Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: QpS61mIqPcfQRBjyFytNwZi7bJd2pjJOkgZDpvgyKYI=
Subject key identifier: F4:97:A1:EC:C2:3E:B6:5E:13:1B:9C:80:19:16:5F:DD:E1:42:C3:CE
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 019921E7C40E9183D6929E20A9D30DEC0220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0DAE
Signing time: Sun 07 Sep 2025 02:01:01 +0000
Manifest this update: Sun 07 Sep 2025 02:01:01 +0000
Manifest next update: Mon 08 Sep 2025 02:01:01 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: EjAMwDUgNTUATqzWklibQO+F6rANvXewSOCiea+NZRA=)
2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:c4:0e:91:83:d6:92:9e:20:a9:d3:0d:ec:02:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Sep 7 02:01:01 2025 GMT
Not After : Sep 8 02:01:01 2025 GMT
Subject: CN=f497a1ecc23eb65e131b9c8019165fdde142c3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:2c:f4:a3:4f:c8:8c:51:d8:1a:62:b9:a7:
f1:53:8a:80:c0:11:0a:5e:50:c2:d5:00:0e:e9:12:
ef:9f:59:4b:a7:3b:eb:cb:42:1c:c7:6a:54:73:2a:
80:6a:cd:36:eb:77:df:f6:49:fd:0b:da:6d:d8:4b:
ea:82:06:70:9c:1b:13:a3:50:83:31:97:55:38:39:
a9:2b:a1:df:f7:32:70:a6:61:19:93:92:4d:be:17:
43:88:d7:5d:2c:eb:44:c9:89:52:c0:f8:e6:14:b5:
51:df:7e:df:a7:53:cb:05:9e:3d:f2:9d:ec:30:60:
ea:91:6b:fc:b8:78:6c:3e:26:29:6b:9c:f6:ba:a0:
ee:32:88:2a:a7:c3:29:4b:8d:f0:e1:42:42:13:f1:
27:45:b6:2f:53:e6:13:58:dd:c0:ab:bd:9d:25:60:
e9:ee:e5:1e:df:ec:39:86:ce:5d:3d:7f:45:71:6b:
a9:55:a1:0d:8e:db:b4:42:1a:45:58:5e:f1:cb:86:
93:54:cf:d3:e9:12:92:a9:23:11:8d:8a:a5:3a:c6:
c4:1e:02:ba:07:68:17:15:e4:3f:b0:5b:dd:8e:1a:
5a:70:cd:1c:aa:2f:87:d6:70:41:18:67:45:05:a0:
67:7f:81:3b:c1:90:61:8a:f2:6a:32:87:be:bb:fa:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:97:A1:EC:C2:3E:B6:5E:13:1B:9C:80:19:16:5F:DD:E1:42:C3:CE
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:67:57:43:5a:64:40:85:f0:ca:d2:35:40:d4:72:d8:d6:
c3:0e:c2:7d:5a:63:08:5b:ce:46:75:e6:7c:0b:a9:b1:86:e7:
dc:7d:3c:10:d0:9b:ca:01:d6:f7:72:d4:86:15:3e:48:99:49:
8a:32:fb:af:3a:67:ec:ec:65:f1:ec:29:7e:71:22:58:d5:3b:
c5:6f:9d:f5:1a:0e:f8:60:f8:82:9e:24:80:83:97:f1:f3:89:
19:5c:be:f9:52:9d:d9:a6:ff:b4:be:17:7a:a3:4a:6a:1d:9e:
54:f1:41:c7:e4:23:82:58:5b:46:68:f9:db:95:dd:44:fb:10:
5c:33:d0:5d:ae:3b:8b:3a:89:26:23:eb:4c:55:3c:91:59:b6:
ab:d7:a1:6e:f5:6e:1d:5a:8e:7a:b3:76:b0:3c:6d:c0:9e:4d:
ac:ff:5f:14:6b:90:34:08:e8:26:18:96:ce:d1:92:07:81:89:
cd:b0:b7:84:8a:68:f1:f6:ef:e8:ff:a8:5c:8d:ec:1f:9a:b6:
a7:b0:d8:29:57:9e:98:9c:aa:4a:4b:61:21:53:ab:74:d3:2f:
1d:2d:70:51:ec:86:b1:92:e7:04:2a:f4:21:f4:db:47:74:81:
d8:e5:ea:6e:73:9f:61:79:af:b0:77:c3:a5:9f:93:2a:8b:59:
2f:48:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:46 2025 by rpki-client