Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: u3KoBEw+tt3pn0FKfTAYSRnTuBJHhPhigCqLlWlN7aI=
Subject key identifier: 47:46:26:31:83:A5:BC:28:57:02:82:66:93:06:6B:0B:1C:07:6D:27
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 0197CE03D2FAB721BA1DB79E063B0B090BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 39
Signing time: Thu 03 Jul 2025 02:00:46 +0000
Manifest this update: Thu 03 Jul 2025 02:00:46 +0000
Manifest next update: Fri 04 Jul 2025 02:00:46 +0000
Files and hashes: 1: CDUsDykTOJjzj2PfEalP5NWfeaM.roa (hash: MDsxP0rZPQ79FjaH/eHSpSKbqQZrO2HQf+/0HhGuzhE=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: WTvsdxvdXbyLLqBUzxQ5qu4kVAp2gYl7WlxZEcZd8rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:03:d2:fa:b7:21:ba:1d:b7:9e:06:3b:0b:09:0b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Jul 3 02:00:46 2025 GMT
Not After : Jul 4 02:00:46 2025 GMT
Subject: CN=4746263183a5bc285702826693066b0b1c076d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:e0:1a:0a:a9:fa:b7:5f:93:0d:15:b0:be:
a2:86:a3:7c:f8:c2:c8:de:86:bf:d6:d4:fe:74:e2:
cc:b4:90:d2:32:dd:29:d8:dd:0d:14:86:1f:c7:a4:
29:cf:d0:c7:d5:88:81:e0:7a:37:22:aa:1c:0e:16:
72:6b:64:71:a7:35:c4:33:05:4a:62:fd:1c:2b:a0:
14:3e:f2:74:0c:cc:4e:26:42:f5:96:3a:53:4d:f5:
c5:92:23:4c:1d:d0:35:0d:1d:2c:be:96:43:b4:b2:
65:15:8e:d2:fa:c6:69:89:29:81:bb:5d:98:8f:2c:
0e:5f:16:ba:26:58:4e:05:6d:e0:d1:a1:2a:bb:7f:
b4:b8:ba:eb:49:c8:24:02:4a:4b:3e:48:b3:4d:f3:
05:5e:90:53:f0:a9:4c:0d:86:a4:3a:8c:69:0e:fb:
b9:5e:d1:79:e5:cb:99:77:45:54:1e:9c:ac:df:f4:
e1:13:35:ea:16:3e:6f:05:2f:77:ee:3e:76:08:78:
04:e8:d3:90:18:c2:5c:ad:fd:ce:88:8b:3c:1f:35:
d9:ae:35:ce:38:7b:36:29:c2:16:94:27:0a:bb:29:
eb:de:a1:0f:21:13:0b:71:08:c3:99:b8:55:b2:3e:
98:34:2c:60:07:2a:39:bf:fa:33:52:8a:cb:6b:88:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:46:26:31:83:A5:BC:28:57:02:82:66:93:06:6B:0B:1C:07:6D:27
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c3:f5:34:7c:1b:5c:ba:99:67:98:44:cd:e7:08:69:04:ff:
dd:0a:0a:01:1d:89:6f:00:a4:03:59:eb:88:dc:dd:0f:76:33:
6c:95:d2:c2:78:5e:1f:51:6a:c1:8e:b3:4f:88:c3:b0:b2:59:
31:e2:d3:38:31:cf:1f:4d:93:c9:a4:49:54:a5:f6:7e:2a:bd:
28:36:43:11:96:25:68:51:5c:5b:5b:7a:2d:9d:ba:09:d6:ed:
56:49:ae:8f:da:2e:3c:c2:46:c8:22:88:6b:1c:92:04:1e:bf:
c4:f5:15:7b:31:77:fd:53:8c:0e:99:ea:b9:f0:d5:6c:84:79:
5d:49:56:2e:bf:6d:7a:df:13:2e:a8:a5:68:5e:85:74:d0:fc:
99:99:9c:5c:a0:c5:ec:ad:11:08:9a:56:96:b6:61:3f:8f:8d:
59:61:95:4b:a8:b6:5c:b0:1d:48:cc:1d:75:0e:8b:21:2e:37:
38:61:d7:2d:1c:0d:d5:45:32:95:e4:12:cd:77:b1:cc:78:02:
5e:26:19:53:52:3c:ad:11:91:6f:04:66:3d:ca:4c:d4:b5:21:
15:2d:f5:5b:05:82:90:8e:41:76:a3:c3:e3:eb:d1:8a:81:61:
0e:54:35:7c:c2:42:a7:1f:a6:da:87:37:f9:e4:60:57:2f:b8:
fe:4d:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:39:21 2025 by rpki-client