Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: dmcD5Pyplw4tMmmtCzE8oivi1hcS0QpRH306SPTsb3g=
Subject key identifier: 30:71:5E:D4:A5:88:EA:10:F2:43:50:31:5E:EF:F9:01:30:4D:7E:8B
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 0198D5BB80023F60F2A9DB6A783B47191C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0836
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: ltl8m6Vad8kI2CC3Tgk76VQTb41AkzemNWBWTVh5g6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:80:02:3f:60:f2:a9:db:6a:78:3b:47:19:1c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=30715ed4a588ea10f24350315eeff901304d7e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:c9:cd:39:c6:c5:b3:58:6d:72:cd:02:62:
66:cc:2a:7b:e6:5f:48:e0:e8:ba:a6:02:a9:0f:6e:
02:09:aa:62:57:b6:2f:8c:3a:6c:fd:2d:27:0b:14:
a5:f7:e1:aa:19:24:0b:36:92:df:a9:08:94:d9:e5:
b8:88:03:36:f7:c8:39:7c:85:a7:68:de:75:6e:e0:
03:fc:4b:a1:66:a3:3f:a7:b9:5a:27:73:c1:86:53:
36:03:12:f7:83:03:a2:7d:93:29:19:00:60:c7:7e:
98:b3:9e:e7:8d:40:34:a4:3b:36:07:51:47:ce:1a:
e9:f1:1b:c3:9f:3c:07:75:f5:a2:be:da:bd:be:23:
1f:50:75:e5:a3:7c:5c:88:63:21:97:70:f3:6c:7d:
e4:5c:1e:ab:f8:f6:9e:1c:42:0a:99:5b:6c:04:94:
5d:a6:03:36:3a:dd:78:c9:a2:7c:f0:36:cb:bc:36:
e8:76:12:97:3f:de:ff:6c:e1:e8:c1:e1:72:16:0b:
60:d3:27:6c:06:bc:51:22:77:1a:df:d5:21:f6:7b:
f8:cc:ec:90:9c:05:83:b3:22:40:92:fd:e0:39:a3:
e4:30:69:84:2c:4b:a6:f2:c1:bd:28:da:d6:11:fe:
4d:20:73:33:8a:68:45:d4:cb:dd:f6:1b:77:77:29:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:71:5E:D4:A5:88:EA:10:F2:43:50:31:5E:EF:F9:01:30:4D:7E:8B
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9c:f9:5b:6b:4c:9c:2e:16:e1:be:e9:9f:71:0c:00:3a:56:
1b:a3:67:ed:e6:c3:57:80:d5:58:6b:fe:44:bc:26:05:a8:91:
4e:bd:51:b4:d3:b0:b5:4b:3f:66:3c:1f:79:e1:d6:09:fa:86:
9a:e1:ce:8c:69:3b:a2:d2:8c:b3:c5:4a:a8:bb:5d:36:3d:23:
01:15:2a:ee:18:e6:81:0c:7f:11:b7:d3:64:91:5b:7c:a2:28:
26:3d:b1:ba:47:21:fa:1b:b7:a1:29:8c:7a:c1:d5:1b:f1:39:
04:77:11:4f:6d:b4:15:8c:35:47:d9:77:e7:f3:cc:27:db:eb:
73:a1:c2:dd:2a:90:5b:ae:69:0d:fc:a9:bd:f9:71:ac:b1:18:
ed:eb:c3:38:a6:84:bf:05:67:db:01:6e:c5:6d:65:f8:ef:57:
6c:40:36:d0:59:14:d5:77:1f:fb:b7:da:c8:c2:32:dc:b4:10:
08:85:bf:11:97:50:e9:31:2e:ac:4c:4a:35:a9:4d:40:40:2d:
9d:e1:03:42:ee:0d:a3:64:56:2f:1c:d2:f4:e7:65:43:8f:d4:
ff:6f:ee:30:d2:a0:19:a5:2b:4b:0b:6c:74:1f:af:9d:d6:c3:
23:5a:4d:d2:50:ab:45:70:96:20:79:7a:96:b5:41:c7:c2:ff:
93:23:3a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:36:49 2025 by rpki-client