Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: ZGa7sfUWk0MouHDY4GEu2gUHkWo/0TAEPE8KpVOTrBA=
Subject key identifier: C2:B4:07:F9:5B:C0:71:EE:6E:B4:7C:F3:6C:EF:5D:AC:97:B6:4B:1B
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019A503E3957CCF2B89342EABB6223C7551B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 08FA
Signing time: Tue 04 Nov 2025 19:00:46 +0000
Manifest this update: Tue 04 Nov 2025 19:00:46 +0000
Manifest next update: Wed 05 Nov 2025 19:00:46 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: 5rtipAm2J2CJn6nK1ysz7KaulCiHBVgPl2tqeoa61iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:39:57:cc:f2:b8:93:42:ea:bb:62:23:c7:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Nov 4 19:00:46 2025 GMT
Not After : Nov 5 19:00:46 2025 GMT
Subject: CN=c2b407f95bc071ee6eb47cf36cef5dac97b64b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:dd:b0:0d:6d:a5:f7:98:bb:7d:d1:f3:3b:
09:3c:71:70:ff:52:3d:7b:d0:79:a6:3d:9f:39:1e:
c0:38:ad:cf:8b:46:07:48:41:31:54:bd:da:14:00:
17:7d:69:53:3b:36:2a:68:42:e4:2d:99:84:ad:c4:
41:93:08:00:34:fd:25:99:b1:52:15:75:76:82:92:
92:27:e5:5c:47:b1:eb:4c:0e:f9:41:31:ad:91:5d:
64:50:03:e2:df:ba:6f:d6:f0:ef:47:db:ae:58:89:
1f:46:3d:27:af:ff:8a:ef:e9:a1:56:ba:c0:bd:05:
be:07:36:44:e4:0b:4d:6d:3a:6a:8a:22:aa:ba:d3:
8e:13:a2:39:b9:52:53:38:91:4b:02:22:b6:02:d8:
50:bd:e1:ed:96:7a:e6:76:5b:21:52:3e:99:66:ee:
18:f9:2d:1a:c9:6c:ce:ec:5c:29:b9:85:d6:20:1a:
89:15:a2:b4:2b:2f:5f:d1:f0:0a:95:d8:d1:6c:b4:
2f:db:90:1a:8a:68:b7:ff:dc:4f:d6:77:70:1e:30:
07:1a:fc:e1:41:8d:ea:c6:11:cf:e0:2c:ee:4d:c8:
6c:6c:74:91:70:d7:ae:e2:1b:9c:19:17:99:a2:c5:
88:26:83:2d:af:74:69:99:bf:d1:d7:b0:59:5c:99:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:07:F9:5B:C0:71:EE:6E:B4:7C:F3:6C:EF:5D:AC:97:B6:4B:1B
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5f:46:2b:b1:aa:36:f9:69:ef:44:cb:8d:5d:3d:5f:21:1a:
53:39:7d:79:2d:0d:a5:b5:66:2b:d9:f6:49:8f:32:83:5b:c4:
27:c7:03:0e:5c:df:5a:4b:1e:d1:af:d0:7b:d6:b5:f7:9f:36:
d2:95:4b:4a:ea:7a:04:92:b0:51:f2:e3:11:62:4c:47:2c:29:
c8:ec:86:d4:50:9d:bc:a2:d5:8f:11:6a:19:4e:6a:57:b4:22:
38:d4:2c:13:ed:fa:59:3a:fc:fc:98:66:64:c1:df:ae:46:8a:
ab:25:c9:61:31:83:20:e3:01:b8:74:d1:1d:01:a2:3e:ba:d4:
95:a7:b2:8c:23:49:cf:67:80:be:a5:72:3a:89:2d:5f:c8:8d:
ca:ee:ef:de:d6:11:3c:3b:e8:f0:d2:9e:c9:6b:85:fb:c3:6d:
cc:ce:16:f5:8c:a0:ab:bc:6d:72:a4:bd:1d:9f:c7:25:d0:61:
27:e3:de:16:ad:af:96:c3:29:e2:ab:75:4a:b3:e4:18:ec:fb:
47:2c:71:f4:21:94:97:c1:81:27:11:9e:b4:9b:a0:e6:75:5d:
4d:72:db:4e:3f:36:3b:ca:b4:c4:e5:64:e9:ea:a6:9c:87:50:
53:0a:9d:33:f8:86:d4:89:5a:9e:3d:b7:17:b6:5f:86:26:98:
e2:cb:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:00 2025 by rpki-client