Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: R7PcrmYO9MRAEi+M/AwK5myovnDyKBdyKO27ByAE8uQ=
Subject key identifier: 06:8E:3C:C6:D5:F9:12:08:8D:F0:1F:38:31:C5:7A:29:EB:25:64:D3
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 0199233167D9DD65C00F009020AEF66E234B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 08:01:04 +0000
Manifest this update: Sun 07 Sep 2025 08:01:04 +0000
Manifest next update: Mon 08 Sep 2025 08:01:04 +0000
Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: t7+GhSYL6VAVWr6XCYpcQkXeUqLUsqaqv6U3dtT6NC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:67:d9:dd:65:c0:0f:00:90:20:ae:f6:6e:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Sep 7 08:01:04 2025 GMT
Not After : Sep 8 08:01:04 2025 GMT
Subject: CN=068e3cc6d5f912088df01f3831c57a29eb2564d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:fd:00:5c:97:7f:36:09:a5:14:89:59:0c:
68:8b:6b:a2:13:86:0b:dc:14:31:95:99:90:a5:b1:
91:0c:45:5a:57:b3:68:bb:ef:62:52:24:75:16:aa:
13:ce:ab:b5:39:7d:bd:9a:7d:64:98:91:57:0f:36:
01:36:43:7f:e7:ad:6d:15:2a:64:d5:28:3e:4b:cb:
a6:69:1e:69:75:f0:67:54:cf:42:57:35:be:be:85:
24:2a:28:d2:4c:16:bf:e4:0d:c0:89:22:f5:f0:a4:
3b:87:d7:6d:50:2b:07:f3:28:b2:08:04:74:a8:d0:
79:33:b8:67:2d:59:9d:1e:2b:b7:6a:35:6d:1d:7e:
76:62:09:45:6e:48:1e:d2:97:8c:f7:97:0e:25:13:
61:a2:a4:fb:de:9f:c7:ec:a0:51:fc:26:b7:69:2e:
69:74:2b:5f:91:c6:e7:e2:d5:88:b7:3b:88:c7:55:
91:23:40:c7:c3:94:42:eb:54:c6:a6:45:7a:c9:99:
a9:53:0e:1d:34:9f:c4:ab:19:08:8b:ef:4f:fe:90:
6e:19:da:0c:50:37:e5:26:b6:d4:b8:da:7c:c7:48:
14:1e:d4:6c:79:77:d9:bc:bb:83:b3:44:52:06:5e:
e7:93:57:2a:41:d8:d8:23:d3:f6:bb:d2:be:b1:da:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8E:3C:C6:D5:F9:12:08:8D:F0:1F:38:31:C5:7A:29:EB:25:64:D3
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:61:de:58:9d:fd:0a:e0:03:fc:61:c9:f3:48:7f:a1:ef:
d3:08:8e:19:7d:f9:b9:92:9f:27:92:15:81:7b:36:26:3e:da:
b7:d3:90:c8:b8:b3:00:b4:e1:88:56:87:ee:df:f2:88:c4:86:
d7:f5:06:29:7d:ad:61:0b:c9:2f:c0:81:7d:fb:6f:40:7b:1d:
94:bd:0e:1f:d7:b5:54:e5:ff:29:41:14:54:b0:46:38:30:39:
b2:c3:08:ca:10:ac:f0:71:0d:bd:75:54:69:b6:51:81:e8:a7:
ec:fe:c4:2c:95:93:28:cc:e8:e8:3e:7b:c4:67:1b:31:84:1b:
29:ca:a4:29:7e:f7:a8:1a:f8:ab:47:6a:d9:35:3f:06:1c:bc:
d6:b2:a1:92:02:30:28:0f:20:6b:57:fa:e2:1a:a1:af:30:d7:
fd:4d:e9:50:9a:cf:72:24:23:ec:b2:e6:64:31:8d:f7:9e:76:
84:19:19:dc:ee:59:b0:37:a9:b4:5f:50:8a:5d:65:59:09:4c:
81:61:a1:c4:7f:5d:94:47:00:01:26:63:ad:34:45:2e:5a:22:
85:ac:d8:6b:9f:e2:9f:71:7d:ad:8d:7d:58:10:76:ab:59:c0:
c7:48:a6:25:fe:d2:d5:04:80:2f:1a:01:05:d7:06:a6:bb:6b:
4c:50:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:46 2025 by rpki-client