Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: j+pjzh0MNjVRL94uTD2HhBrc2z5dxWWn58dssX07SXY=
Subject key identifier: 8A:36:DF:C2:81:8C:B4:C2:5A:17:DA:BC:07:BF:C2:5F:C2:BA:F2:C3
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019A500760FECD39BD7B4FEB0C7B70B2078F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 18:00:52 +0000
Manifest this update: Tue 04 Nov 2025 18:00:52 +0000
Manifest next update: Wed 05 Nov 2025 18:00:52 +0000
Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=)
2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=)
3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: PnczoNI9XN0kPgT4++6jgmEitnEOhlc21d1LUYeR1FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:60:fe:cd:39:bd:7b:4f:eb:0c:7b:70:b2:07:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Nov 4 18:00:52 2025 GMT
Not After : Nov 5 18:00:52 2025 GMT
Subject: CN=8a36dfc2818cb4c25a17dabc07bfc25fc2baf2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:20:88:f8:0a:3d:b4:6d:54:92:b1:70:3a:
cf:a9:de:5d:9a:2f:01:1c:a3:ce:70:fe:fa:40:f0:
2b:61:24:f9:b6:88:78:1f:34:cb:c8:56:2e:86:cc:
9d:a1:bf:c8:35:a2:8b:bd:f6:76:7e:f7:ea:e7:93:
e5:4b:ae:16:43:7d:7c:44:00:fd:1d:42:ae:66:bf:
85:d9:a1:68:c5:47:24:41:ea:c1:1e:81:77:fc:fb:
d9:a4:30:a4:6b:46:d1:56:f4:d8:6d:5c:ec:ea:c0:
e2:49:0f:b6:92:cb:42:66:b8:35:7e:9b:10:c7:23:
04:51:3f:47:2c:ec:d1:24:ba:1d:40:6a:33:1c:34:
a9:d7:b5:07:d9:6c:c3:0c:6c:7b:a9:5c:83:71:5d:
95:86:bf:b0:23:10:fa:80:a4:fc:1d:f3:97:42:be:
09:98:bd:89:d3:47:38:e0:a0:48:bc:55:25:3f:51:
ea:22:da:a6:c3:49:b3:fb:b2:fb:ec:3b:b6:dc:23:
b3:84:15:90:03:0c:41:3c:71:b7:4f:db:9d:30:7d:
75:3e:22:23:23:58:88:d6:d8:fe:b7:67:f6:24:92:
3f:29:78:f4:dd:a6:e6:ad:b6:b6:80:17:18:50:82:
e5:f1:fc:7d:ad:3b:55:10:9a:d7:66:f7:10:99:a5:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:DF:C2:81:8C:B4:C2:5A:17:DA:BC:07:BF:C2:5F:C2:BA:F2:C3
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:58:1e:76:a4:fb:05:f9:f6:91:fc:9d:b3:75:ee:1e:5c:
a6:7b:9c:c4:79:97:3f:51:b9:78:e3:25:37:93:c3:26:83:c0:
27:e4:65:17:8a:e6:fc:de:2d:11:48:52:20:42:3a:42:f8:13:
c9:91:80:58:40:5a:75:61:77:06:86:f6:9d:89:12:b3:09:c0:
dc:a3:25:3e:72:dd:7b:71:d3:02:85:57:22:8e:94:ad:90:a9:
9a:27:bc:b3:4e:8c:a2:df:59:35:92:a3:72:2b:af:35:47:6f:
84:03:24:ef:e8:e8:bd:27:90:6a:b0:20:9b:13:44:80:7f:f8:
d2:ca:20:16:a3:4a:ed:1e:d8:3c:7f:79:b8:41:39:e1:ac:50:
66:68:55:94:da:3f:9b:77:07:10:da:6e:67:b0:a5:13:5d:f9:
a0:f2:ff:d1:7a:42:81:37:97:f4:45:a3:22:ba:72:d4:aa:97:
13:f1:52:0b:56:ff:fa:ad:5f:68:8e:db:48:52:8c:60:de:b5:
e9:2f:41:74:a9:49:75:ef:d8:5c:63:3e:4a:77:55:22:5c:79:
61:74:9c:59:fb:65:ec:85:38:a8:51:85:b1:90:73:b9:34:2f:
5b:c0:ed:7e:59:e0:c5:8b:53:98:fd:96:a4:db:e5:3d:f2:dd:
39:72:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:08 2025 by rpki-client