Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: IrmWfWpUCZcSj42YLBa+9FMQ6ZOa26Qx32l9SO/AnSQ=
Subject key identifier: 1F:3F:C2:53:A9:AF:27:34:BE:FD:10:08:1A:7F:A8:6B:F7:67:15:69
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019A21093AB03844815A7EEEACE175987BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 09C0
Signing time: Sun 26 Oct 2025 15:00:44 +0000
Manifest this update: Sun 26 Oct 2025 15:00:44 +0000
Manifest next update: Mon 27 Oct 2025 15:00:44 +0000
Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: rpZFSfChnVA9BnuRwNs3Likb+6WMuDu8mJeS3f2gV3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:3a:b0:38:44:81:5a:7e:ee:ac:e1:75:98:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Oct 26 15:00:44 2025 GMT
Not After : Oct 27 15:00:44 2025 GMT
Subject: CN=1f3fc253a9af2734befd10081a7fa86bf7671569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:c7:21:07:50:58:6a:4d:a5:f8:b8:de:7c:
af:17:3d:9c:b7:97:d5:fe:32:2a:11:fe:10:d5:e7:
e7:98:35:9e:a5:94:6a:f2:36:e5:e6:c1:18:b1:e4:
8b:f3:6c:fb:b6:e2:99:9f:7d:5b:1d:f3:bb:1b:b6:
4e:cc:51:87:65:1a:7c:6d:9e:ec:19:85:4e:75:af:
7d:5d:46:9c:3b:18:1d:67:06:32:2d:5e:bb:e1:2e:
55:79:8f:e6:cf:34:91:97:25:f5:8c:11:0b:cc:c9:
5a:86:09:4b:8c:66:0f:6c:56:59:71:b9:f7:b4:a0:
71:65:8d:3d:e9:77:7f:ce:da:43:a3:18:16:26:4f:
9a:bc:aa:5a:6c:9c:65:13:0f:77:e7:b4:20:d0:5a:
8f:db:2a:a0:b0:cd:12:89:8b:23:62:89:90:7c:c4:
d8:9a:2c:d0:ef:d0:61:b2:0f:2b:c5:09:89:74:5f:
3f:6b:f0:1c:8f:9f:c2:9e:04:bb:f8:3e:e8:b6:26:
6d:1f:6c:6f:4d:1c:e8:b4:f2:e4:24:40:fd:76:af:
ee:a7:07:b4:64:0d:e2:b8:31:5b:5a:90:cd:41:3e:
25:b7:3d:03:6d:e0:f9:b7:3e:70:8b:d9:3b:11:f6:
5b:b6:19:09:3f:55:97:23:db:f1:bb:22:77:fb:83:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3F:C2:53:A9:AF:27:34:BE:FD:10:08:1A:7F:A8:6B:F7:67:15:69
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f4:f4:1f:d0:0d:3c:f4:be:92:fd:ca:1c:8d:2f:e0:c6:9f:
64:c6:94:8f:94:87:00:5f:96:ca:9f:23:70:5f:0b:87:59:95:
09:2a:e9:8b:d6:d0:b8:9b:0b:8c:72:6d:8e:4f:1f:83:e6:06:
f6:63:46:48:18:14:71:16:38:48:da:34:7e:bd:52:ce:9e:fc:
09:97:2e:f0:b4:53:34:59:92:32:2d:8f:ff:d9:00:7d:aa:65:
dc:f5:78:cc:26:7f:79:0e:e5:27:91:65:04:e3:f7:a7:50:bb:
44:ff:43:79:dc:78:d4:31:6d:5b:34:7d:4b:83:74:08:70:78:
5b:cf:9b:c5:60:dc:a2:0a:5a:e7:28:00:c7:69:2d:80:ee:ee:
05:86:c3:2c:e5:74:ae:9a:8d:02:52:a1:86:1f:b4:bf:bb:8f:
26:c2:55:d0:80:2a:41:10:89:a2:82:c2:65:e6:44:93:fd:eb:
b3:ed:2d:f7:65:a6:df:14:34:f8:a0:9f:21:c0:76:cb:0d:9b:
6b:b4:69:87:9f:fc:78:06:2b:bc:0e:96:5d:e4:75:e2:24:a8:
04:92:f5:4f:69:7e:8e:a5:2f:92:f5:dc:6b:6f:3d:3f:b3:93:
a1:26:d6:bb:95:76:3e:92:15:cb:f5:d2:ac:f3:b8:6b:c2:59:
7a:c7:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:33:38 2025 by rpki-client