Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: Tr6dSEdTO2n1uHmFDymqvUhDs/Ma2hgTrK12RJ93Ge0=
Subject key identifier: 91:67:76:3E:EA:74:AB:AC:4E:C2:6D:8A:45:B4:55:9A:6A:43:7F:4A
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 019A01B4F62522F5E6E69E3C553732939E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 1167
Signing time: Mon 20 Oct 2025 13:00:27 +0000
Manifest this update: Mon 20 Oct 2025 13:00:27 +0000
Manifest next update: Tue 21 Oct 2025 13:00:27 +0000
Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: 0PDNV2PAkPnQq66DaZDt6/gHDgVzxZ7gzWkuK6gLSzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:f6:25:22:f5:e6:e6:9e:3c:55:37:32:93:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Oct 20 13:00:27 2025 GMT
Not After : Oct 21 13:00:27 2025 GMT
Subject: CN=9167763eea74abac4ec26d8a45b4559a6a437f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:80:dd:39:60:5f:66:0b:58:ab:8a:60:33:
37:aa:b3:13:81:01:6b:cc:7d:79:91:6f:01:60:cf:
e1:92:31:6c:e8:94:c8:fb:76:77:26:c2:2b:ea:c8:
4a:74:34:c8:10:03:22:18:3d:9a:50:22:b3:36:25:
c5:85:b6:f0:e2:10:f3:3b:45:7d:e1:8d:2c:fe:60:
35:cb:2d:a6:ff:c9:02:bf:3c:d4:3a:c7:34:de:7b:
7d:06:e4:e2:7c:e8:68:a9:0c:8a:87:6f:cf:4b:9b:
46:74:fe:23:04:ed:b4:a9:da:c9:f2:1a:6a:1c:22:
89:da:b0:fa:e8:fe:e0:28:0c:16:bc:dd:a9:98:71:
4e:19:ec:31:c6:f5:94:f0:12:41:c8:dc:87:31:fa:
e4:c3:6b:f6:6e:e3:db:f0:e3:3d:64:8a:0c:bf:f3:
6a:4a:6d:8e:4c:ac:9f:96:12:8f:15:80:36:de:f8:
c8:ec:ad:4d:b6:5e:f7:bf:05:f1:51:1f:fb:6c:9c:
cc:26:61:0f:20:c6:5a:19:46:fa:31:b5:c1:11:06:
c7:ef:6a:03:2d:9b:47:cf:21:d0:af:a3:ad:1f:59:
9d:72:cd:9d:17:96:ee:8e:7f:60:1e:be:19:56:44:
a6:cd:19:33:21:d5:e1:4f:b3:99:ad:38:b1:3d:60:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:76:3E:EA:74:AB:AC:4E:C2:6D:8A:45:B4:55:9A:6A:43:7F:4A
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ca:ca:f4:ba:7d:a1:57:08:8a:4d:54:3e:73:2f:ad:5c:48:
c0:f5:01:6b:d0:72:07:da:5d:44:0a:60:5b:12:4a:46:42:39:
21:48:3d:b4:0d:4d:dd:e7:c4:2a:06:f2:84:7a:00:ab:b6:6d:
0d:f7:2d:cf:e3:0d:cf:8d:e0:b4:b7:5d:33:11:eb:81:1e:fc:
58:7c:db:d6:2a:d9:24:19:8e:47:8b:39:02:f5:0f:03:7e:3b:
bb:22:3d:1a:cb:c1:5d:89:39:cd:0c:f1:6f:5a:80:b5:7b:b9:
9c:5d:0c:47:97:b0:2c:fc:9a:05:94:0e:60:54:83:b9:83:a4:
b1:98:04:34:5a:38:7d:a7:d7:1c:52:cf:a6:15:4e:f6:8e:b9:
74:7f:be:bc:92:66:41:b5:eb:72:ce:c2:cb:fc:75:af:ca:8c:
2e:cb:5e:a4:7e:b8:19:9c:e0:49:15:71:19:f5:80:70:03:59:
2d:60:7c:c7:5f:e2:9f:5a:f1:d9:bf:fd:a7:f8:35:40:59:0d:
96:70:c1:16:b1:4e:d8:70:28:46:28:08:b6:71:ba:1e:cd:5c:
73:23:fc:f4:d1:92:39:62:e0:21:23:b3:95:0e:0a:60:5d:d5:
87:7d:9f:aa:fd:30:e6:a8:ee:e9:3f:2d:8a:f1:fc:41:3f:dc:
7b:5e:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:14 2025 by rpki-client