Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: ICgHS9peNE1j+04MeqNzqLnCOMHqIZxd2MIJ3jOFRJE=
Subject key identifier: D6:BE:24:8E:A1:0B:D1:D9:1E:51:5F:F5:1C:BD:F1:4B:EC:1F:FA:2C
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 019938DE4FB10B37B304985608FCD0D65BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 10FF
Signing time: Thu 11 Sep 2025 13:01:57 +0000
Manifest this update: Thu 11 Sep 2025 13:01:57 +0000
Manifest next update: Fri 12 Sep 2025 13:01:57 +0000
Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: URRpuUA3IYrb5rR2x/IYzrmKrmtCH0hvDfWNwzAw+iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:4f:b1:0b:37:b3:04:98:56:08:fc:d0:d6:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Sep 11 13:01:57 2025 GMT
Not After : Sep 12 13:01:57 2025 GMT
Subject: CN=d6be248ea10bd1d91e515ff51cbdf14bec1ffa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:0f:0d:7f:a4:98:54:c4:92:ae:c4:c2:d9:
22:4f:c0:68:f6:7b:e0:62:d8:8c:d2:3c:58:78:a1:
0b:c9:13:63:83:61:b1:f0:87:7e:36:f2:d7:27:2f:
f8:4e:ff:00:26:f8:42:c4:5f:b0:5d:07:62:21:b5:
df:be:00:24:38:96:9d:97:39:0e:8f:38:81:ad:d6:
8f:5c:46:d8:b3:be:f2:a7:1b:70:a2:c8:4e:33:40:
02:d4:af:83:ac:bd:06:4c:68:2e:df:f9:bd:10:e1:
61:4b:bd:9c:f4:1a:6b:4e:34:f4:fa:74:f5:7f:c1:
0f:8e:90:3d:c8:3a:cc:f4:ec:20:1a:b5:e1:f6:b9:
26:d1:98:bc:be:93:6c:0c:89:7e:ae:54:03:a4:ed:
1e:37:50:39:ec:e8:8c:ba:8c:95:76:47:f7:60:36:
98:19:15:a2:b1:77:cb:7f:8e:95:3f:d1:a7:c0:50:
cc:26:13:ea:38:11:6c:74:f0:e9:6b:9f:19:fa:19:
a5:3a:62:15:bb:46:5a:cf:4a:62:73:eb:71:bd:45:
a2:1e:ad:b8:c6:cb:ce:ee:ba:cd:37:80:6b:d9:0c:
01:b0:b2:93:e4:c5:fc:9d:2b:92:1e:ad:94:fd:18:
a8:fc:d2:60:64:f3:c6:7a:46:ad:f9:d0:19:41:55:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BE:24:8E:A1:0B:D1:D9:1E:51:5F:F5:1C:BD:F1:4B:EC:1F:FA:2C
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cd:13:d8:3d:f4:c8:3e:61:95:2e:a5:e5:57:df:65:59:ac:
13:31:4a:5a:57:11:a6:d8:b5:16:5a:14:3c:fb:ac:1c:94:e1:
b1:81:ea:73:4f:2f:f0:ea:14:d4:d0:12:0f:a8:7f:c2:20:da:
bb:53:24:7c:8a:8d:cb:42:b3:ec:dc:8e:a2:03:ec:21:6e:2b:
20:91:42:27:92:07:b3:0e:51:62:5d:2a:76:64:da:cb:a5:96:
84:e5:2c:d6:88:46:db:12:37:9c:41:b6:48:c2:bc:21:de:b6:
e0:68:68:14:42:6c:78:49:4d:92:b8:f7:4c:34:b1:49:47:d1:
40:67:d4:f3:89:ad:44:a7:cb:dd:e8:42:f6:b4:bb:bd:3d:55:
b3:b5:d2:5e:08:5a:0a:5a:9d:90:eb:f4:ad:c0:b7:10:49:04:
a8:90:3c:3f:29:4b:3e:c3:ca:cc:60:65:db:77:9a:3e:33:1b:
f7:11:d2:7f:f9:41:7c:77:44:11:c6:2a:dd:29:36:43:57:69:
43:5e:11:d3:59:c6:9f:19:04:92:74:a6:8b:bb:51:82:ae:52:
4d:76:7f:6e:3c:a6:a3:1e:bb:c9:66:59:3e:79:25:84:85:ee:
c3:17:83:a3:11:66:a4:9c:c3:d9:5c:b5:ee:b3:96:88:4c:7c:
ac:52:c0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:28:35 2025 by rpki-client