Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: 6oSY8E5E0bpPjVQIlddeFGXQgNaruphYcHP8owXqIcE=
Subject key identifier: 2C:B4:F0:29:7D:98:B6:53:4D:F0:10:6D:06:93:CA:75:8A:AD:24:37
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019916510C55E25B8DC23DB628CFBD6ACCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: E3
Signing time: Thu 04 Sep 2025 20:00:34 +0000
Manifest this update: Thu 04 Sep 2025 20:00:34 +0000
Manifest next update: Fri 05 Sep 2025 20:00:34 +0000
Files and hashes: 1: CDUsDykTOJjzj2PfEalP5NWfeaM.roa (hash: MDsxP0rZPQ79FjaH/eHSpSKbqQZrO2HQf+/0HhGuzhE=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: BbCPOYzt0q+Ll953CBTji52EyzFEHTkBjJVk4uD+VDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:51:0c:55:e2:5b:8d:c2:3d:b6:28:cf:bd:6a:cc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Sep 4 20:00:34 2025 GMT
Not After : Sep 5 20:00:34 2025 GMT
Subject: CN=2cb4f0297d98b6534df0106d0693ca758aad2437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:12:bb:93:d6:e6:29:e0:12:13:96:f9:4f:
72:67:c5:c9:7d:6f:6f:03:a0:5e:9a:28:d6:df:b1:
e4:56:33:77:60:56:e8:c5:f1:48:1e:75:56:d1:df:
91:2f:b5:1d:64:95:9c:c5:4b:c9:ea:3d:a9:07:e5:
3a:d3:08:64:8a:da:95:6d:fc:13:24:d1:04:be:3f:
f9:55:e1:88:7e:c5:fd:e6:38:d7:a9:ff:b4:0a:fd:
7a:9a:1a:69:de:15:ea:64:cb:21:ad:8d:c7:10:f6:
e7:92:f5:52:5e:eb:aa:a8:74:af:9b:15:e8:75:e5:
89:76:3b:ed:1b:bd:9d:7d:c5:55:6e:df:e1:9f:08:
46:fd:9d:5b:b7:37:64:c5:8f:ef:ad:65:d8:73:f5:
51:a4:a2:72:83:32:f8:53:86:e4:7f:66:25:04:ca:
45:cf:9c:71:fc:ac:37:9b:fc:c0:18:56:f9:50:ca:
ed:39:bf:5c:5e:49:d7:21:d8:aa:ef:00:f6:65:c5:
71:9a:07:60:5c:11:a0:f1:01:1b:a2:51:21:97:b9:
60:97:56:5f:1f:5b:4b:79:f4:fd:25:0a:d6:54:c0:
de:59:c4:37:85:27:85:3c:59:3e:0b:d9:ec:e3:fa:
37:5e:31:6a:63:a7:8f:48:3a:f0:a9:ef:8e:c8:50:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:F0:29:7D:98:B6:53:4D:F0:10:6D:06:93:CA:75:8A:AD:24:37
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:69:20:b9:ea:d4:ec:2e:b9:e1:79:d1:a2:7d:73:0f:d3:
40:1e:50:28:c7:43:7e:eb:90:29:ea:84:3f:6e:a5:85:c3:2e:
f0:9b:67:a5:39:76:b9:9d:ef:1b:93:c8:74:c1:47:2f:36:7f:
92:c4:05:1b:f0:f6:51:bd:90:65:ba:e0:20:71:3e:e0:87:a8:
52:2e:6d:82:80:c3:e6:2f:1c:da:42:2e:50:7e:97:d9:66:be:
47:9e:27:cd:19:ea:23:13:97:1a:30:69:5d:b8:36:09:e3:99:
18:c6:4e:f6:17:6f:9f:fe:42:b5:34:de:1b:4a:2a:ad:b0:4b:
fc:31:4a:fd:0f:73:f3:43:68:6c:3c:4e:43:41:c1:dd:9e:d2:
17:e0:e3:c4:4f:00:a4:37:2e:a4:fa:03:b3:02:33:3e:83:be:
6e:4a:0b:11:47:94:6c:31:ff:27:8d:33:c0:3c:7b:f8:a6:fa:
0f:c3:71:17:e2:fa:76:95:e7:b7:d7:91:2c:49:34:07:7e:0f:
ee:5b:af:5a:b0:23:37:93:91:6b:24:12:12:28:ec:64:07:e0:
eb:50:d0:a2:11:d0:4a:8f:97:64:5a:3a:b7:5c:e1:b9:42:cc:
62:99:4e:4d:bb:ed:fa:ea:21:ee:8b:b1:15:54:45:b8:81:8a:
81:d7:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:22 2025 by rpki-client