Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: WZg0U/MnTrqqPTKGsF47L90A+11mznp56BqLrUbk1hQ=
Subject key identifier: F3:D9:9E:98:3F:B4:0A:2D:19:F5:A2:5D:B7:E9:47:08:1F:F4:06:63
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 01992C6B447255D1DA306C406071EE6D2B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 036A
Signing time: Tue 09 Sep 2025 03:00:51 +0000
Manifest this update: Tue 09 Sep 2025 03:00:51 +0000
Manifest next update: Wed 10 Sep 2025 03:00:51 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: HFKAyrW5v+Siy0Z8mox9qZwZdd0ohLNvbiX76C3VxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:44:72:55:d1:da:30:6c:40:60:71:ee:6d:2b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Sep 9 03:00:51 2025 GMT
Not After : Sep 10 03:00:51 2025 GMT
Subject: CN=f3d99e983fb40a2d19f5a25db7e947081ff40663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:4b:53:0c:c3:2d:7c:06:4d:67:6d:70:45:
bf:67:f0:52:89:97:cd:d4:7c:42:0f:d9:58:dc:94:
2b:5f:2f:7e:81:1c:1c:9d:4f:ee:20:38:53:ef:14:
d7:d0:2e:90:f3:4a:c9:58:f5:83:7b:07:fa:d4:7c:
75:d0:28:cd:b0:98:a7:79:b6:59:f9:a0:87:04:eb:
39:e3:c6:95:1c:65:90:78:c4:f6:47:66:56:bb:b3:
b7:e0:bd:b7:c5:50:f9:6c:57:6c:9b:5a:4f:f2:32:
a5:92:2c:8d:b2:e7:7f:71:fd:3a:e2:93:80:67:d3:
26:40:2b:d2:12:c5:1a:b4:e6:0d:c6:95:aa:05:8e:
91:d5:44:14:2f:5e:90:23:e0:b5:d6:fb:20:4a:82:
cc:46:b1:f3:2b:fe:1c:d1:31:e4:4b:d6:77:e3:e7:
97:b9:a2:20:3a:16:df:31:ec:50:4e:26:7d:0e:26:
be:fe:db:76:dd:7b:2b:ff:c7:8f:32:31:ca:79:fe:
1b:2a:2a:3a:e4:31:47:0c:dc:6a:7f:8a:33:0a:5a:
3a:f9:6f:0a:f5:18:27:46:c5:a7:79:90:10:3f:48:
a1:04:7d:e6:8c:8e:1e:68:2a:ae:7d:60:8e:e1:2d:
be:17:40:fd:d0:bd:fd:39:46:24:11:d0:b5:91:2b:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D9:9E:98:3F:B4:0A:2D:19:F5:A2:5D:B7:E9:47:08:1F:F4:06:63
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:60:bd:2e:80:62:89:81:0f:f5:98:b0:c8:1e:0d:b7:a3:
dc:9d:67:06:b5:75:12:d2:8d:90:95:fc:43:7b:c4:29:c8:88:
8c:f4:ad:d3:5c:01:ae:5d:28:5b:aa:d7:db:ae:96:86:b6:bc:
7e:2a:4f:e5:e5:41:95:77:03:c6:13:64:07:64:70:3e:3a:23:
6e:f4:e9:77:b4:5b:cc:e2:7f:7a:7b:cd:77:f6:54:84:7e:30:
2a:a1:85:04:4f:50:10:03:54:e0:79:59:68:af:43:4d:e5:8d:
56:00:42:34:0d:99:54:b8:0f:9d:92:3d:50:8b:c9:28:89:ed:
96:80:27:5f:55:75:8b:49:0b:97:1e:bf:b2:68:39:ff:9f:d2:
8f:60:16:d1:82:60:64:4b:aa:8e:59:22:f8:ec:c0:71:9e:98:
95:92:fc:86:18:9c:a2:ed:9c:26:59:8f:52:2f:47:46:30:6b:
73:43:4c:7a:7c:6c:87:f7:48:90:5c:70:a4:2f:ab:61:2f:2c:
8f:ac:e5:87:48:a8:4b:c3:57:dd:48:87:3d:0b:ce:9b:1b:96:
e1:c0:cf:28:44:26:f9:61:48:27:17:37:67:b6:99:02:e5:2a:
3d:f4:be:71:25:9f:6d:02:6f:cc:8f:80:e9:0e:0b:9f:69:62:
4e:80:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:43:31 2025 by rpki-client