Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: JP7qsn+S7t4z1hWjehu22qyAIDQzl4mr/jAe3adcZOU=
Subject key identifier: EE:86:0E:00:69:9F:02:49:43:9B:3A:C4:6E:BF:04:B9:67:54:EF:20
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 019933B778F3EE0BE82B274B37C8F75F1CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0F0D
Signing time: Wed 10 Sep 2025 13:01:25 +0000
Manifest this update: Wed 10 Sep 2025 13:01:25 +0000
Manifest next update: Thu 11 Sep 2025 13:01:25 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: j4kB8i/C91lF+AiC+Bf32DW50G1fix7YqzWmU1fxZ/Y=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:78:f3:ee:0b:e8:2b:27:4b:37:c8:f7:5f:1c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Sep 10 13:01:25 2025 GMT
Not After : Sep 11 13:01:25 2025 GMT
Subject: CN=ee860e00699f0249439b3ac46ebf04b96754ef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:f1:1e:91:56:40:48:11:d5:43:75:5e:6f:
05:d7:a3:4d:7c:f6:32:3f:65:c0:96:9a:46:60:d9:
14:5f:91:75:25:3a:25:79:77:9a:b7:09:ac:bb:af:
9a:6f:09:bb:ae:7c:21:6c:bb:8a:bc:8c:bb:c0:87:
2c:60:c6:be:f1:45:11:ed:75:c8:26:1c:b4:c0:5d:
92:9e:15:c1:a9:66:c1:8e:04:24:84:fe:51:6b:7a:
e2:e6:5d:5d:5d:1f:1f:df:d6:4e:ca:c2:24:20:39:
cd:c2:5c:5d:cc:2d:d6:0e:97:34:2d:85:e7:9f:04:
69:60:c8:93:fd:6f:b2:2f:81:a2:54:a6:c6:15:ac:
03:ba:4d:28:61:4b:b8:8a:cc:4d:df:6a:70:00:f5:
19:7d:0f:f0:cb:99:43:77:78:9d:db:6d:2f:f0:fa:
71:72:3d:53:cd:32:02:1f:63:f8:a9:b5:ce:f0:68:
a3:cc:5f:90:c9:a5:3e:c7:f9:b9:d9:3c:98:c4:ef:
a7:c1:2e:8c:72:88:c3:29:bc:6c:2f:8b:28:d8:0f:
6e:84:a0:89:3b:33:82:fb:9b:dc:2e:74:c0:4d:d8:
19:aa:5c:b6:05:f3:a1:89:84:30:83:96:cc:4b:6c:
c9:83:fc:68:47:45:ff:da:d2:3a:bb:02:de:35:e3:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:0E:00:69:9F:02:49:43:9B:3A:C4:6E:BF:04:B9:67:54:EF:20
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:46:a7:ff:e8:01:d8:dd:32:f3:8d:ad:10:83:9d:ca:02:cd:
e0:18:bd:96:76:7b:8c:0e:a5:19:a6:8f:4e:52:c9:4b:78:c6:
7a:a7:b9:ab:b3:93:0d:93:57:21:45:cb:52:0f:19:4f:23:c3:
d3:5d:2d:ae:87:93:c6:66:14:6d:e3:db:cb:ea:c3:cb:fb:10:
ed:62:a0:9b:63:89:a7:42:a2:f8:3b:97:b7:6f:21:85:ba:43:
84:bb:a2:b6:8e:4f:7f:60:69:d9:fb:c1:19:51:cd:fa:84:57:
83:36:60:89:4b:81:0e:82:00:96:76:d1:77:eb:28:9c:3c:5e:
5e:26:a2:36:84:c0:d1:ed:2b:e8:04:50:db:9f:91:88:d6:73:
8d:4c:f1:38:66:ba:41:f0:a1:89:fc:ea:2f:66:c5:69:76:24:
cb:38:d3:6c:a4:83:d9:d4:e4:17:c4:ac:fd:59:17:ff:66:10:
a4:ee:4c:3f:d5:21:84:d9:c9:0a:58:e4:c9:cb:1b:b3:80:c2:
e2:54:f0:f5:e6:a0:72:83:6d:e7:61:31:4d:69:19:9b:56:40:
ca:da:49:c2:85:e9:48:d8:37:ce:af:41:c8:01:30:00:a2:07:
43:1c:6f:a8:0f:a0:1e:10:ac:b5:01:5d:23:6f:00:7d:f0:56:
35:e3:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:06:23 2025 by rpki-client