
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: GBv8Hy9IsSQxTcz1qfJmRNUrbTPoucnlIpS+Sr7iIec=
Subject key identifier: 9E:AB:AC:C6:B3:D7:7B:C2:68:49:AE:3A:8B:01:41:34:BB:A2:22:F2
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 0198D697F1D3783A52CE327CEA46E9EA88C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: C2
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: CDUsDykTOJjzj2PfEalP5NWfeaM.roa (hash: MDsxP0rZPQ79FjaH/eHSpSKbqQZrO2HQf+/0HhGuzhE=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: l7Mgrqvq1un6PqBQ0cZqQITA36foiteZjt3f/Vy84qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f1:d3:78:3a:52:ce:32:7c:ea:46:e9:ea:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=9eabacc6b3d77bc26849ae3a8b014134bba222f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:84:cc:5b:92:5f:dc:96:b1:ab:f2:1c:ab:
05:f4:c2:9d:21:f4:af:43:1d:45:4f:0d:63:28:a2:
5e:62:24:a4:2b:05:65:3b:98:4d:76:38:ee:52:72:
ad:37:54:d2:25:e3:c7:0e:28:61:ff:42:14:86:89:
cd:ed:77:6f:a2:fe:15:4f:1d:4b:4e:3f:01:2a:79:
8e:73:04:43:cf:64:33:65:a6:e5:fb:be:11:7a:86:
58:ff:f9:57:c1:03:a0:e8:27:af:cd:82:4e:0c:60:
bd:ba:17:a1:e4:ff:66:75:17:fe:25:c6:8b:b8:d3:
42:79:9d:d4:81:98:ab:8e:d0:13:cb:3c:69:58:51:
fb:ec:1c:b6:12:2e:b1:06:0b:a8:f5:40:a7:ae:45:
a1:88:c9:34:cd:6f:f6:62:9a:97:d0:d1:6a:6a:fb:
2a:a2:25:df:44:cc:e9:84:06:26:00:54:15:e3:3f:
db:67:b9:83:bf:c4:c8:11:07:fa:8f:78:db:f9:ae:
11:74:c1:48:91:18:ca:44:dc:9b:6b:be:89:10:90:
24:3f:0c:63:89:3b:5f:f0:b3:8d:63:47:e6:49:bc:
b8:be:75:e4:e9:48:da:b5:f9:7f:c6:e7:3c:5a:93:
9d:c4:0a:f3:1c:33:f4:f7:51:22:7a:e1:7d:4b:7f:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AB:AC:C6:B3:D7:7B:C2:68:49:AE:3A:8B:01:41:34:BB:A2:22:F2
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cb:92:66:3a:d5:40:2e:59:8f:34:da:12:ac:0f:6d:9a:3a:
34:2b:b9:bf:fc:89:e3:0d:77:c1:c6:05:57:c8:4d:68:64:6b:
93:36:c2:fe:1a:52:85:f7:ac:4d:a1:8b:b6:2f:1a:28:43:b7:
27:23:df:d9:9b:31:12:32:a6:ca:02:34:c5:a2:fd:3e:0d:83:
e4:7f:e4:ae:fd:7b:71:43:7a:8f:f0:bb:72:0f:4e:ea:69:24:
bb:95:81:9f:80:c6:11:68:e9:4f:7d:b5:85:c8:08:0f:86:8a:
b2:11:78:bd:6c:cd:c1:bf:03:0b:61:fd:55:00:79:46:4b:26:
7d:6d:47:c2:a4:28:7a:9f:c6:61:e3:f5:71:5b:5e:e2:76:85:
c8:ae:1f:d3:25:37:90:02:17:72:38:b1:c8:11:50:24:cc:6e:
f6:c3:d9:af:5e:36:48:5d:5c:b9:db:40:7b:61:c4:86:66:a3:
54:b6:bb:22:cc:59:5e:5b:01:91:1e:1f:ae:31:74:be:05:12:
4e:c9:72:72:cd:be:35:13:3f:6f:d3:1a:a6:7e:cf:b9:df:42:
93:0c:dc:f3:89:62:99:72:ca:1f:ea:a5:fc:d9:7b:6a:e9:d5:
fe:32:9d:0b:33:da:70:88:c0:96:34:bf:79:2e:36:8a:4d:eb:
4f:76:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:29 2025 by rpki-client