Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: ZBfGLoN/fnOZJ+GqqXJdr1JfvO/pY2JGs6t7/sFu6kU=
Subject key identifier: 4F:CD:10:89:98:0E:F9:87:1F:D2:CE:C0:B7:27:8E:B5:6D:6A:7E:DC
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019935018CFE9CF61546CFB40D8D78C504EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 19:01:58 +0000
Manifest this update: Wed 10 Sep 2025 19:01:58 +0000
Manifest next update: Thu 11 Sep 2025 19:01:58 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: 8ICc9G3oqSKKInoJAfmze435H/Vji5dxcEqC6BhUKFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:8c:fe:9c:f6:15:46:cf:b4:0d:8d:78:c5:04:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Sep 10 19:01:58 2025 GMT
Not After : Sep 11 19:01:58 2025 GMT
Subject: CN=4fcd1089980ef9871fd2cec0b7278eb56d6a7edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:d0:49:a6:3d:a4:38:c2:b8:ec:47:8e:67:
5d:11:27:ca:16:d9:2e:3a:79:01:18:ed:dc:0c:d5:
9f:fa:a7:68:35:19:95:25:22:36:f9:ed:00:43:6f:
47:85:bc:64:e8:c1:db:39:c6:3e:d7:d8:40:48:e8:
4f:97:74:2b:f1:ff:c6:6e:8e:a3:a2:67:5d:bc:dc:
ff:91:91:ff:cc:33:56:60:7c:7b:cc:9a:32:ab:70:
10:c9:31:3b:27:23:a0:2d:ad:3e:26:41:a1:2e:fa:
fa:01:7e:b7:a6:7b:f1:4e:80:a6:fd:f9:41:53:e3:
e4:c7:18:9a:59:c9:da:6c:ad:2a:55:ad:ec:00:9e:
ba:07:9a:7a:9e:c0:15:0f:1e:43:7f:86:21:52:a4:
12:ca:39:0a:4d:22:b5:75:c4:7f:11:fd:2f:68:cb:
41:1a:6b:09:b5:66:32:b9:bf:41:08:c1:e2:32:81:
07:55:8d:fd:3d:e4:49:ef:ed:13:43:ff:48:9c:45:
ea:e5:87:a2:11:6e:7e:9a:34:0f:1f:a4:e7:63:bf:
8b:d7:73:0e:fc:32:71:6f:46:77:4e:d7:fa:5a:14:
1d:24:70:74:62:cc:41:ee:b8:ff:3b:7a:b0:4c:c7:
26:cb:53:6b:13:94:c4:b3:4d:b3:72:53:99:be:d7:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:10:89:98:0E:F9:87:1F:D2:CE:C0:B7:27:8E:B5:6D:6A:7E:DC
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0d:24:c1:09:e6:2f:2f:14:77:ac:75:fd:56:96:82:5e:5d:
1f:9c:17:73:fe:ce:be:35:12:a1:d8:17:c7:36:f8:1f:ff:54:
2e:06:cc:9b:5c:2a:37:d5:34:6d:41:38:70:19:db:f1:ec:94:
e2:34:48:cd:a9:6f:04:5b:51:8a:20:ab:50:b4:ef:7f:3a:0a:
c4:36:d5:2e:15:1d:43:34:ac:19:3b:29:3a:29:69:dd:63:14:
45:d9:70:d7:29:b2:9e:16:66:83:c5:f1:b8:30:db:86:54:ae:
69:91:65:7a:74:17:0a:92:1b:63:44:38:7f:27:ae:b8:40:d6:
bd:27:b5:04:2e:37:ce:5a:d1:e1:77:f3:27:bd:87:41:44:f3:
71:5f:b8:fe:10:40:f2:8c:b8:6a:e6:97:09:ce:cb:f3:e4:2d:
ae:b9:ce:eb:5b:a7:a8:22:8e:b3:d8:86:23:cb:80:b1:1a:bb:
26:69:41:f2:a0:1e:9e:fd:1f:e6:ed:c1:75:68:d6:7a:1d:da:
a1:5f:46:21:1a:85:93:47:05:50:9e:07:27:21:0c:0c:1b:8e:
7a:74:00:c6:ff:28:81:4e:64:e4:3c:f5:39:fb:c8:e5:7c:0f:
47:32:6c:d6:be:72:90:ce:05:6e:dd:56:6a:07:65:d8:56:5d:
0b:85:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:08:31 2025 by rpki-client