Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: SmDhJTWQIBvEdeRR+Ebhoe2a7TSeIz+qvFoU4C3i9Sg=
Subject key identifier: 89:FD:3D:A2:74:B4:3B:47:19:65:3C:AE:BE:4B:57:7B:14:54:30:15
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 019A4F9960399489A2C910C25B98AE6EFBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:42 +0000
Manifest this update: Tue 04 Nov 2025 16:00:42 +0000
Manifest next update: Wed 05 Nov 2025 16:00:42 +0000
Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: 6WQgrbViW5BmhS73SVPyIgdXyQPvTFUwuG0NAHQ9eoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:60:39:94:89:a2:c9:10:c2:5b:98:ae:6e:fb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Nov 4 16:00:42 2025 GMT
Not After : Nov 5 16:00:42 2025 GMT
Subject: CN=89fd3da274b43b4719653caebe4b577b14543015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:ba:30:a9:b7:cc:4e:1a:eb:ca:d3:87:54:
62:eb:03:85:33:6c:57:b7:77:71:60:00:9c:a9:2b:
91:b6:a5:d9:92:3e:0f:b3:42:a5:21:62:32:2a:7f:
3b:de:2f:3c:4b:f1:17:f3:ca:7e:b5:ee:93:2b:0e:
26:9c:df:b0:7b:4e:73:61:f4:83:4a:89:b5:fc:f3:
f0:66:1c:06:b3:2a:f9:76:9a:7a:e5:56:f3:21:60:
9d:51:a3:10:e7:08:60:60:31:8a:9b:b9:dd:10:16:
3f:ac:8d:6e:d2:32:ae:e2:46:bc:d4:f0:dc:9d:68:
8e:2d:ab:bc:05:46:16:b3:27:68:92:98:52:6c:7f:
b4:61:12:3f:07:95:41:35:e3:4f:f1:52:ec:25:28:
84:06:65:88:74:76:8d:11:e8:39:ed:65:64:8c:3c:
5c:fc:a0:0b:4d:51:e1:a5:48:44:40:c7:c5:66:cd:
33:5b:26:c9:94:d9:cd:e2:32:f6:7d:88:07:42:74:
9c:22:22:a1:23:f8:20:5a:0d:31:9b:9a:07:4b:db:
f3:cc:2d:4d:cd:8f:13:63:82:7e:f4:05:80:05:e8:
6c:c0:69:09:ec:20:95:94:c0:b8:03:46:5c:69:ba:
4c:cf:13:2e:89:ac:95:02:57:26:d7:50:64:ce:d9:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:3D:A2:74:B4:3B:47:19:65:3C:AE:BE:4B:57:7B:14:54:30:15
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8e:c3:31:c2:d7:0a:94:12:d6:01:d4:97:7c:8d:ab:21:5f:
aa:7f:a9:21:34:62:0d:47:63:bb:1f:0e:d0:65:0f:a6:79:4a:
d7:81:5f:c3:3b:56:ed:bf:6c:f3:59:fa:48:0d:31:10:fd:1a:
64:f5:3f:87:65:e6:89:3a:70:cf:a9:a2:a7:99:fa:3f:e7:d0:
28:32:38:ea:49:ae:e4:f2:8c:2e:c5:bd:de:65:25:4b:b8:65:
a3:3f:55:0e:a0:b0:cf:7b:6f:c8:90:37:2d:f0:68:0b:4b:2d:
24:2f:82:a2:ab:5f:3b:fd:05:0b:30:84:a1:14:69:ea:a8:78:
63:7c:9d:ef:e2:6c:29:04:d8:33:79:46:a1:66:57:6f:56:49:
20:13:43:92:be:36:ee:7b:2d:f7:83:c6:97:c7:1e:52:f8:70:
83:98:8c:ff:f2:54:b0:c4:5d:59:40:2e:45:b6:8f:ef:a7:32:
72:43:dd:8d:46:85:34:85:dc:5a:52:60:50:7a:ec:57:69:6f:
c2:44:b7:56:93:eb:72:2d:20:29:05:91:dd:41:38:40:a2:25:
96:66:9c:b7:dc:24:8f:c4:c0:47:17:93:18:91:82:43:09:c5:
cf:93:a4:0a:7a:20:03:30:28:1c:b6:aa:17:09:fe:be:c5:84:
cd:18:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:34 2025 by rpki-client