Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: DJn1NbYOj4LXryluqEy8FAy7os6vLG1wqKaHR8Cb3NQ=
Subject key identifier: 49:25:69:D1:19:B9:32:BF:E5:78:5A:88:4C:8C:57:C7:38:C5:DE:CB
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01993492B517F5EB7368C004F8D06A07CC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 168F
Signing time: Wed 10 Sep 2025 17:00:53 +0000
Manifest this update: Wed 10 Sep 2025 17:00:53 +0000
Manifest next update: Thu 11 Sep 2025 17:00:53 +0000
Files and hashes: 1: M9YJnMZq-Qo4sKyFoXRkAaUtrDA.roa (hash: lb64jsKs0riSb1j7+rgbV5185uMxPtGDDu6H1Pf3T8s=)
2: P0fCccGAGT3P2tDw-rs5ORyPyrw.roa (hash: zsjstCOlxud3vr07JZ7SKJe39jYJRrodk6RlxTPhlQE=)
3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: pR8zgmjsQpLiJdagH1iNt4EGoRosc7cZPIbXtmLsMAI=)
4: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:b5:17:f5:eb:73:68:c0:04:f8:d0:6a:07:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Sep 10 17:00:53 2025 GMT
Not After : Sep 11 17:00:53 2025 GMT
Subject: CN=492569d119b932bfe5785a884c8c57c738c5decb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:a2:2c:08:27:8a:0d:fd:dd:c1:50:5d:40:
cd:b0:b3:94:4a:ab:e2:f5:07:85:62:91:8b:80:97:
1d:19:1a:c8:bc:1d:d9:89:2f:32:17:aa:4b:f0:6c:
2e:22:fd:a0:82:26:28:70:ff:cd:7c:9a:40:6a:91:
4f:04:06:f7:99:aa:15:e7:3f:d3:e7:6c:48:b9:05:
9c:31:5a:a6:c0:f8:f2:c5:75:d0:80:cf:d1:f0:06:
76:bf:ce:b1:31:01:30:b5:9c:11:fe:fc:55:d7:28:
f9:e7:2c:5e:cb:b8:27:3d:b2:c1:c9:0c:c4:77:53:
fc:60:8b:ff:29:85:0f:7a:e2:72:b3:21:da:65:f1:
86:c2:8c:2f:34:e4:90:fd:7a:3e:3f:5a:60:1c:38:
dc:48:c1:cf:40:77:4a:c4:04:2d:6d:cd:9b:d5:43:
28:b8:e3:93:fd:0e:af:81:1f:29:46:a9:c8:4f:74:
49:ba:7b:00:65:e3:85:e8:bf:e8:32:55:3b:0e:b1:
55:95:bd:8f:c1:25:b1:34:ff:47:5b:5d:dd:1b:2c:
85:52:36:26:b4:66:5c:3e:9d:b1:fb:cd:8c:11:9e:
dd:ae:8a:c4:4e:07:48:8d:bb:20:25:a1:3d:ee:81:
1c:2b:01:87:13:2d:c1:a3:e0:4a:fe:7a:0d:9e:31:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:69:D1:19:B9:32:BF:E5:78:5A:88:4C:8C:57:C7:38:C5:DE:CB
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:14:2e:e6:41:41:cb:62:ab:8e:32:69:f7:7c:27:2c:26:18:
21:be:10:40:b0:05:3b:30:c9:3e:37:ac:15:e0:72:41:55:ed:
ba:0f:53:68:a6:bd:d9:39:c0:2e:3e:43:18:1a:ac:ee:e0:22:
70:17:73:5a:f1:0d:59:19:6e:ac:7a:c2:0c:b4:11:c6:94:45:
00:6e:63:d9:fb:ca:c5:7a:62:81:8b:31:41:5e:c8:9b:de:d1:
ea:4d:dd:1a:a5:4f:10:75:f9:53:d1:cf:7d:9d:7c:03:e8:9a:
96:d8:0f:18:41:f6:e2:49:45:83:79:30:4f:7c:f1:82:8b:ea:
1c:f7:a1:62:42:a2:a2:fe:a8:02:41:00:72:af:af:07:e2:43:
6f:d1:1b:55:2a:f1:6d:1e:39:83:16:ff:fc:ec:6c:80:a6:09:
ca:20:c2:67:d3:08:a0:6d:64:e2:ca:f3:32:24:42:1e:9d:f8:
4a:0b:32:b5:01:61:b7:8e:36:97:0c:7f:4e:0b:7f:fc:6b:3c:
a9:d3:a1:6e:29:15:4b:2b:f1:32:61:33:82:10:10:4f:1b:b6:
0b:60:8e:62:5d:26:5e:f7:46:a5:c3:58:e5:f1:7b:27:c8:f3:
1d:20:16:44:60:52:a9:39:58:f6:ea:5c:fc:72:2d:a5:aa:3b:
13:45:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:34:32 2025 by rpki-client