Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: bbD69hC7soiGB+PCIOp961vxHYGqvLkbfWNtaXwneik=
Subject key identifier: CC:CC:25:B6:86:72:80:E3:ED:6D:F9:64:3E:FA:EA:58:98:15:88:B5
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0198D473AD8B9BB97FB3625669DC16D9621E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 01:03:27 +0000
Manifest this update: Sat 23 Aug 2025 01:03:27 +0000
Manifest next update: Sun 24 Aug 2025 01:03:27 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: YbJKX0ypD2kMsuC6Suts1kOjsNZQ0L6G7I8f7wqKUfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ad:8b:9b:b9:7f:b3:62:56:69:dc:16:d9:62:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Aug 23 01:03:27 2025 GMT
Not After : Aug 24 01:03:27 2025 GMT
Subject: CN=cccc25b6867280e3ed6df9643efaea58981588b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:21:a0:57:a0:03:f7:68:63:5b:6e:4d:6a:
1d:98:b3:b4:ce:e5:a2:65:74:6b:62:5c:ad:f6:a3:
cc:19:54:a2:df:72:f3:0e:cf:ed:1e:76:9b:cd:8e:
2d:a5:18:5d:78:74:24:f6:f8:43:7f:53:bf:84:66:
d9:35:4c:e3:ac:23:cb:fc:7f:32:c5:77:5b:d2:2c:
3b:c3:54:5e:a8:a9:d1:0b:ae:fa:56:23:30:eb:3e:
5e:d9:bc:44:de:4b:74:49:8d:04:4e:e9:2e:a1:75:
14:c5:6c:75:82:8c:06:e8:1c:fb:6f:d1:b9:b1:ef:
d4:9c:d0:92:e5:d6:56:02:c7:bc:7f:ed:29:b3:fe:
25:73:c1:21:0f:ea:ec:13:3d:cb:f8:13:c5:2d:82:
a9:7c:7d:81:fd:bd:80:24:fa:f7:19:80:f0:81:cc:
c3:80:a6:87:41:23:6d:3e:69:e5:e0:a6:28:39:80:
d2:8f:a1:81:f7:76:86:4d:8b:1a:a6:ba:d6:32:1a:
4a:6c:30:51:0c:03:f0:e5:6b:8f:12:a7:23:73:d1:
32:fb:07:0e:7c:0f:d7:91:86:20:9d:de:f7:e0:02:
b9:63:61:40:ed:d0:f9:56:46:17:0a:94:cf:e3:eb:
92:c4:0d:31:6c:77:6e:c1:7e:cd:04:8b:97:ee:27:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:25:B6:86:72:80:E3:ED:6D:F9:64:3E:FA:EA:58:98:15:88:B5
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7a:6a:be:0b:34:e5:13:66:e6:df:87:21:40:6c:fb:1c:68:
bc:7b:a6:7a:a1:97:33:4d:2f:3b:fa:3d:75:c7:64:61:6c:bf:
51:f7:41:ce:d2:89:63:d0:8f:b5:2e:eb:dd:e4:ca:68:36:4a:
39:53:4a:b4:f7:69:8f:58:27:6e:0b:89:80:76:89:02:76:9f:
16:97:a3:52:68:dc:34:d2:51:e9:3b:a4:ad:b1:95:33:92:24:
f8:6c:8b:5e:dd:67:00:2e:f3:93:49:aa:c3:cc:f4:3c:45:0e:
c1:58:22:65:3c:23:9a:03:0f:07:fb:d1:ac:0c:23:0d:80:54:
16:3e:4c:bd:78:ef:09:b2:d2:88:f7:c3:ae:3c:cc:4d:88:1d:
a6:2a:d1:24:d1:bc:b4:ae:aa:89:36:6a:c1:a9:bf:42:21:c8:
55:72:df:22:7f:ae:9e:3f:df:0e:ca:10:2a:c9:99:5c:97:44:
c6:d9:dc:86:b7:ce:88:78:9d:92:1f:43:9a:cd:d3:a5:a7:c0:
6e:d5:cf:e4:8c:d2:d4:e5:8e:36:9f:8a:11:9a:68:e4:67:b3:
71:cf:7d:25:5e:ec:13:69:c6:71:17:60:e8:a5:63:e5:bd:f4:
0d:98:2a:aa:cd:c7:c7:a2:c3:59:c9:6a:4a:d1:58:1b:10:a0:
13:c2:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:23 2025 by rpki-client