Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: E0dYQWzQ8tpAP6JakiVHEjBwDdF7ulycx7exti8KCKs=
Subject key identifier: 9F:A0:4D:2E:50:53:62:A1:1F:DA:AA:78:F5:49:A4:47:05:C2:70:1A
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 0198D54E47B8CECCD79A84322A13DC08DFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 09BD
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: VFHzDSCHzRl2qvsGrYCEAUAZENz5466ML62HGPxtylM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:47:b8:ce:cc:d7:9a:84:32:2a:13:dc:08:df:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=9fa04d2e505362a11fdaaa78f549a44705c2701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:e6:56:d9:bb:98:87:be:a0:8c:43:2f:ed:
0d:76:52:dd:58:bc:34:ab:58:e3:12:de:99:00:34:
23:66:d8:04:22:4a:9c:62:59:26:a8:75:a5:42:b9:
5d:41:03:71:18:a5:01:74:dc:5e:fa:5a:0f:67:08:
9e:2a:ac:fb:c3:4c:2e:da:1d:0f:b8:70:6d:41:a0:
5f:16:0d:22:06:21:57:02:a7:50:83:70:aa:05:ae:
f3:50:73:9d:39:06:a0:6c:5f:57:80:2f:78:92:88:
39:45:4c:fb:07:4c:9d:99:c8:49:92:d5:19:64:c3:
ee:cc:84:ca:e4:27:13:10:31:b5:fe:49:77:33:9f:
3d:bf:e4:ae:30:2f:19:da:d5:c3:f6:c1:ac:e8:ae:
5f:4e:17:e7:d1:74:15:bc:c2:41:40:77:77:e1:c9:
76:a2:2d:2e:19:bb:58:57:a1:85:0d:22:69:42:2b:
a0:d2:f1:1f:34:03:f9:d6:fc:9d:4b:5f:c8:b6:42:
22:bd:81:db:69:de:32:15:84:8b:75:78:7d:cb:4d:
17:bf:70:e1:4e:fd:47:d2:2a:48:b2:72:50:aa:00:
38:f4:27:48:ac:36:00:2f:c2:e6:43:83:71:b8:4d:
6e:b4:36:51:2e:e1:e1:9f:2e:69:0d:3f:06:54:35:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:4D:2E:50:53:62:A1:1F:DA:AA:78:F5:49:A4:47:05:C2:70:1A
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9b:59:d8:db:4f:ff:27:a6:20:43:82:3e:13:49:17:ec:bf:
d9:9f:02:ed:f9:a6:a0:bf:c5:5a:7e:c5:4c:6c:fd:a7:87:9d:
bd:b4:b0:cb:1c:75:66:20:1c:ff:c6:1e:98:c7:b5:53:a4:96:
44:48:df:e6:98:c7:c1:b3:3f:9d:25:19:75:72:65:6b:14:50:
d0:a8:74:ff:3d:4d:90:23:7a:a0:32:ce:af:da:dd:f5:db:62:
a6:d2:a3:b0:96:59:cb:c7:57:2e:aa:07:57:47:88:83:cc:65:
37:24:10:f6:15:27:63:f4:73:01:42:31:27:dc:87:d6:a6:29:
d7:88:26:95:b3:4e:1a:6d:df:69:99:c2:c8:65:05:89:b6:40:
75:e5:e2:ab:8e:f7:c8:a7:ce:9a:27:38:84:20:f3:4f:bc:16:
ee:f1:74:50:bb:81:fc:bd:fb:78:22:a6:e0:08:26:cb:a0:66:
9c:f4:97:43:89:fe:e9:3b:58:4a:e7:cc:44:eb:30:70:3e:d0:
45:ab:65:5a:7b:52:5c:b5:32:0d:cb:04:e8:b4:f8:99:3f:17:
7a:e8:51:fc:40:b6:91:a3:87:42:bf:b8:b1:97:22:82:60:e7:
b2:c1:2e:bc:dc:13:9e:ed:b7:08:ea:7b:15:cb:a6:35:87:60:
6b:f7:71:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:57 2025 by rpki-client