Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: l0HdmypwfnFYbJCmesj20K2uXuraGaELeLiYKOnFijw=
Subject key identifier: 0E:BE:18:F2:2D:19:76:7E:15:AF:67:DA:57:6C:20:54:B0:F7:04:3E
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019A71EED8E29B291F7B05D0D1769933A0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 0197
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: CDUsDykTOJjzj2PfEalP5NWfeaM.roa (hash: MDsxP0rZPQ79FjaH/eHSpSKbqQZrO2HQf+/0HhGuzhE=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: Gp04IUXr5yYa9tBqolccH+3M1NQI73gc2DO7no2xw9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d8:e2:9b:29:1f:7b:05:d0:d1:76:99:33:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=0ebe18f22d19767e15af67da576c2054b0f7043e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:c9:52:c9:64:20:df:e9:5c:4a:8a:1f:65:
7c:df:04:f4:d0:05:2a:68:7c:93:16:f0:ba:59:07:
e4:79:1d:86:ae:3a:e9:67:15:f6:ae:e0:23:bc:c3:
01:5d:0b:6d:26:1e:d6:52:e3:ea:eb:31:84:5b:7d:
43:cb:0d:a6:2a:35:dd:59:6a:ef:43:b0:05:6e:9a:
76:7e:1c:2f:b9:30:c3:55:cd:ad:f5:5d:66:2b:5c:
b7:48:63:cb:7e:1c:0c:d1:9b:e4:8e:0f:60:12:b3:
33:27:d6:3f:8c:b5:32:b0:e0:2d:13:85:84:b0:01:
74:59:ca:4c:15:da:08:fe:70:2f:43:10:29:9f:72:
02:a5:17:20:b5:58:d5:12:43:f9:e3:4e:73:cd:ca:
05:d1:34:82:e2:5e:31:9d:50:69:b7:6d:31:52:87:
51:ac:ab:f1:cc:4b:b1:48:f9:de:ba:81:87:f1:5f:
b2:3e:eb:1f:94:72:d0:1f:4a:67:7f:6d:fa:64:6e:
04:5b:53:e3:84:e6:0e:0f:ba:25:43:79:08:9c:2c:
7f:c8:ae:04:f7:53:1c:32:28:6c:92:88:7b:31:b3:
da:0a:fb:d9:8e:4f:79:56:1c:f1:ee:34:a6:f2:45:
88:31:e0:83:a0:9b:a7:81:8b:e4:5d:5a:81:ff:06:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BE:18:F2:2D:19:76:7E:15:AF:67:DA:57:6C:20:54:B0:F7:04:3E
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:71:10:9a:f6:56:02:f0:fe:3e:99:30:84:9a:5f:0d:93:f2:
bf:4d:07:69:7e:27:2c:39:2e:63:3e:c4:bb:fe:5f:59:f7:f8:
65:26:cb:4f:1e:80:52:d0:b3:e1:65:13:c9:97:65:22:d6:79:
89:e8:e1:09:d5:ff:87:c8:4c:11:d1:71:86:44:3e:da:65:f8:
b9:45:ff:c8:c3:1f:b3:c9:4a:03:a2:7b:b3:c5:b5:11:82:da:
4c:ec:84:bf:17:6b:44:92:e1:d2:14:7c:64:2b:9c:83:90:19:
e3:45:d3:38:2b:8d:be:92:d0:7f:86:b4:fc:20:05:ec:33:58:
05:38:1d:1c:d9:c4:07:2a:c6:95:b2:63:ea:9a:25:7d:75:be:
c0:3e:02:ad:b0:0e:67:44:ba:b2:09:ea:2a:ed:ec:63:d1:39:
50:60:ac:c8:0e:b7:3f:f5:e0:96:d0:97:ea:82:5a:b2:a9:e5:
44:27:6b:fc:78:de:2d:75:d1:10:de:7a:e7:f5:a8:94:df:24:
08:a2:6f:86:eb:f8:ba:2f:91:da:8d:35:40:50:5b:2e:05:9d:
75:f9:bf:c1:bb:9a:cc:89:d2:ff:b0:dc:7d:41:1a:17:6c:34:
d7:df:3d:f4:a7:41:6b:bd:b9:e3:b4:b2:c3:fc:9a:5b:bf:31:
34:aa:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:19 2025 by rpki-client