Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: 0iOMEqX1339+aKztENBiiYAqXJw+wAKS1FBfcGqX1mM=
Subject key identifier: BC:7A:74:C3:22:AD:FC:8B:4E:2B:10:25:BD:71:F9:93:12:AB:CC:24
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 0199228CC95E97116CF5C761F50E12CE683F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:01:15 +0000
Manifest this update: Sun 07 Sep 2025 05:01:15 +0000
Manifest next update: Mon 08 Sep 2025 05:01:15 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: gtEG/1C8+vD//v7sco97ZLXGLoD6z14Yh90zWkZDjcs=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c9:5e:97:11:6c:f5:c7:61:f5:0e:12:ce:68:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Sep 7 05:01:15 2025 GMT
Not After : Sep 8 05:01:15 2025 GMT
Subject: CN=bc7a74c322adfc8b4e2b1025bd71f99312abcc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:0f:e7:95:ec:e3:06:24:b8:32:2e:d0:0f:
83:d9:e5:48:35:f5:e3:86:f2:4f:d2:21:f9:27:b8:
a5:87:62:ad:84:9f:e5:11:60:c1:05:82:e5:97:1f:
b7:10:c9:5e:25:76:14:15:0e:a0:e6:2e:4f:87:42:
6f:61:4c:99:10:27:fa:4e:e5:47:7f:19:b2:10:2a:
e7:58:2b:9d:1a:37:49:13:aa:ff:02:ed:5c:ef:c8:
a7:09:d2:1a:7e:74:cd:e1:52:b0:4c:e8:8a:19:8f:
6b:3d:21:18:32:e9:d4:b3:79:07:1b:e7:62:8c:18:
59:53:d2:94:2a:ee:fc:2c:ca:63:df:38:37:e8:4d:
29:b3:3e:46:cb:f2:ca:c4:03:ad:cf:09:e2:b3:0c:
86:1f:b5:b8:bb:9c:bb:3c:6c:98:34:90:53:3e:71:
56:16:a9:ce:0e:4c:88:0a:db:6d:0e:c9:1a:de:1e:
09:1e:36:b5:3c:58:41:cf:ab:1b:e4:69:ce:62:ec:
db:a3:ee:03:6a:5d:ea:f9:4f:5c:d8:57:6e:85:74:
e0:94:fc:9c:9f:38:7b:c5:07:c0:1d:5d:6a:f3:57:
36:11:fd:33:ed:5c:71:23:8a:b8:8a:5a:8b:9d:28:
20:14:a2:e5:66:bf:be:ce:51:d7:d2:aa:ed:72:76:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:74:C3:22:AD:FC:8B:4E:2B:10:25:BD:71:F9:93:12:AB:CC:24
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:74:1a:40:af:8d:e7:5c:df:e1:d6:56:fb:21:1e:b4:8a:7d:
9b:65:e4:95:c7:11:08:ae:fe:e1:64:de:ea:59:d4:c7:d3:48:
25:16:df:3a:74:6a:6a:c3:d9:6e:b9:22:a5:86:b6:ce:27:b0:
11:cb:bb:d4:48:bc:33:04:0c:41:c2:b9:97:6e:c9:fc:17:9d:
62:c6:6c:d2:06:aa:c8:e4:9a:59:92:76:46:70:fb:47:40:8b:
dd:49:7d:16:5f:30:19:2c:97:ca:68:90:d6:e9:27:7d:65:d5:
58:45:9f:8b:5d:55:64:60:0a:00:5f:ab:a9:5d:d0:1c:e7:16:
03:92:55:42:24:d0:47:b9:22:b6:f6:6c:9a:f4:a0:b4:a5:43:
d3:fe:07:3b:a6:08:5e:0d:e0:2a:ad:b5:47:b2:c2:b6:0a:d0:
46:dd:db:ad:58:b3:26:15:3d:75:bb:9d:4e:8a:e0:96:94:d1:
1a:00:28:5c:d0:b3:e9:b7:ee:0f:5d:0d:34:8b:46:8e:77:b0:
51:94:20:1c:d9:f3:79:c4:99:eb:ff:f4:df:f0:64:02:19:44:
6a:48:84:fb:c6:19:ba:7e:4e:34:e6:c0:cf:6e:ee:67:20:72:
e7:fc:ab:ca:69:cf:36:17:76:e0:fa:ea:8e:8b:3b:4d:a3:bb:
4d:70:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:21 2025 by rpki-client