Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: P+urjboxwDFu4k4aIDdsiP8TUHuo4G3jtBYgaIfjGQI=
Subject key identifier: 81:E0:0F:57:B9:84:1C:3F:E1:DD:AC:17:5E:22:36:F5:86:D2:F6:07
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019A730128DD6FB7F0ECBF8208C075C887D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:46 +0000
Manifest this update: Tue 11 Nov 2025 13:00:46 +0000
Manifest next update: Wed 12 Nov 2025 13:00:46 +0000
Files and hashes: 1: BDcEAKntpIejrVcoW-jQtFYDt4A.roa (hash: 9rJ6V8MVwpwUlBMeKLrrT4d005j4mZf3dlxw+gQ0CuE=)
2: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: N7fRchFgeg5730gHE7R8fO+uk54aH5thm7HS6gLQ5HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:28:dd:6f:b7:f0:ec:bf:82:08:c0:75:c8:87:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Nov 11 13:00:46 2025 GMT
Not After : Nov 12 13:00:46 2025 GMT
Subject: CN=81e00f57b9841c3fe1ddac175e2236f586d2f607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:e0:05:2a:85:6c:73:cd:4c:4e:22:8d:6a:
5b:0a:6f:3a:4a:f0:88:6e:eb:af:81:25:10:90:3d:
c0:29:fb:2b:fc:57:71:5b:96:c1:b0:e5:5d:c0:53:
6e:27:c1:9b:fd:cb:85:69:fd:dc:92:04:e3:86:d1:
69:b8:fe:99:e7:17:2f:08:10:dc:07:44:12:c6:75:
fe:65:cb:69:73:f3:aa:8d:72:d5:a8:1e:11:f0:e6:
eb:2f:26:e9:06:38:86:6c:e3:cf:1d:71:1d:e8:76:
88:54:13:e2:c9:07:fb:41:16:f7:c4:80:90:d8:b5:
b2:1a:22:85:8c:59:72:6a:b0:a4:aa:9e:1f:fc:ce:
03:e1:7b:8e:76:23:01:87:6e:ae:cc:d4:8f:af:cd:
4f:be:d3:c6:e5:63:9a:f3:b4:57:6d:5c:64:10:be:
4d:ea:43:77:ff:ad:e5:13:de:af:e0:ff:b5:cf:f6:
80:90:95:a1:23:26:a7:f0:2e:0a:07:10:fd:da:dc:
cc:50:9c:6f:79:1b:73:be:52:36:48:3f:86:f3:f6:
31:a8:4f:38:a8:27:d0:a7:bd:55:ac:14:cc:52:52:
0e:f0:97:53:5b:0c:b7:d3:c4:87:2e:48:eb:14:7e:
1f:e2:43:b6:7e:f6:25:b9:65:8d:01:5f:05:a1:73:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E0:0F:57:B9:84:1C:3F:E1:DD:AC:17:5E:22:36:F5:86:D2:F6:07
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fa:72:ba:be:b6:7f:ff:d6:63:c7:7e:30:8e:52:84:eb:11:
2c:77:b5:6e:84:11:73:11:c5:5e:2f:0a:78:7c:6a:16:73:21:
3d:76:c5:cb:5c:e7:af:e1:16:de:8c:b6:a4:83:f7:fe:ea:9a:
0b:b3:a1:f7:1f:93:71:40:42:b1:d0:60:eb:0e:15:9c:1e:19:
d5:30:38:de:2e:bc:22:92:ac:c0:6c:16:d7:8a:96:59:28:63:
2d:12:f7:2f:71:cf:46:f3:55:ba:9c:cf:41:33:14:6c:5b:02:
c0:24:33:01:bb:b3:62:6d:ab:bd:e2:0d:d2:b1:ae:45:38:7b:
79:47:ce:af:b1:af:f9:7b:ca:98:64:20:70:ca:d3:cb:88:be:
df:79:ba:e7:0f:a6:47:8c:be:bd:23:09:44:88:76:b4:b1:5c:
64:74:f0:3b:9c:16:48:7d:c7:2b:46:b9:c1:21:39:e7:36:0f:
8c:e7:b1:5f:26:68:f9:98:da:1b:c2:f9:c4:fb:94:25:41:16:
e0:aa:a4:fa:0f:ad:76:13:46:7b:ce:fc:57:e6:ad:81:1e:c4:
18:ac:91:f0:96:3f:61:51:48:15:9b:51:42:10:f7:1c:a2:79:
92:ad:bd:95:a2:fe:b0:fe:c7:be:ce:5f:aa:7f:9c:1f:03:ac:
8e:fc:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:20 2025 by rpki-client