Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: pbk21dxJzKgjfZbKA5DzY5Hc5vMGkK6z1voly+ba53s=
Subject key identifier: FB:17:32:2A:3E:49:97:B4:1D:09:7A:82:51:3F:1E:DA:32:92:B5:2D
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 0198D5838A0C0A78F3AF3F5B9F0902D11968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: eNXcyBKsF/WgyO7rb5RL2TlsGvEYxdQiLd3Tzx/ZNEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8a:0c:0a:78:f3:af:3f:5b:9f:09:02:d1:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=fb17322a3e4997b41d097a82513f1eda3292b52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:73:51:0e:c3:73:bb:2a:98:34:51:a8:71:
e1:13:0b:6a:5e:06:15:79:57:cc:08:a8:fc:15:02:
fa:64:cf:ea:f5:05:4f:42:eb:47:f8:9b:cf:95:1b:
9c:20:ac:63:57:bc:e2:a2:13:e5:5d:f4:c5:e1:2d:
5a:04:ed:58:a6:f6:4f:62:fd:8b:3e:2b:d0:5e:55:
06:df:b6:19:5c:43:64:ce:54:bc:f1:ac:13:01:a8:
b6:77:18:9f:65:7f:e5:70:59:63:64:6d:12:78:61:
41:00:c4:36:ed:ed:3b:58:35:5a:f4:d2:6f:29:f2:
8d:06:2f:4d:c9:84:ec:6b:6a:f6:46:ec:e5:89:cc:
3b:bf:0e:2f:6e:f3:f7:c0:6c:de:00:63:a5:57:32:
f6:5e:22:2d:f9:06:ef:86:1f:be:ce:94:df:a7:32:
c0:e7:7a:d4:8b:d6:fa:68:59:70:96:0c:6b:e4:3b:
2f:0f:4c:5c:1b:68:b3:c4:08:c4:c6:17:c0:b6:cf:
e9:b6:6c:86:7d:85:1e:d5:29:bb:3b:f4:d9:03:b0:
4a:c1:78:f6:c1:71:a7:98:ee:e6:f2:1e:a2:f7:ff:
6c:97:2b:30:42:24:46:c3:d0:ba:29:9f:fa:e1:84:
19:c9:ec:72:d2:5e:25:73:86:b9:65:ff:f9:9c:c5:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:17:32:2A:3E:49:97:B4:1D:09:7A:82:51:3F:1E:DA:32:92:B5:2D
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d0:de:aa:a8:01:d4:ac:28:81:0b:b2:7b:2f:ea:09:c2:43:
fc:ed:33:4d:9c:ee:fd:6d:05:7a:2b:11:7c:bb:b9:f7:13:f9:
88:05:36:ae:91:0b:6b:35:8e:3d:84:4c:07:e5:f1:58:58:83:
32:08:57:ac:a4:89:34:a5:03:1f:4d:95:20:d4:84:1c:c7:59:
5b:2c:14:bf:2d:32:db:4f:08:ce:6b:9e:4a:56:2b:df:5c:88:
81:ad:ec:2f:61:53:48:93:3a:6e:5b:49:22:bc:58:6a:38:ca:
21:ca:f7:cf:27:4a:3a:65:d4:94:9a:27:7d:9d:b2:fc:d4:0c:
bb:cb:ea:54:9d:d4:5b:f2:09:79:af:0f:2f:04:b2:4e:4e:74:
3b:a7:6e:24:c4:01:71:17:5b:6e:4b:41:78:d4:60:fa:80:a5:
ae:54:e1:fc:d7:9a:f2:25:b8:49:10:14:bd:26:6c:d6:dc:13:
ff:65:d5:98:d2:a3:5e:d3:b5:77:ed:a4:76:ee:07:97:00:66:
83:a1:51:44:39:ff:78:6d:e0:10:64:16:3a:c4:da:55:4a:d3:
90:98:6d:f9:6e:57:60:7a:4f:11:ff:fd:4b:f0:a3:16:22:f8:
50:e7:b3:69:b0:d2:0e:f6:85:e5:ee:8d:03:88:0b:a7:79:07:
5b:5e:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:07 2025 by rpki-client