Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File: qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier: QumaJWoy+HKHaB6/PWDeVN6JwRJ3XpoNz68qZaKcryw=
Subject key identifier: FC:EC:BB:0C:01:D8:47:02:6F:E8:02:47:70:99:D0:E3:D6:7B:DE:5B
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer: /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial: 019922553315DE92964559CB7D112FC78168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number: 0500
Signing time: Sun 07 Sep 2025 04:00:32 +0000
Manifest this update: Sun 07 Sep 2025 04:00:32 +0000
Manifest next update: Mon 08 Sep 2025 04:00:32 +0000
Files and hashes: 1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: vuPEv0EGqW+uWgjIxWG8C+8KJ3jrwz2rm+gDpdFPwys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:33:15:de:92:96:45:59:cb:7d:11:2f:c7:81:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Validity
Not Before: Sep 7 04:00:32 2025 GMT
Not After : Sep 8 04:00:32 2025 GMT
Subject: CN=fcecbb0c01d847026fe802477099d0e3d67bde5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:70:48:63:e2:4c:de:75:15:e6:2c:cf:0f:
ac:5d:6d:c7:a9:a3:26:48:c2:20:ee:ff:f5:68:c4:
78:b8:76:d2:8e:1a:e0:1e:81:13:0c:6f:92:93:93:
85:cc:7b:aa:bf:71:95:3f:a6:db:09:6f:6c:b6:00:
fe:a9:f5:5f:ae:7f:0f:ed:cb:d2:ee:b9:5a:5c:38:
bc:2d:02:44:d8:e3:be:37:51:11:1c:20:dd:9f:f0:
5b:ba:1b:70:e6:73:e9:c5:8c:8e:48:f6:98:17:f6:
3a:5e:1f:e8:45:75:95:e8:d2:7b:17:fa:bc:c9:c2:
7e:9f:52:75:a3:19:fb:ad:03:42:c1:e6:60:1c:f9:
7c:9a:32:4f:e2:de:2f:12:1b:6d:7e:b8:d3:c5:cf:
60:dc:80:3b:b0:c0:c8:d5:dc:fe:70:43:ef:87:25:
d6:78:ca:47:a8:74:75:d0:3c:27:3e:6a:32:7c:cd:
30:1a:00:0c:8c:ba:22:ce:6d:14:1c:85:f3:56:c9:
bc:f8:5a:de:86:ad:83:2d:76:1a:46:bf:c5:8c:41:
ab:e3:82:a0:ab:32:81:34:b0:10:50:3a:d3:fc:72:
6c:b2:2b:eb:33:be:b2:d4:79:fd:82:c0:5b:38:6a:
c4:4a:67:94:59:d1:29:61:08:5c:c5:ca:28:b0:90:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EC:BB:0C:01:D8:47:02:6F:E8:02:47:70:99:D0:E3:D6:7B:DE:5B
X509v3 Authority Key Identifier:
keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:47:7d:87:1f:d8:a6:46:59:4f:69:ac:9d:2f:f5:1c:18:84:
6d:db:9f:54:6b:21:d3:61:0b:17:75:c2:35:bc:76:9c:2e:86:
1e:a2:66:10:d1:cc:57:3b:ff:e3:2d:30:c2:ab:7d:fe:ad:1f:
bc:8d:ed:5b:e7:41:6e:eb:6c:e8:c7:41:9e:cd:b5:47:d9:d1:
8d:93:aa:c4:5f:e9:40:5f:76:eb:a9:11:3a:9b:14:6b:7d:a7:
b6:b7:cf:00:b8:38:fc:9a:27:e7:49:8f:f5:0f:29:f8:df:9a:
f9:68:d5:08:30:f3:cf:bb:6d:2a:09:15:c0:b2:b7:47:2f:ab:
8d:83:da:e0:e9:6f:bb:4f:11:86:ce:4d:2d:94:ea:03:a2:74:
72:91:37:3a:63:fa:61:9f:b2:1f:b2:91:df:c1:1b:82:b0:88:
95:a3:fc:cd:74:28:b3:53:a2:5a:35:71:b7:c9:d4:ae:44:6a:
ca:75:1c:e2:69:be:54:eb:10:91:d1:df:6d:cb:ef:2b:d4:32:
9b:c5:28:a8:40:84:7d:66:01:84:c9:98:0a:1d:1d:23:2d:59:
22:8b:c8:76:58:69:9a:94:b6:14:2f:dd:a0:61:8a:4c:1a:b5:
7f:44:86:db:7a:a5:39:29:ff:79:0a:81:fc:20:27:d4:fa:c9:
41:03:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:09 2025 by rpki-client