Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: u4/NJs+SB6dH1gok+70LpCCyz3Vz46ghBDGI9xAP9xU=
Subject key identifier: BA:AC:61:F5:65:7F:3A:57:50:4B:C7:18:D4:37:94:0F:C8:4D:4A:1A
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 0198D5F1AB6F1E18BEC770A1610B2B8C53FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 165E
Signing time: Sat 23 Aug 2025 08:00:41 +0000
Manifest this update: Sat 23 Aug 2025 08:00:41 +0000
Manifest next update: Sun 24 Aug 2025 08:00:41 +0000
Files and hashes: 1: M9YJnMZq-Qo4sKyFoXRkAaUtrDA.roa (hash: lb64jsKs0riSb1j7+rgbV5185uMxPtGDDu6H1Pf3T8s=)
2: P0fCccGAGT3P2tDw-rs5ORyPyrw.roa (hash: zsjstCOlxud3vr07JZ7SKJe39jYJRrodk6RlxTPhlQE=)
3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: uCCMY3P19exQlG1OCXXJwFcSUGAK2Hf+d8YGmjt/5gQ=)
4: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ab:6f:1e:18:be:c7:70:a1:61:0b:2b:8c:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Aug 23 08:00:41 2025 GMT
Not After : Aug 24 08:00:41 2025 GMT
Subject: CN=baac61f5657f3a57504bc718d437940fc84d4a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:0d:04:7b:61:e0:59:2f:1e:95:2a:ed:a3:
39:bc:21:f2:3b:99:fb:5e:e3:45:a4:92:05:4f:d6:
e6:28:c5:2a:44:ad:94:31:c7:94:a1:1e:75:10:67:
9a:36:52:46:a4:52:46:9d:26:0f:bc:56:a5:d8:d3:
60:0b:b8:00:ef:a9:53:30:6f:10:8b:6b:3b:ef:f5:
f5:1d:42:37:e6:4a:b3:83:fb:c7:3d:9b:51:73:5e:
c7:34:9e:6c:fb:d3:db:76:cd:28:9f:b9:6b:42:36:
1b:da:19:36:3b:8f:a9:ca:78:8c:19:9d:17:de:bc:
58:71:20:b6:d5:c2:97:65:3d:f4:ce:f4:b8:ac:3b:
91:76:7e:7f:50:02:4f:4b:1e:f3:3d:d5:a3:4f:6c:
8d:2e:89:b3:10:45:34:a4:00:b3:5b:0a:b1:51:a1:
f9:83:5b:27:aa:a2:ee:82:cc:9c:9e:22:e2:c0:a7:
32:e7:1a:d4:ee:1c:96:60:92:de:e9:17:36:72:78:
ef:1e:52:2f:ac:33:2c:0e:8c:21:3e:94:6c:85:54:
03:7a:3a:7a:06:03:55:7d:87:46:3b:0a:04:92:9a:
0a:98:fa:76:41:15:21:f5:e0:a8:70:12:95:3a:e4:
5b:ad:0e:52:ca:06:84:0d:b6:cc:39:11:60:c0:67:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AC:61:F5:65:7F:3A:57:50:4B:C7:18:D4:37:94:0F:C8:4D:4A:1A
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:45:84:e5:b8:2f:ad:9d:e9:22:08:ba:e9:ec:aa:70:ee:72:
9c:e9:3a:9c:95:4e:03:5d:2b:bb:d5:54:e1:7e:4f:f3:fb:f0:
55:51:f9:8f:2a:88:79:41:09:c2:a4:a5:21:81:63:83:60:29:
0a:06:3e:65:77:24:71:72:cf:b4:89:88:e8:a6:b4:41:de:fa:
f6:f0:88:57:48:51:38:2b:77:22:9e:3f:86:10:5c:2d:89:5a:
b1:a1:1d:a2:0a:56:4e:67:75:d4:ba:c6:45:0e:30:3e:85:6e:
b1:e1:43:98:1a:44:1e:71:d8:a3:59:e4:0d:99:6a:17:d4:7e:
79:6b:da:89:67:31:c2:f6:27:73:19:02:a7:a4:b8:ef:b7:56:
61:53:14:1f:e6:03:73:6c:98:9f:ba:f9:1b:d5:f9:71:d1:5c:
63:6d:77:de:3c:e5:2b:42:59:f0:4e:91:e4:36:21:2e:a6:c3:
94:45:9c:77:ff:08:79:22:10:64:da:f5:e0:ea:bb:cc:b2:e0:
62:e0:e8:2f:7a:80:61:f5:2f:59:b9:db:df:f9:5c:c0:66:02:
59:a6:2e:19:49:e6:39:74:1a:a1:1f:d9:00:fa:e7:69:33:35:
67:b5:4f:a9:9b:17:db:03:89:85:96:f4:cf:68:22:52:53:da:
3a:10:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:29 2025 by rpki-client