Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: VhSaIl+FXzpssnsSrHuL/pfufmS72GrhJAdPQZIFI/A=
Subject key identifier: 8C:12:58:AF:47:4B:C4:C2:1D:98:A0:0E:2B:C2:A1:5F:61:46:22:37
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0199FBEBAB42ADD115DCA47650DE93188915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0D70
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (hash: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=)
2: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=)
3: X5Pbij4rIL8Dq4Js8EvH7j1Wj7k.roa (hash: JTczwWTBd9G1q76W/pHd7YHIV9ZzN4VCk+pl3uv/6uM=)
4: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: FrbeONTXNKGYEwRQkYeudz71YYl+0CYJSowtHCouQlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ab:42:ad:d1:15:dc:a4:76:50:de:93:18:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=8c1258af474bc4c21d98a00e2bc2a15f61462237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:1c:ab:e0:6d:a1:98:7f:47:91:8b:89:b1:
20:a4:d9:61:a5:ce:02:57:19:e3:c5:21:18:50:c1:
50:07:ed:65:78:8d:44:16:a1:9e:2b:71:27:fc:db:
ef:82:6c:40:ba:6f:19:6b:66:a3:27:a4:df:b9:6d:
ec:3b:1d:d4:1b:1a:9f:93:73:85:66:e3:92:01:d7:
95:be:06:13:ca:66:58:9f:71:9c:c1:c3:29:f6:71:
5f:60:e8:7b:f1:4f:0a:01:18:1d:1c:79:56:df:9b:
27:5c:d8:9b:d5:1d:8f:c5:5c:fe:cb:b1:be:5e:1b:
d5:06:30:1a:48:0b:6a:ea:24:f9:93:25:2f:c4:ca:
61:81:af:30:f0:d1:f5:0e:20:b4:4c:d8:ff:72:df:
ad:d5:57:08:58:cb:6c:0c:33:82:65:09:d0:58:41:
ac:e4:b8:20:8c:e0:f7:09:92:a7:bf:c1:b1:c5:19:
6b:4a:d9:9f:23:6c:4d:1b:e8:99:40:aa:b9:a5:ae:
64:b0:61:f1:32:7a:ba:05:f6:2d:74:28:3f:e6:57:
01:37:8a:0e:10:2a:5e:9e:dc:77:6f:fb:81:82:ba:
e4:26:1e:03:5f:ca:4c:8e:dc:0d:23:ff:52:ba:39:
2a:80:4c:07:8a:db:a3:ee:e1:a0:de:e9:0c:76:1b:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:12:58:AF:47:4B:C4:C2:1D:98:A0:0E:2B:C2:A1:5F:61:46:22:37
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:c6:84:74:33:c6:30:f7:a9:eb:4f:41:32:87:d3:88:29:
13:52:4b:37:d5:9b:5c:cc:7b:0d:e8:a0:ee:2d:7f:93:ab:82:
f6:e3:b5:08:3c:8f:ba:11:63:5c:68:68:42:3a:52:a8:a4:52:
d5:64:b2:60:a1:e3:25:b9:71:30:10:0a:30:02:f6:2d:f8:c2:
94:07:ad:a4:7a:3c:03:de:3e:9a:64:3e:31:21:53:c7:55:19:
86:0e:c1:fb:84:4b:c4:a2:4e:c3:ce:2e:06:62:3e:23:6f:b7:
40:56:86:5d:61:65:65:68:f2:7e:6d:f7:a4:a7:a3:b4:0a:ce:
6c:23:b6:01:ac:e8:b9:9c:54:c5:a8:1e:b9:d0:f9:25:48:01:
86:c5:a7:15:c3:5b:fd:8a:21:a9:9f:f0:36:cd:3c:e0:cb:a5:
6a:95:04:3a:1a:66:5c:ca:a5:1e:01:a4:ca:64:43:8f:89:bd:
0a:db:40:5b:37:7a:b0:4a:94:3e:3d:be:fe:89:9e:86:8a:29:
62:54:f6:39:9b:83:cf:2b:48:d6:78:ff:41:a6:d6:5a:b6:c8:
7e:35:2c:89:fe:57:a0:1f:1e:56:08:9b:08:97:80:28:93:b2:
59:8c:f5:0e:0c:f0:7b:b7:fe:53:24:73:52:fd:f4:4c:d7:74:
b1:7b:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:25 2025 by rpki-client