Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: BDWbhjfvD5cccIzre+CifKC9uzc4+kRxHjzxAL+GYJg=
Subject key identifier: 39:80:E9:BB:87:D5:30:DA:94:CC:E8:BB:D3:AA:86:03:93:37:FD:79
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019A4EF54B1CA24439CAC81694EF6D4C7C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: ovNQoxQQuRiIPqkp1rFQsR6Sp1VSJy/NKv+9oYn1Xgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4b:1c:a2:44:39:ca:c8:16:94:ef:6d:4c:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=3980e9bb87d530da94cce8bbd3aa86039337fd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:63:95:4a:c1:3b:b5:85:cc:df:07:b0:29:
cd:cf:ca:63:7d:3c:da:a3:6b:82:1f:a9:85:05:04:
ad:df:95:06:43:96:79:5e:21:cb:df:fb:01:59:65:
ae:5c:87:9c:86:6c:46:94:86:f6:65:47:3f:1b:ba:
08:b9:b7:57:7a:2e:dd:33:47:d2:07:e3:65:23:51:
b2:20:a7:ec:18:1c:e0:6d:fa:03:01:58:17:47:6f:
07:85:ef:9c:48:d1:f6:86:67:93:ef:d2:05:24:0a:
33:59:9d:28:47:e9:44:8c:ea:2c:ac:29:0b:18:7f:
0e:84:d6:45:e1:52:d8:3e:48:81:09:79:77:d6:d9:
0c:ca:8d:5f:c8:4e:b6:e4:6f:8d:df:33:ee:83:0b:
7e:95:24:27:42:06:9f:55:92:de:74:28:04:4a:c6:
7c:a7:44:54:bb:2b:13:63:a4:a1:9e:8a:c8:5e:3c:
99:52:35:25:5e:90:09:7f:c5:c2:62:dc:a8:56:8e:
41:16:12:c5:ae:e6:4c:ac:78:39:ab:71:99:89:b1:
21:16:f4:d5:fe:17:c3:ca:b6:a9:bb:3a:c7:49:96:
64:0a:38:c0:dc:6b:ec:0a:bd:f3:c0:13:45:db:53:
e9:b9:f0:44:27:38:fe:10:45:d3:0c:b8:d6:d4:ff:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:80:E9:BB:87:D5:30:DA:94:CC:E8:BB:D3:AA:86:03:93:37:FD:79
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:b5:38:5d:f1:7b:a2:41:ee:a0:8e:44:57:1f:ff:00:94:
4b:94:a4:45:e8:ae:48:57:0a:b5:07:5a:d1:e4:a7:7a:12:4a:
e5:59:e6:cd:59:c8:ee:05:0d:81:6d:3d:36:d8:13:90:39:b4:
ac:c5:bc:69:a8:d6:b4:57:4c:85:98:9c:10:be:c2:9c:f7:fa:
ad:11:bb:c4:91:42:d8:83:1a:bf:95:a5:00:bb:0a:ce:f8:74:
24:9e:fe:a9:57:f3:b7:cc:d4:c0:8a:dc:f0:53:08:28:77:59:
32:f2:57:a2:3d:58:77:2c:72:44:49:c7:0c:d7:f1:bf:71:cb:
f2:39:18:1b:43:2e:0c:fc:9b:fc:11:51:37:65:1b:e7:22:d0:
1e:c7:c7:b1:5b:80:08:8b:1c:60:3a:62:21:25:7b:6c:7d:80:
16:6c:2e:75:94:e0:cd:67:ad:f8:f8:d5:d0:18:d5:38:b6:a7:
d1:c9:c3:31:cc:9f:ad:d0:29:4e:76:82:85:f7:af:8c:db:68:
d4:db:ad:61:64:95:75:02:f0:7e:81:f4:fb:d2:19:0e:ce:a3:
7b:bc:81:d5:e0:ff:61:20:b2:ae:fb:20:50:38:50:a9:14:78:
f2:5f:3e:f7:05:92:70:ca:61:86:d4:5d:2a:e7:a3:36:78:5d:
59:01:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:42 2025 by rpki-client