Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: yMtvw+GC5t3xftYew3os/irVT32YARzVCoC6WiJ6E4Q=
Subject key identifier: 45:92:57:29:61:B0:CE:5F:1E:71:D1:D6:DF:36:53:9B:B0:C6:66:30
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0198D4748CE57D94788E8722840F956C8A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0CD7
Signing time: Sat 23 Aug 2025 01:04:24 +0000
Manifest this update: Sat 23 Aug 2025 01:04:24 +0000
Manifest next update: Sun 24 Aug 2025 01:04:24 +0000
Files and hashes: 1: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (hash: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=)
2: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=)
3: X5Pbij4rIL8Dq4Js8EvH7j1Wj7k.roa (hash: JTczwWTBd9G1q76W/pHd7YHIV9ZzN4VCk+pl3uv/6uM=)
4: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: ceRDBTTX+IypG81GeeJJc58f8XMQ/IktsApuzgTUTSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:8c:e5:7d:94:78:8e:87:22:84:0f:95:6c:8a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Aug 23 01:04:24 2025 GMT
Not After : Aug 24 01:04:24 2025 GMT
Subject: CN=4592572961b0ce5f1e71d1d6df36539bb0c66630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:1d:fd:a0:72:bc:7a:fc:bd:3b:0a:6d:3a:
eb:60:ea:33:49:6b:7d:cc:7d:89:7b:bb:21:8b:57:
b9:80:d9:01:51:41:8f:10:1e:24:15:c8:df:82:47:
fd:0d:9d:b0:21:65:bf:3c:75:b4:dd:b0:22:ed:24:
21:5c:d4:5d:23:6c:96:91:28:0d:90:cd:fe:30:8a:
d6:db:6e:da:80:78:46:70:ab:f8:ca:0a:57:1b:40:
0a:19:d9:a2:d3:fb:12:2e:a0:b7:c7:08:cc:f0:ae:
c5:77:d1:5a:d9:63:19:57:d1:2f:5c:d7:82:2d:59:
3c:8c:94:3f:9b:32:d5:3f:d3:5f:7f:6c:0b:4d:8f:
7c:2e:52:6c:7c:5f:b7:1a:3f:c8:1e:3d:2b:57:ee:
50:7a:4a:eb:57:36:ae:32:01:5c:cc:dc:f9:1c:7f:
f4:74:ee:fa:14:d2:8a:61:bc:63:60:3e:ce:24:96:
f7:f5:42:d8:e7:b1:0e:ee:59:ee:61:67:51:8d:45:
4c:ef:7f:08:50:08:a9:ae:6f:20:27:2d:3a:64:8c:
f4:b2:83:d6:17:57:51:7e:90:12:99:b1:e7:4c:f9:
1e:cc:11:9f:fe:a4:68:33:3c:a5:81:6e:01:5e:2a:
ec:54:f8:b8:b6:0b:ea:25:c3:fe:71:73:14:02:d1:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:57:29:61:B0:CE:5F:1E:71:D1:D6:DF:36:53:9B:B0:C6:66:30
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:25:27:b6:77:8f:5e:8c:f2:35:04:c6:f3:9b:11:01:3c:36:
2e:17:f5:b0:62:5c:ef:37:2b:71:6a:f6:49:4f:0e:ed:e9:15:
0e:92:be:35:e5:a1:40:48:12:ac:b9:e6:ab:ba:b6:20:99:b2:
41:8d:6d:88:d9:bc:3f:81:81:75:c5:0c:d2:8f:00:91:82:49:
ab:89:ee:b5:39:7a:a1:9b:d6:6f:dc:50:58:77:ee:b8:09:12:
ce:66:f2:0a:8e:01:2a:3a:d1:44:a7:25:98:a8:f1:26:68:84:
fa:85:72:d4:11:1a:01:6d:fe:59:63:ec:09:4d:53:a0:96:30:
b9:89:71:3e:a1:a3:a6:fc:7d:b8:aa:b4:8b:f5:a3:70:6a:e8:
a1:bd:3a:28:89:eb:a4:6b:97:03:8d:8f:2e:17:5e:c3:64:15:
e6:fd:17:99:86:cf:a8:bf:59:fb:33:7a:7c:3f:fa:c4:ab:26:
31:0d:75:73:b0:5b:71:dc:6f:71:92:6e:45:52:1e:ba:74:f8:
f2:8f:53:04:8b:b6:45:87:bc:ed:a8:cd:8e:92:05:b1:03:47:
77:4d:f6:f3:be:ad:ff:20:4e:88:35:98:4a:c2:06:73:8c:4f:
d4:b1:77:b2:8a:3e:96:ae:a8:b4:43:92:a5:d2:88:15:ad:78:
a9:d7:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:01 2025 by rpki-client