Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: wOeYGEddsiWKzBwyZfdpvFepvJwN7/gU8LtrdEjLYtc=
Subject key identifier: 94:32:D1:A0:1E:3E:74:4F:FD:46:1D:6A:BD:D2:9D:BA:FE:C0:EF:38
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 0198D4E06788AA08FE525134FD74654027FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0914
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: vhlHPjNd2I4ScaIiAar0pvN9hUKZCr89N60ovSX99Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:67:88:aa:08:fe:52:51:34:fd:74:65:40:27:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=9432d1a01e3e744ffd461d6abdd29dbafec0ef38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:ed:7b:fd:83:d5:9c:c6:6e:bb:0a:61:84:
05:0f:12:24:9e:2a:99:a4:6d:fa:2b:06:42:79:d0:
8a:fd:cc:97:7f:68:94:07:71:87:47:5f:a1:8c:2e:
6d:2e:24:11:a4:71:6c:79:67:c4:3f:1f:1f:ff:c0:
a9:ea:93:b9:06:a9:84:f7:0d:04:b8:e7:05:13:03:
97:03:1f:7f:74:a2:0e:1e:c7:3c:01:96:ce:ac:a7:
6f:86:38:91:e5:44:2f:65:fa:91:4b:4b:8d:72:89:
df:5b:fe:c8:8a:c4:00:64:6e:b7:f8:6a:42:e6:48:
46:25:33:1b:8e:7b:49:1f:0d:1c:69:a9:c0:46:33:
94:c5:53:5d:5b:2e:2e:a6:91:e8:2b:a8:12:fd:84:
19:9c:36:f7:ab:83:9e:b0:bc:cc:5a:a2:17:cd:91:
aa:20:f6:b8:90:3f:19:1b:7a:03:e8:85:1f:b3:af:
4e:0d:61:68:10:05:88:46:13:32:36:fd:01:d4:58:
fd:bc:44:25:e6:df:51:35:9e:a6:a7:a7:f5:04:87:
c8:ef:ab:55:68:c3:d1:38:81:81:5b:43:31:3a:02:
da:9f:20:b9:8d:9c:4e:79:73:eb:6d:5a:7a:00:c4:
9d:05:86:45:5a:32:25:00:14:e3:93:a0:c4:39:11:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:D1:A0:1E:3E:74:4F:FD:46:1D:6A:BD:D2:9D:BA:FE:C0:EF:38
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f4:6b:15:1a:82:c5:31:2c:6b:97:ae:b4:d8:58:da:d6:67:
2e:19:7c:21:a0:16:05:7d:d7:f3:cb:a6:68:71:5c:69:35:80:
2f:f9:5f:07:c3:e8:9c:6e:ef:92:1c:a9:de:61:68:4e:6e:1b:
e0:82:39:93:e6:5a:dd:e9:8e:d3:3d:dd:ba:ca:15:38:c0:13:
a5:40:ed:40:e6:15:eb:44:5e:3a:43:8c:a5:7f:c6:4c:94:13:
87:d9:7c:3d:88:ff:57:6e:37:c2:82:16:fa:d0:0a:93:96:b4:
8d:14:dc:87:84:b9:64:95:47:6c:f9:99:6d:3c:3b:09:2e:ba:
7d:8b:ad:f2:62:bf:59:29:70:05:8c:76:48:dc:a2:ba:95:27:
db:bc:9f:aa:bc:73:2d:f2:52:38:d1:21:25:19:07:d8:70:45:
b2:0d:23:ed:df:99:d8:29:6e:82:d0:a9:6f:86:dc:bd:50:29:
d3:e4:08:18:b7:76:ed:50:b4:de:10:51:a3:0a:23:56:9c:66:
ba:9a:9e:1e:33:7b:65:77:48:e4:a9:0c:eb:0e:48:12:e3:e2:
b3:2e:61:7b:2e:15:fd:46:18:ea:0b:19:59:38:32:9e:52:45:
3c:7a:b1:fb:00:2d:8b:ce:64:f8:e0:1e:7c:01:db:b9:a2:6d:
94:26:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:24 2025 by rpki-client