Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: lo3zngiUEnmSQwQAX/OEBey5V2Qc/jBbOF649O0eWUU=
Subject key identifier: 1F:81:6B:5E:AF:8E:34:A2:A0:00:A3:F7:B7:F9:AC:A7:E1:DA:DD:50
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 01993424DE6887F155171E657110A4DA8F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 15:00:55 +0000
Manifest this update: Wed 10 Sep 2025 15:00:55 +0000
Manifest next update: Thu 11 Sep 2025 15:00:55 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: 61GbUp+TpHTHFO+eZeFu+HTyEZ9N03GKz+v9SqIpTz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:de:68:87:f1:55:17:1e:65:71:10:a4:da:8f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Sep 10 15:00:55 2025 GMT
Not After : Sep 11 15:00:55 2025 GMT
Subject: CN=1f816b5eaf8e34a2a000a3f7b7f9aca7e1dadd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:8c:ee:35:b1:91:0f:fc:31:ff:58:78:e9:
10:02:13:0f:29:dc:f4:1d:05:57:bf:99:a1:f2:93:
4b:ed:ef:d6:7a:2e:27:2e:cc:04:51:1b:09:79:d9:
26:42:87:c3:5c:ee:5d:91:cf:08:f2:57:ba:9a:cf:
f0:3f:2b:35:8a:69:92:7e:36:99:9f:01:c9:a0:7f:
a3:97:27:d3:c2:dd:aa:dc:9e:5f:df:7d:5c:c7:c5:
af:3e:bf:82:0b:56:e4:aa:69:71:26:39:9b:a6:0b:
d7:0a:e8:23:c9:03:df:d5:49:5e:51:4b:d1:1c:a8:
2b:4f:45:d0:38:2c:b6:05:41:f5:d0:9a:5a:96:18:
14:22:cb:16:c5:f2:c9:bf:85:47:a6:04:75:b2:cc:
cc:c0:d6:57:b3:bd:41:52:6b:db:41:37:d3:57:0c:
95:ff:e2:ce:e1:21:c7:0e:09:74:81:6c:a9:a2:69:
c2:1b:6a:1a:09:76:23:bd:a7:e0:bc:80:d0:f3:dc:
b6:bd:de:c7:c6:c5:3b:34:19:a2:5f:40:d3:2b:d3:
c3:d1:47:29:25:bf:9e:cb:52:81:75:7c:0f:e9:d6:
07:91:cb:c6:a5:fa:25:6e:92:8a:08:14:5b:8d:88:
20:c4:11:e8:17:3a:8d:48:45:ae:5d:99:74:79:14:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:6B:5E:AF:8E:34:A2:A0:00:A3:F7:B7:F9:AC:A7:E1:DA:DD:50
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6d:c1:51:fa:ca:74:7e:3f:ff:32:29:13:7e:ea:0c:20:92:
07:79:84:07:b8:25:1f:49:60:1d:b4:2c:ca:d2:9f:a6:ac:8c:
5d:ee:c0:8c:95:7b:6f:dd:ce:aa:4f:17:12:ed:76:59:9f:21:
74:ce:22:e0:75:1d:e6:62:23:72:f0:a8:8e:60:12:fc:a8:09:
ed:27:3f:62:32:8d:62:72:a9:93:f4:87:f5:29:64:e2:c9:d5:
c9:91:ba:c1:4e:84:d3:75:95:17:56:bc:8d:46:a7:50:d7:4d:
b2:1d:98:2d:07:4a:32:c8:be:69:a0:c9:41:5d:55:c3:fb:2a:
41:03:4e:64:d7:5d:5d:61:b4:bb:96:51:10:0e:bf:f9:d8:39:
de:ac:96:ba:53:ad:7b:d9:e1:93:20:04:db:33:5b:86:66:3b:
f3:ef:f7:61:d0:a3:8e:cb:ab:af:84:2c:19:3d:c0:26:d6:b3:
f8:f9:6d:54:84:c1:5e:48:aa:b8:17:91:8b:cf:19:e8:a6:1b:
43:4b:77:52:d8:78:46:75:ff:b8:7b:0f:ca:c9:9a:2a:e5:00:
a0:da:69:36:3b:23:a0:81:e9:89:9b:53:b8:95:4b:00:47:70:
af:f4:c6:6b:64:55:39:27:a7:f4:a5:7e:71:e8:ff:e1:c0:9c:
b3:1c:e7:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JN5oh/FVFx5lcRCk2o91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3
NmFhYTcwHhcNMjUwOTEwMTUwMDU1WhcNMjUwOTExMTUwMDU1WjAzMTEwLwYDVQQD
EygxZjgxNmI1ZWFmOGUzNGEyYTAwMGEzZjdiN2Y5YWNhN2UxZGFkZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMaM7jWxkQ/8Mf9YeOkQAhMPKdz0
HQVXv5mh8pNL7e/Wei4nLswEURsJedkmQofDXO5dkc8I8le6ms/wPys1immSfjaZ
nwHJoH+jlyfTwt2q3J5f331cx8WvPr+CC1bkqmlxJjmbpgvXCugjyQPf1UleUUvR
HKgrT0XQOCy2BUH10JpalhgUIssWxfLJv4VHpgR1sszMwNZXs71BUmvbQTfTVwyV
/+LO4SHHDgl0gWypomnCG2oaCXYjvafgvIDQ89y2vd7HxsU7NBmiX0DTK9PD0Ucp
Jb+ey1KBdXwP6dYHkcvGpfolbpKKCBRbjYggxBHoFzqNSEWuXZl0eRTM1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+Ba16vjjSioACj97f5rKfh2t1QMB8GA1UdIwQY
MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt
Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2
LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtW3BUfrK
dH4//zIpE37qDCCSB3mEB7glH0lgHbQsytKfpqyMXe7AjJV7b93Oqk8XEu12WZ8h
dM4i4HUd5mIjcvCojmAS/KgJ7Sc/YjKNYnKpk/SH9Slk4snVyZG6wU6E03WVF1a8
jUanUNdNsh2YLQdKMsi+aaDJQV1Vw/sqQQNOZNddXWG0u5ZREA6/+dg53qyWulOt
e9nhkyAE2zNbhmY78+/3YdCjjsurr4QsGT3AJtaz+PltVITBXkiquBeRi88Z6KYb
Q0t3Uth4RnX/uHsPysmaKuUAoNppNjsjoIHpiZtTuJVLAEdwr/TGa2RVOSen9KV+
cej/4cCcsxznow==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:12:37 2025 by rpki-client