:b3:b3:e1:fd:a6:81:e4:05:10:58:26:43:91:
d1:d0:e8:e5:85:1f:8b:95:f8:a8:fb:46:a9:5c:94:99:97:e4:
a7:fd:37:1d:7e:d6:74:16:fc:f1:0a:e3:73:8e:1f:98:4a:c2:
2c:6e:f7:72:0d:b6:e6:bd:db:67:3d:a4:49:49:d0:27:e9:5d:
8f:92:7f:86:6a:cd:44:63:3d:70:21:ba:ea:b3:26:8a:9c:55:
95:5e:92:46:d0:a7:d4:90:8b:47:97:b8:94:e8:34:10:73:61:
5d:bf:b3:bc:62:c7:79:b8:06:e2:fb:25:34:8c:ad:6e:5d:31:
2c:da:b1:8e:e9:42:36:e6:29:d8:30:5b:c0:df:b3:06:85:d4:
c8:9b:d2:39:9e:0a:37:8e:04:3c:41:37:15:ce:c1:1b:7a:8e:
21:9b:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:57:54 2025 by rpki-client