Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: jaJYt55ezRczDJqh7Moqf+ELXOe4d3EdCmAgfHzrfZU=
Subject key identifier: 43:79:A9:B1:17:0B:80:95:03:D4:8D:1C:C4:9C:82:CD:9A:56:F2:64
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019A4E18794BF52B47FBC6652319EB66D70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0400
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: /44ipH5zkxFVHhaLQcIfnKXfL6m0k1mss093r8RpG6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:79:4b:f5:2b:47:fb:c6:65:23:19:eb:66:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=4379a9b1170b809503d48d1cc49c82cd9a56f264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:7b:e1:a8:cc:47:17:f5:6a:c5:34:de:7a:
6e:cd:08:3c:3e:59:74:0e:3b:81:a0:c3:9d:2e:30:
df:c2:27:d0:33:8e:5e:a4:03:d6:3a:e1:f6:10:9f:
51:a7:85:05:f9:55:52:52:97:cb:29:04:da:05:3c:
41:72:b6:f0:d3:d7:38:1e:59:cf:1a:53:99:73:3e:
10:a5:68:cc:98:32:d2:7c:9b:32:72:90:13:97:59:
78:9a:2b:9f:ce:82:7e:18:38:7e:5d:f5:50:7b:32:
47:37:01:6b:22:29:44:12:4a:d3:3e:15:2f:bb:e4:
c4:43:41:b4:15:38:21:7b:b2:64:b7:de:f9:af:1f:
8e:d7:93:0a:07:22:2a:91:0f:fc:5e:6e:4c:83:88:
bc:04:9d:a0:22:32:68:c4:38:ea:2f:1f:99:15:e0:
62:2a:13:53:7e:01:c0:73:8d:fd:7b:08:e7:fd:4e:
aa:cd:84:7f:77:52:be:65:67:95:af:b7:ee:47:2b:
1b:5e:3e:7b:b6:b7:eb:0e:a4:cc:5f:7c:9b:0a:eb:
7d:85:42:a5:41:83:38:37:09:14:b4:f9:96:8d:ea:
19:11:94:d7:72:2a:1b:1e:db:4d:0b:18:50:0d:f0:
0b:8f:f6:f2:20:86:7d:2c:f1:0c:36:27:6a:0a:b1:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:79:A9:B1:17:0B:80:95:03:D4:8D:1C:C4:9C:82:CD:9A:56:F2:64
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ea:e8:20:de:a7:fb:4b:34:99:88:e7:1a:60:40:d0:b9:29:
cd:43:35:d6:45:15:26:57:e5:f6:c1:d9:02:c9:77:41:10:0a:
cc:06:ac:d6:c5:58:32:d1:2f:ba:00:f5:b2:0d:5a:ba:08:5f:
81:25:7d:d9:1f:47:11:f6:4d:d4:26:81:c9:26:17:b5:26:ae:
ed:03:53:09:4e:86:1e:86:5d:1f:13:e3:ff:07:98:d3:7a:bc:
15:45:48:01:3e:35:c2:d6:a9:1c:07:5d:2b:80:71:b1:64:93:
83:22:fd:ce:38:b8:79:20:35:73:50:1d:61:e1:7f:cc:67:ae:
a6:cf:7c:02:97:13:d5:26:42:a7:f3:66:61:3b:e8:be:36:55:
a4:ff:b3:03:5d:b0:48:fb:d7:13:5e:1d:25:21:3d:5b:50:b3:
2d:18:26:e6:c7:e5:40:aa:06:cf:13:da:db:a2:d5:c8:12:31:
32:40:dd:d7:f9:89:90:da:e0:44:ef:2a:e7:b9:8d:80:65:14:
37:58:88:25:aa:b3:a0:9e:7f:ca:c6:55:76:93:37:64:09:9c:
c9:3a:84:cd:6b:52:ed:21:eb:84:b6:55:ee:1f:46:2e:8c:63:
76:03:ef:de:18:86:2f:47:b3:5e:b7:e6:94:6f:09:38:86:e6:
38:16:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:28 2025 by rpki-client