Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: m/46tmBQylsXwL2k4h6x5sqHM9MtXgMKtbcnXRqzr0k=
Subject key identifier: E3:C7:09:3F:6F:23:EF:99:AA:D8:19:59:AE:F8:44:A1:FE:1D:EC:93
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0197CDCD9A2B46D7410712836384ED6694A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0C4F
Signing time: Thu 03 Jul 2025 01:01:32 +0000
Manifest this update: Thu 03 Jul 2025 01:01:32 +0000
Manifest next update: Fri 04 Jul 2025 01:01:32 +0000
Files and hashes: 1: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (hash: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=)
2: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=)
3: X5Pbij4rIL8Dq4Js8EvH7j1Wj7k.roa (hash: JTczwWTBd9G1q76W/pHd7YHIV9ZzN4VCk+pl3uv/6uM=)
4: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: a41hLghGjFZJROfqu9SV584uh1E023/9Psl6MuLHRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:9a:2b:46:d7:41:07:12:83:63:84:ed:66:94:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Jul 3 01:01:32 2025 GMT
Not After : Jul 4 01:01:32 2025 GMT
Subject: CN=e3c7093f6f23ef99aad81959aef844a1fe1dec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:4c:7a:dc:22:24:55:44:7a:6f:d2:f4:9e:
3d:6b:e0:99:b1:f1:9b:f4:08:38:90:f1:fc:9b:58:
56:d9:20:8f:ae:1a:c3:24:e8:d2:0e:e1:41:2c:ce:
ed:75:56:ca:b8:f7:c2:c0:f6:72:cd:05:46:b2:c5:
16:44:ba:71:1c:45:56:28:e8:c7:9d:75:0b:06:bc:
74:1f:fd:8b:fb:d0:b1:e6:4f:7c:e9:92:16:92:08:
b8:e1:e1:3f:a8:37:2a:ae:66:54:44:36:dc:9a:f1:
80:f6:75:e7:b1:da:a5:02:d8:8d:34:1a:31:9a:53:
07:1a:10:6a:c5:2b:e8:e3:cd:85:b9:b1:60:5a:77:
ad:8a:bd:d6:93:21:df:5d:f9:e5:69:28:11:5b:91:
77:85:32:c5:d6:b7:b4:6c:c0:e0:fd:b1:aa:d1:00:
6e:7b:98:84:15:1c:6c:c6:94:3e:54:86:3b:0d:65:
aa:c5:3b:de:05:f9:56:df:c4:80:46:11:aa:2a:03:
f1:6b:63:48:c0:22:bc:e5:b0:50:26:bb:e6:f6:e6:
9a:88:0b:c4:13:a5:9e:fa:0a:47:b0:d7:1a:06:0b:
65:61:f2:81:f9:1d:31:d6:8a:f4:c2:56:4f:21:1c:
d0:1e:72:d1:62:12:5f:23:b3:be:d2:19:8f:3e:e3:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:09:3F:6F:23:EF:99:AA:D8:19:59:AE:F8:44:A1:FE:1D:EC:93
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:51:20:2c:da:1b:be:6b:e8:22:2b:5e:c5:30:3f:10:59:
07:de:d3:d9:d0:36:c1:00:a8:e4:9a:c3:fa:99:b5:7b:19:a9:
bf:04:b9:8c:61:aa:fa:2e:56:5d:8d:3f:be:9c:3e:51:d5:bc:
37:eb:44:59:64:e3:ec:e0:4d:97:2b:da:32:8e:e3:57:85:ed:
c4:ed:7d:c2:b0:91:ce:32:98:90:68:0a:9f:12:f7:b8:e4:6f:
3f:ff:fa:29:df:b1:0c:96:83:2e:df:c7:ec:84:61:a0:9e:98:
00:10:58:65:67:a7:cc:c3:b3:fe:3e:77:5b:2b:d5:ca:76:1b:
34:72:16:ef:67:60:f2:f7:01:36:a0:4e:35:ba:79:ce:84:19:
52:bd:16:39:a3:37:7c:15:2b:a8:8a:8f:5b:24:7a:8c:82:5a:
e5:d8:55:3a:14:21:67:1a:ec:d9:75:46:4c:10:5f:de:2c:ee:
18:41:be:f2:09:73:29:19:22:9e:f6:be:55:36:39:e8:02:ac:
6f:07:6f:97:e0:25:4d:cf:5f:c3:6d:b9:2c:b2:af:d0:b7:48:
e2:ba:ae:b0:2d:6e:65:7b:1e:36:af:75:25:bc:e5:7e:43:82:
0d:b8:89:5a:1b:9f:86:fd:1d:f4:77:77:90:b1:96:c2:6d:b8:
1f:01:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:26:04 2025 by rpki-client