Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: lKJYP0BFi6wcDfqHYbkcoYW9expYouzrW1g8CHiGmQ4=
Subject key identifier: 25:86:8F:DE:3D:41:64:D4:A8:F4:23:93:F7:CD:EB:CF:00:0C:B6:CE
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 019A4EBD525571BA6CE4BD637B993A33792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 12:00:21 +0000
Manifest this update: Tue 04 Nov 2025 12:00:21 +0000
Manifest next update: Wed 05 Nov 2025 12:00:21 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: t3B0a9v9Ux5nySNSiiTHskrfwLdy4OEGpnJMeNR2y5Y=)
2: uU_Epbh4k-iNlfIsi_aGVBuYX3E.roa (hash: oN88HQNaxlS+SnkVrt2tuPqyaZ78GSR116CcNBSWxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:52:55:71:ba:6c:e4:bd:63:7b:99:3a:33:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Nov 4 12:00:21 2025 GMT
Not After : Nov 5 12:00:21 2025 GMT
Subject: CN=25868fde3d4164d4a8f42393f7cdebcf000cb6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:c5:c4:9c:ad:07:56:e1:bf:20:0a:29:8b:
b4:91:eb:01:9f:f4:43:b8:82:98:23:9a:e5:1d:23:
ec:3a:63:95:20:b0:89:67:67:a7:15:0c:e8:aa:da:
52:94:42:3c:dc:21:06:a3:77:11:7f:2e:ca:39:7e:
37:c0:e8:38:9b:a0:7f:5a:8b:38:b8:5c:30:2c:2d:
28:ea:77:84:51:45:73:ea:6b:87:5f:60:fb:70:01:
77:5c:ad:a5:25:9a:0d:c6:74:82:e1:a2:4a:65:f2:
44:06:8f:ee:fe:74:78:a9:3f:34:9e:c0:fe:09:4d:
c9:89:ee:f8:9e:07:a3:f5:c9:67:52:27:bc:8a:9f:
e0:57:21:25:49:dd:27:42:2b:09:5f:a8:15:73:cf:
9f:6a:95:e8:f0:ee:00:39:bd:26:dc:ae:4b:72:8e:
3d:ea:55:83:59:e1:c2:b2:d0:dd:81:f2:42:6c:61:
24:38:a6:fa:57:ad:d4:97:de:4f:5b:24:cb:77:ee:
52:d7:a5:e4:20:ea:be:e9:5a:c2:b8:70:80:43:80:
31:89:66:46:38:95:94:e1:26:cf:6c:fa:08:12:56:
41:6f:17:58:4c:03:6b:70:ae:98:ba:3a:e1:60:93:
b3:41:33:db:f3:0f:30:2d:65:c5:73:02:03:90:dc:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:86:8F:DE:3D:41:64:D4:A8:F4:23:93:F7:CD:EB:CF:00:0C:B6:CE
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:3c:d3:0b:be:84:4c:5a:84:aa:65:29:ff:a3:b9:2a:83:
12:60:7a:32:66:d0:c6:51:f4:9d:24:a4:e6:51:cb:8b:85:f3:
fc:58:03:e4:88:26:33:39:22:ae:84:e3:8f:74:4d:e0:72:34:
be:ae:3b:35:a1:9c:6c:80:ee:96:e6:be:ee:59:47:1f:87:ac:
1d:2d:86:2e:3c:7b:29:1f:a6:5f:cb:28:72:05:a1:bd:99:b6:
c9:bd:07:1c:6e:22:30:c9:df:bf:d0:e4:52:65:29:41:7b:47:
b7:6c:b3:d8:7f:54:f8:ce:d5:66:52:6a:a2:b9:15:14:6c:59:
bc:7d:84:02:74:07:27:a3:88:82:ae:6a:4a:09:46:01:8b:76:
7c:c4:5e:7f:91:06:2c:ca:26:8e:8f:0a:e3:81:f6:ca:5d:0d:
fe:1f:05:85:24:c2:5d:24:f9:dd:71:fd:68:9c:e7:38:cc:53:
cf:7e:03:c6:a2:a2:3e:f8:b0:48:a3:c2:08:15:c7:ed:96:b1:
61:9d:3c:ce:28:41:9e:41:3d:35:09:70:fa:8e:70:e2:2e:a6:
42:eb:25:3a:ee:bc:f0:de:0b:7d:0b:f8:86:9d:aa:05:4a:c7:
d4:19:d8:d3:7e:77:2a:7d:f1:f0:2d:4f:eb:1e:c0:7a:66:e4:
88:ff:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:57 2025 by rpki-client