Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: IF4mHH73Qc5OuotSfQ7Ukl5zkNfWXHMmI3QHe/WgBnU=
Subject key identifier: A6:E5:98:B6:11:4A:2A:3A:D2:04:CC:61:74:7C:DD:36:9B:E4:7E:F5
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 01993BA77C7927DCA034A9557A791D34DE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 1158
Signing time: Fri 12 Sep 2025 02:00:55 +0000
Manifest this update: Fri 12 Sep 2025 02:00:55 +0000
Manifest next update: Sat 13 Sep 2025 02:00:55 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: 2rhMZ6W6V8jCBS1RSj6p22uAWcR/jcRQOkaEKnl3x5Q=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:a7:7c:79:27:dc:a0:34:a9:55:7a:79:1d:34:de:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Sep 12 02:00:55 2025 GMT
Not After : Sep 13 02:00:55 2025 GMT
Subject: CN=a6e598b6114a2a3ad204cc61747cdd369be47ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:42:f5:ee:5a:a8:bc:b2:d2:4f:7b:48:85:
a0:aa:d2:94:ee:52:54:2b:2b:bf:fa:84:40:3c:87:
df:a1:56:65:d0:af:14:e7:e7:ff:ca:61:40:d1:8d:
7b:a2:8d:5d:80:29:95:73:38:35:39:bd:e8:c9:c1:
e5:13:cd:00:52:7b:dc:53:74:18:aa:72:6d:f1:e3:
64:30:3c:97:08:22:91:48:13:60:f9:2f:9b:1a:1a:
c5:05:ca:d5:a9:d5:1e:f5:79:fb:00:f8:35:e4:4c:
5d:46:77:81:d3:b8:da:d5:66:6c:2e:b5:c2:f6:4e:
dd:55:98:33:2c:d5:c7:40:1d:55:e1:d1:1e:26:2e:
b5:28:16:a4:24:68:3b:38:83:9c:c5:c9:ba:14:51:
57:95:3f:eb:fe:3e:82:c6:54:ed:7c:59:fb:98:53:
26:5a:5f:6f:f9:67:03:3b:3c:ae:88:02:63:cc:f4:
bf:7f:b1:90:ca:49:23:5e:b6:b8:25:49:c2:dc:71:
50:25:21:84:75:10:38:4f:02:6c:4d:16:0d:cd:dc:
9e:19:3f:a1:e1:b6:22:31:fb:45:54:85:e9:9c:00:
be:a7:7a:55:be:39:75:e0:7b:c4:48:7b:7c:53:8f:
f4:5a:2c:22:ac:71:bc:9c:4c:f4:23:b8:43:4b:f7:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E5:98:B6:11:4A:2A:3A:D2:04:CC:61:74:7C:DD:36:9B:E4:7E:F5
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c4:a7:b6:cd:a0:9e:e4:ee:7b:87:b1:78:73:4d:d5:ea:17:
33:51:e9:5d:dd:14:9e:de:8c:0a:ed:9f:91:ed:21:31:70:37:
f1:88:3e:05:71:02:04:43:9e:4e:d8:87:25:b2:2d:1f:da:34:
f7:d2:32:41:f8:a6:4f:bb:70:b9:58:55:12:ed:0c:5c:01:24:
91:3d:6e:2c:bc:28:3d:5d:3a:26:4f:dd:bb:48:25:c8:79:1b:
1b:d7:c2:17:1a:85:72:94:6f:31:ad:26:b5:68:c7:78:bb:1a:
22:93:73:1e:f2:6d:9a:63:fb:ca:17:44:74:91:75:18:6d:1c:
34:7d:11:9e:5b:23:5e:61:59:51:22:f4:79:b4:67:52:e4:18:
f2:87:1d:10:bf:5c:2f:12:bf:36:c6:85:30:eb:1c:58:67:ba:
79:37:ae:4e:35:00:89:e1:3f:10:d5:e2:42:4b:e2:11:c2:26:
e4:93:3f:2b:98:dc:d9:a2:60:4b:02:03:ae:07:38:9c:aa:ab:
fa:46:fa:f5:7f:71:1c:80:5c:b4:9d:89:95:20:fa:34:f2:81:
11:52:96:82:b8:76:6d:70:c4:69:b8:a6:bc:f0:4f:18:41:7d:
cb:d4:63:d0:45:39:53:0c:bf:d5:1c:d2:e6:ff:d0:8a:cb:66:
56:47:3a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 07:11:21 2025 by rpki-client