Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: /sXH+GGSHwkUSboFmbUJEhIn8LY4v19ITV+qD/aygDI=
Subject key identifier: 3E:6B:C0:47:6C:7B:8A:E7:41:7C:9A:7E:CC:EB:AB:F0:5E:31:9B:05
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 0198D4E046DBE001661E47BEBDFC9E03F3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 0FDC
Signing time: Sat 23 Aug 2025 03:02:04 +0000
Manifest this update: Sat 23 Aug 2025 03:02:04 +0000
Manifest next update: Sun 24 Aug 2025 03:02:04 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: QG7Ze6c+pmCDoBhmLdsT86ZU0hMPi4UDSpZHEKXgx1g=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:46:db:e0:01:66:1e:47:be:bd:fc:9e:03:f3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Aug 23 03:02:04 2025 GMT
Not After : Aug 24 03:02:04 2025 GMT
Subject: CN=3e6bc0476c7b8ae7417c9a7eccebabf05e319b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:22:bb:44:ae:79:17:49:f1:15:c4:7f:99:
4d:4b:4a:01:e6:1a:1b:d4:0f:ae:ac:85:e3:b5:63:
82:ed:c1:d8:fc:7f:34:69:1c:27:9d:b9:fe:76:b1:
e5:71:17:a9:3f:76:c5:ed:8a:c8:15:13:12:56:61:
90:c2:d9:f3:00:5d:97:4b:04:76:19:7e:bd:39:67:
07:ce:4d:be:13:18:dd:24:6b:91:a5:48:98:c7:1e:
28:2f:46:dd:3c:0f:42:01:62:c4:7a:74:87:3c:d8:
0f:7f:72:67:75:03:33:f9:c7:04:b9:25:fb:c5:09:
23:43:87:35:b6:6b:7c:f1:9b:33:7b:37:f3:04:56:
0d:b1:78:3c:07:5e:2f:d7:90:1f:21:f5:eb:ae:c5:
86:88:6a:35:c4:0c:2a:19:e0:86:ee:a9:2c:fd:cb:
57:f3:67:7b:05:d1:25:99:80:40:0e:11:69:16:09:
2b:9c:ed:c4:1b:fd:f6:1e:60:5c:af:dd:d6:26:c2:
be:f9:f0:fb:81:f3:72:17:10:80:cb:f8:3b:38:c7:
51:04:c3:ff:d2:94:dd:2d:ef:b7:89:bd:2c:87:2a:
ad:55:db:ef:19:04:2e:34:bd:8d:f9:a5:56:4e:7f:
41:0f:a5:cd:b7:25:bb:aa:c7:a2:97:dd:5b:08:c2:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6B:C0:47:6C:7B:8A:E7:41:7C:9A:7E:CC:EB:AB:F0:5E:31:9B:05
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4d:06:ef:2c:07:af:7b:77:14:8d:d2:20:0e:1f:8b:61:ed:
37:4b:f1:cf:c1:6b:6b:96:74:fb:0e:8e:f1:44:0b:d5:70:60:
7e:62:94:af:cb:e3:ad:77:b3:56:1c:4e:8f:54:81:5b:cc:28:
af:9a:76:e3:c4:68:85:5f:4d:a7:2a:d7:c3:b8:b9:4a:2e:28:
a3:50:eb:4e:2f:0d:10:b4:6a:2f:fd:ed:d0:0b:bb:96:51:94:
b1:cc:ce:62:93:52:74:22:9a:5a:84:c6:91:07:a3:8b:a7:a3:
18:96:8e:5e:a1:91:04:41:c0:6e:c4:c6:7e:39:d7:b5:40:29:
3b:53:bf:28:ba:c9:45:b9:c2:52:b5:da:36:8a:97:42:2a:aa:
d6:e6:b0:af:48:de:f3:4f:dd:1d:e1:19:f8:b5:81:f6:64:8d:
c8:f7:47:c3:ff:5a:8f:94:e0:02:16:50:72:eb:83:30:72:6b:
71:ed:68:6b:5a:c8:22:c4:ee:d5:92:7f:f8:2e:a7:b2:40:e5:
3f:5b:8b:a2:66:8a:0a:6e:f1:74:e4:4f:46:5c:d2:2e:9f:41:
1c:9b:b2:65:2e:2e:2a:62:53:bf:3c:83:af:3c:20:ca:34:d1:
08:ec:39:59:e8:73:37:7a:c6:5e:ce:e3:5c:05:48:76:ab:f9:
4f:cd:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:41 2025 by rpki-client