Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: 5DjIHGEXa1voMMobPUkJlIqAO1AKjJuQ42v875dzYWs=
Subject key identifier: 57:7F:BF:E8:8F:C1:DC:EF:7F:C9:31:8B:EE:9E:C5:F1:7C:17:FA:8B
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 01992B5A843F86AE1D1A60FB6FF090C3D4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 167E
Signing time: Mon 08 Sep 2025 22:02:56 +0000
Manifest this update: Mon 08 Sep 2025 22:02:56 +0000
Manifest next update: Tue 09 Sep 2025 22:02:56 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: I7sOFM2EBiXDWK5iLpcF+dFaIMBeXtztPoRI738eGYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:5a:84:3f:86:ae:1d:1a:60:fb:6f:f0:90:c3:d4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Sep 8 22:02:56 2025 GMT
Not After : Sep 9 22:02:56 2025 GMT
Subject: CN=577fbfe88fc1dcef7fc9318bee9ec5f17c17fa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:5a:6b:3a:56:14:c3:a9:c3:cb:09:be:02:
25:1b:64:8f:18:fd:51:20:ec:e3:35:f6:6f:cb:76:
cb:57:08:1d:d6:58:18:15:ff:7d:c9:b9:c8:ce:0b:
4c:60:e4:c9:47:42:92:c5:d7:41:28:03:2c:b8:32:
e4:05:d4:0f:f4:c4:18:ee:0b:8f:41:6d:46:4f:cb:
c0:5c:9f:2d:6e:3b:15:5b:23:95:d4:1b:4d:42:7f:
e1:1e:c9:6a:3e:38:c2:89:73:32:77:bc:c8:c0:c3:
bb:77:8f:c4:a5:b1:cd:91:b4:f8:88:a0:08:d4:74:
27:4f:ed:99:50:82:7f:7b:2f:2a:8a:20:d3:7e:36:
1f:47:82:88:c6:b0:90:05:6f:ba:10:32:8e:45:9f:
3f:e4:72:8c:08:ea:06:c5:49:21:ea:8f:c9:e8:c1:
2e:e0:f6:85:ce:16:41:3c:b3:c0:c1:80:78:f1:be:
d7:69:1f:9c:9e:c0:20:17:64:ba:5c:d3:a1:28:4f:
93:19:ee:e8:e5:80:11:87:1e:70:af:2a:2d:0f:03:
0e:c9:b7:2e:f2:e0:61:ca:ad:7d:4b:a7:de:ec:b2:
00:b6:ce:6b:35:64:ed:69:5e:45:f7:59:d3:b6:45:
f3:14:17:1a:c9:2d:c4:94:0c:90:85:73:3d:f3:05:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:BF:E8:8F:C1:DC:EF:7F:C9:31:8B:EE:9E:C5:F1:7C:17:FA:8B
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:07:74:49:75:d2:8d:5a:19:d8:fb:96:e0:89:38:05:db:43:
fe:79:a7:ff:d0:21:99:71:fa:7e:18:84:6b:03:13:21:a4:1c:
ae:50:c1:35:54:a1:97:30:f4:a0:d7:42:0d:6f:92:35:6b:02:
5b:d2:22:91:c7:49:d7:f8:61:b9:7a:7b:17:00:41:7c:72:68:
77:31:74:8c:3b:84:c9:44:69:86:0f:1e:32:ae:07:e0:4d:bc:
6b:bc:f0:ef:23:8e:61:a2:36:47:6a:f6:f7:86:26:2a:0e:62:
9c:96:62:49:b2:8d:21:86:ca:08:c7:58:c5:a9:95:8e:4b:b9:
b0:f7:f4:33:a3:99:5c:b2:3c:39:7b:20:ad:22:a4:cc:d6:92:
8f:b6:e8:ec:a5:07:ff:35:96:f1:15:bf:9c:7c:d2:87:98:71:
ce:5a:a9:9b:1f:30:b5:21:0f:c3:50:bb:d0:c4:c5:5f:47:cc:
41:09:c8:f9:a3:da:ed:fa:86:04:1c:a1:96:f4:7a:c0:cc:d8:
19:02:d5:7e:f0:5a:fa:d1:cc:28:0d:33:ad:7d:ef:a6:ed:25:
8c:d5:9f:eb:83:08:b0:62:2b:dc:78:c1:c4:b2:77:57:79:ec:
77:0b:b8:a1:ff:53:76:95:3e:23:ad:e7:2e:b8:9f:58:3d:9d:
88:34:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:05:54 2025 by rpki-client