Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: H4ShvlWjyCBCdDhsQGfL/EUBQZWJQEMpNVsJXigzdko=
Subject key identifier: 17:60:1F:13:5D:8D:E2:B4:1D:EC:CE:12:FC:55:FE:D5:8F:ED:65:BD
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 0199375CDF0F98AD674590DE83713D51C442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0947
Signing time: Thu 11 Sep 2025 06:00:56 +0000
Manifest this update: Thu 11 Sep 2025 06:00:56 +0000
Manifest next update: Fri 12 Sep 2025 06:00:56 +0000
Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: 7dByUVLFGF5ldT7rZGNSiNyhCD62voKsSIMIqICRcwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:df:0f:98:ad:67:45:90:de:83:71:3d:51:c4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Sep 11 06:00:56 2025 GMT
Not After : Sep 12 06:00:56 2025 GMT
Subject: CN=17601f135d8de2b41decce12fc55fed58fed65bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:59:ea:ae:8e:d6:3d:f0:a3:79:d6:b0:bf:
62:a1:83:e3:f2:b7:98:f5:07:54:03:81:e6:35:04:
f4:a0:e1:b5:02:4f:31:72:c0:4b:35:f2:41:0e:d0:
01:66:17:be:c0:b9:b2:f3:0b:d8:d0:f1:af:45:b2:
ae:65:57:c6:29:a6:66:4f:52:02:fc:49:4d:ee:55:
80:15:11:65:83:8e:24:3c:d1:f9:f1:f5:1b:79:8e:
96:df:ec:e4:84:df:15:d4:34:13:27:16:2d:c0:06:
43:10:d8:c7:07:36:a9:2e:9c:34:f7:f4:2d:82:59:
1d:a3:ba:c5:38:0d:5b:f4:3b:23:22:1c:64:70:a5:
3c:30:a0:d0:e6:98:c0:21:d1:66:69:4a:52:3e:f0:
ca:65:da:9b:95:bf:06:6e:ff:e3:f4:ca:42:12:f0:
04:07:1b:0c:4d:23:42:f8:92:05:2d:1e:d9:88:94:
8b:55:fd:67:ef:a3:5a:9d:e3:bb:0b:7e:df:05:29:
8d:60:28:3a:90:b3:f4:36:94:59:98:b8:5b:f4:4f:
50:d3:67:00:b8:31:14:d6:ea:fe:87:dc:e2:cb:03:
06:89:14:87:61:50:b3:fc:a6:82:4f:06:d2:08:76:
c5:2c:a1:ad:63:1f:cd:00:35:ba:0e:1b:4d:2e:aa:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:60:1F:13:5D:8D:E2:B4:1D:EC:CE:12:FC:55:FE:D5:8F:ED:65:BD
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:e1:66:11:a9:b0:f2:b9:e2:f8:b5:a0:18:d6:5e:84:47:79:
38:9d:9d:93:0c:20:10:ed:cc:7c:6d:74:14:a4:73:8f:fd:2e:
7d:98:4c:03:aa:4b:f5:5f:1e:6a:0f:e0:3d:ee:7e:07:32:fb:
5b:93:22:1a:38:bd:31:fe:78:e6:de:f1:0e:48:a8:fa:bf:90:
a7:67:95:4b:4b:6a:32:12:9f:54:e7:49:b0:19:cb:77:b5:25:
5e:93:c3:3c:fa:cc:65:5f:53:e7:2a:7d:4c:d5:65:b3:85:6e:
13:dc:4d:77:35:c0:42:b7:11:16:cc:54:b1:57:dd:19:b9:54:
ad:4d:68:3c:8c:68:e9:99:12:db:9c:ed:bd:1a:01:28:6d:fe:
c1:de:9a:fb:d0:eb:fc:f9:14:cf:3b:9a:f4:05:11:0f:1c:47:
f6:e8:e6:ac:25:a3:4b:46:ac:2f:7e:7e:4a:cc:81:31:59:fc:
12:70:79:62:c2:3b:6e:92:a5:58:f9:32:0a:e9:d2:2e:ba:5c:
55:b5:bd:fe:8e:db:23:91:b2:2c:33:6c:96:48:df:c0:f6:64:
fa:5a:7b:29:11:18:fe:98:30:cf:23:d3:ae:de:26:f6:7e:d9:
e7:75:20:5e:13:ef:72:df:e2:b3:78:c4:33:d4:a5:9b:cb:f2:
e4:fc:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:52:40 2025 by rpki-client