Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: Pt2/VbsBaUyLpIVEfN0qn088A7ckrSB3z4WwyjOLsbw=
Subject key identifier: EC:3A:8F:46:3C:00:83:15:12:CB:2D:AF:43:51:77:17:D9:5C:66:9A
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 0198D697EC21BE7F9EEE56E2FD4694933F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: xG6qpk9w9yeiwMnwI1i5rLQ6r4W7NJytVvrnF4CrqK0=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ec:21:be:7f:9e:ee:56:e2:fd:46:94:93:3f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=ec3a8f463c00831512cb2daf43517717d95c669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:ec:87:b9:75:d4:58:50:0d:4f:84:c5:92:
d1:8b:84:85:9d:a3:25:b4:26:94:bd:18:f9:8d:ee:
54:85:a8:e4:4c:59:d0:51:b3:ff:28:95:fe:62:da:
e9:69:21:9f:74:90:63:03:b9:a7:d8:b6:0d:c5:a6:
df:46:b4:0a:32:0c:f1:6d:09:5e:b5:a4:5f:b7:74:
9e:be:cf:e2:1a:5b:cf:4b:cc:26:fe:6f:67:09:ef:
68:63:e7:14:0c:86:1c:0c:5a:f0:15:50:73:77:88:
7e:85:8c:2a:75:f7:9d:98:e8:83:8e:61:98:0a:98:
cc:57:0b:5e:c9:6a:56:51:2b:3d:73:36:49:c0:0a:
93:1c:4f:00:01:cb:98:e5:8c:cc:87:33:f5:7a:47:
fb:29:10:34:6c:bf:d8:47:01:0e:ff:45:d0:28:06:
3f:0d:df:81:a4:72:48:4a:fd:87:8f:b3:06:ee:ac:
6f:d3:25:26:00:88:f3:04:c8:ae:38:a9:56:82:aa:
fa:e5:41:5f:27:d3:40:32:49:3c:83:3b:7e:2a:1b:
2e:da:c8:96:e8:64:8e:50:cd:da:76:99:dd:e8:5b:
d4:e6:46:1b:82:f2:f6:49:10:06:9c:7b:dd:1f:d4:
e7:ca:07:f7:f8:ef:93:2c:3f:ce:68:5e:81:88:f3:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:8F:46:3C:00:83:15:12:CB:2D:AF:43:51:77:17:D9:5C:66:9A
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cb:3c:fc:40:63:e0:55:a5:e4:1d:a2:29:5e:b6:79:4e:04:
44:73:df:64:75:ed:99:2f:de:fc:7f:60:04:55:ee:66:5e:cd:
c1:ea:1c:fd:a8:76:51:55:dc:a4:f9:17:8f:3e:30:2b:1a:75:
37:bb:f9:65:ea:9e:94:f6:d0:02:9e:b3:f5:22:67:07:20:a3:
87:b2:db:ad:a6:1f:1a:9f:50:05:39:27:0c:35:84:c6:6b:1a:
0d:78:c3:03:79:b2:4e:12:f9:bb:5f:0a:2b:0f:bc:af:48:95:
fc:f4:d5:a2:37:3b:78:9e:a7:da:26:dd:57:b3:3b:0c:88:f9:
c3:55:02:a2:f7:a2:de:58:31:81:60:73:ff:66:48:4a:2c:e4:
96:2c:44:6e:97:ac:14:ac:07:58:d7:89:4c:a3:12:9a:78:17:
77:9f:5a:99:5f:8d:7a:c9:fe:1b:91:a0:65:cc:fa:95:54:d9:
4a:fc:9c:78:43:ac:5c:68:42:ea:2e:0d:d0:d2:53:d7:8a:de:
a6:05:a1:bb:3a:55:80:75:53:32:36:15:48:7f:bb:84:76:e1:
2f:9a:36:3d:6a:39:bf:45:08:dc:31:99:20:22:aa:b1:5b:85:
71:c0:96:97:1d:7c:73:e4:6c:ba:1e:e9:68:f6:51:22:ef:30:
48:6d:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:16:14 2025 by rpki-client