Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: TrdgV72Of6VXR90VJe05R++9FGpHTwbr5u7Mo5yBmkI=
Subject key identifier: 28:83:F4:1F:6C:50:40:5D:54:4A:F2:E4:8F:94:11:B7:6C:4F:DF:78
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 0198D5BBAF536DA2C355BF42D59FD2A26E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: Vh9zdU6UPXBw1wsGMQVn_pjjotw.roa (hash: RHQ7Mk9Ul2niP+vY1weS4xjGH8dOqLq3Efjab5Bc1HU=)
2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: ap/D8OVw+9nDkvTLsOq8gyWJu81LCTj58bAKXD+bXkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:af:53:6d:a2:c3:55:bf:42:d5:9f:d2:a2:6e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=2883f41f6c50405d544af2e48f9411b76c4fdf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:aa:fc:cb:bf:94:80:f8:43:ac:5e:c6:84:
dd:78:25:98:57:c4:ca:84:24:50:c2:19:a8:84:a2:
ab:50:d2:4b:fb:be:15:05:4d:14:90:30:7d:42:77:
bc:0a:3a:d3:f1:05:cb:34:73:d0:8a:86:9b:8c:48:
b4:d1:98:a8:b0:70:72:71:e4:98:00:0f:62:0e:99:
65:11:21:05:70:ff:2e:55:eb:d2:06:71:b5:cc:b5:
bc:29:b9:6a:d4:8d:a1:e7:71:23:20:0a:7e:f1:6f:
48:8c:b1:c0:9a:4f:e5:2f:8a:cd:4b:fb:35:bc:f8:
ef:13:6b:cb:f9:14:bd:e3:50:2e:49:28:7e:6e:00:
02:bb:20:b7:6b:3f:e6:62:d1:e1:07:df:5f:7f:a1:
bd:6b:3d:34:42:9e:03:16:10:b3:b4:70:1d:b9:5d:
fe:c8:f0:ab:9c:d0:06:b4:3e:c5:7e:a3:02:18:ab:
01:c4:8f:e1:6d:ff:cb:21:4e:aa:c8:7c:08:aa:9e:
d7:3a:2c:bd:78:d2:af:eb:b2:93:9b:50:38:a9:d6:
a5:d9:ba:bc:d9:15:30:17:44:66:4e:14:74:9c:80:
f9:48:48:2d:c5:c9:3d:25:e9:9c:93:c7:a0:52:b2:
fc:cc:d5:41:b8:3f:0b:7e:fd:41:46:f0:23:f6:8b:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:F4:1F:6C:50:40:5D:54:4A:F2:E4:8F:94:11:B7:6C:4F:DF:78
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b8:34:69:8e:fa:98:dc:4f:3f:aa:6a:9f:7a:4c:f7:cc:c7:
05:ba:11:7c:a4:b8:72:6a:3f:7e:ec:9d:f3:ee:7c:b6:64:55:
33:b0:81:8a:53:33:5a:87:cd:4f:ad:7c:95:81:19:7a:9d:58:
4f:0d:32:a3:bf:67:f3:b4:6d:dc:85:fb:9e:3b:16:ef:23:bf:
14:1b:7b:4e:9a:19:eb:ee:78:fe:ee:1e:fb:e5:9d:54:5b:86:
0d:cb:4a:02:3a:72:fb:6c:67:e4:38:36:3f:08:16:32:d5:21:
67:26:e7:aa:29:dd:f1:b5:95:44:ed:ff:7e:eb:a1:17:d1:03:
9f:c0:15:3f:6b:62:02:be:35:6b:89:af:96:06:2d:84:4e:4e:
d1:c9:f9:e3:1e:ba:7f:87:0e:64:2b:78:dc:02:57:4d:d3:f9:
d4:f3:5f:a8:54:52:7a:01:f2:70:69:0e:8e:d0:64:6a:1b:76:
7a:b6:46:7d:da:93:af:9c:3f:28:ce:10:11:18:49:de:2c:66:
b4:8c:09:bf:fa:1f:f4:27:d2:b4:41:ca:08:63:6f:82:d7:fc:
8f:18:5e:76:c9:e9:9a:62:3d:d7:cb:f9:73:23:60:61:5f:1b:
45:51:33:5a:fb:50:7e:5c:63:bc:01:06:23:e4:4d:ed:7a:5c:
6f:c5:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:26 2025 by rpki-client