Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: 0J6cECs4qCTXjF49I1SSbgbv6NM6sQHtc9be02NpeT8=
Subject key identifier: D6:6D:DE:95:41:78:CD:6B:F0:56:85:77:F8:AA:2E:EA:A2:84:EC:E3
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 01992EC77211586F7C0D2438F7409EA720A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 0D6D
Signing time: Tue 09 Sep 2025 14:00:46 +0000
Manifest this update: Tue 09 Sep 2025 14:00:46 +0000
Manifest next update: Wed 10 Sep 2025 14:00:46 +0000
Files and hashes: 1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: /PGuBARs5C3pcFCT3UFHSsTIimr8SlKkgEI/ENvVDzE=)
2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:72:11:58:6f:7c:0d:24:38:f7:40:9e:a7:20:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Sep 9 14:00:46 2025 GMT
Not After : Sep 10 14:00:46 2025 GMT
Subject: CN=d66dde954178cd6bf0568577f8aa2eeaa284ece3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:b4:59:89:a4:a0:91:fd:b9:a0:3f:25:28:
8c:2f:62:d9:c4:1f:31:e2:60:1b:19:4a:e6:f4:49:
12:9d:d6:bb:f4:03:b8:92:9f:07:7d:36:2d:c2:11:
c1:a2:8b:e5:a0:6c:6c:24:e7:d9:ec:c4:b6:f0:48:
05:05:20:c9:06:76:21:45:72:a5:a0:07:c4:a0:3c:
73:1b:ae:b8:ce:57:6c:00:0b:4d:e8:3e:c5:81:97:
4a:15:5c:8f:b8:68:12:6e:51:3d:2d:51:8e:96:eb:
4e:24:77:de:f1:9f:f8:2f:4e:bd:b8:c6:55:9b:3c:
53:bd:6e:41:16:0e:90:2b:41:a6:12:ce:13:70:43:
ef:a8:49:7c:0a:98:6b:c4:7f:c2:5f:dc:51:4e:30:
e3:32:3d:db:6f:76:72:65:15:18:37:d6:af:7e:7e:
95:f8:42:cf:d6:df:74:14:f1:ee:41:4f:d6:47:25:
63:ec:27:81:2f:28:79:49:8b:92:df:04:d0:8f:f2:
d6:7d:65:0c:25:0e:61:f5:b8:2d:8f:9f:9f:c6:a6:
34:74:b1:03:0b:fd:40:e3:5b:9f:07:5f:ba:4a:6d:
aa:b8:64:72:a1:48:ec:f9:3e:24:12:43:db:9e:78:
32:65:f4:f2:69:78:87:45:30:a9:5c:5d:38:de:9c:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:DE:95:41:78:CD:6B:F0:56:85:77:F8:AA:2E:EA:A2:84:EC:E3
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e3:39:25:21:97:dd:9e:ef:6d:91:94:0b:35:54:b6:0e:c6:
fb:2a:04:c3:94:08:b1:49:96:3c:5b:34:8c:c9:b1:f1:66:54:
65:db:74:6c:27:2f:0d:e7:6d:68:f6:de:2d:61:9d:1b:d2:10:
03:b5:59:13:b6:59:f1:74:6e:77:08:9e:ee:20:98:96:b8:be:
5e:0d:f3:92:57:d5:39:bc:21:56:51:c5:bc:2d:80:38:54:c7:
2b:6d:ab:8f:3b:5b:da:57:76:a7:f1:b4:30:ba:d7:b6:d5:20:
fa:20:34:26:39:d1:fc:a6:a2:ad:3f:b5:54:89:51:63:ee:1d:
f1:d4:f9:4e:44:4b:68:46:76:39:08:1e:77:c6:3c:09:d1:4b:
6f:51:cd:87:f5:a9:07:88:c8:0f:4f:c9:ff:33:dc:5c:78:41:
38:d1:97:86:cd:d4:50:00:13:df:d9:0c:ea:90:ee:5c:2b:ac:
a6:b1:ad:e7:43:43:a4:0e:62:a7:4b:5e:b0:02:a4:40:22:ce:
94:ed:00:9d:c8:2e:26:71:28:56:b2:c1:0c:81:ec:a2:90:a3:
82:53:5c:5e:06:61:4d:b2:8b:8f:bf:68:c1:a8:df:f8:8c:91:
f7:1a:61:fd:2b:7b:76:96:c8:fb:b3:1e:3b:a4:46:39:92:2e:
21:cb:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:27:40 2025 by rpki-client