Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: b/RAcaDxpJCGjppkDX/kCHugYkHvCUYB3iyV48Si0Lg=
Subject key identifier: FD:E2:23:FE:E5:E2:57:1C:44:16:92:66:2E:CE:B7:B4:18:1D:B8:01
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 0199326D7C913531BA322466E9FFC5A99A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 0363
Signing time: Wed 10 Sep 2025 07:01:00 +0000
Manifest this update: Wed 10 Sep 2025 07:01:00 +0000
Manifest next update: Thu 11 Sep 2025 07:01:00 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: oF42fxho6ZaQ0Bqe9ubzCrJG5g41sMQo0Al0ruGHIAo=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:7c:91:35:31:ba:32:24:66:e9:ff:c5:a9:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Sep 10 07:01:00 2025 GMT
Not After : Sep 11 07:01:00 2025 GMT
Subject: CN=fde223fee5e2571c441692662eceb7b4181db801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:ca:4b:da:39:9f:f5:8c:bb:b9:43:c8:ec:
bd:ee:e3:2c:80:40:23:8d:43:1b:a2:5f:25:e2:54:
61:28:01:cc:af:6b:92:eb:05:60:5f:38:55:11:e0:
a5:f9:6b:4e:7d:59:3e:2e:fb:fe:ec:c4:ae:70:92:
7c:eb:2f:b2:b6:74:5b:95:bc:d9:57:a8:91:74:93:
dd:55:ae:30:94:57:c7:1c:51:ba:49:68:3e:6a:58:
d7:4a:42:52:a1:f8:c1:78:e3:ed:93:5c:ba:82:61:
90:3f:1d:a4:fe:b4:df:72:b0:44:74:36:1c:b6:4d:
45:f2:44:90:9b:12:fd:f3:d4:06:32:c2:c8:a1:ff:
4e:38:c1:5d:87:c8:b0:66:bf:2c:39:2d:2f:7a:0f:
cf:42:b0:fe:3e:7b:73:40:48:ac:9d:c0:93:ad:20:
c6:03:85:60:f7:a7:84:d0:fc:4f:45:1c:6a:fb:1d:
7f:cf:ee:41:ea:54:16:88:fc:bb:a8:a7:1d:81:f7:
d2:8b:00:c2:99:aa:5a:e4:9c:08:86:5b:fe:3e:e4:
5b:da:eb:17:77:d7:49:48:6c:bd:fe:94:78:bb:6c:
cb:41:34:e7:5d:64:5e:76:03:72:dc:39:5e:d7:64:
c7:07:8b:72:cc:c6:54:73:89:3e:8b:cf:fb:33:37:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E2:23:FE:E5:E2:57:1C:44:16:92:66:2E:CE:B7:B4:18:1D:B8:01
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ef:fb:ff:b4:d8:20:87:9b:da:a2:54:88:29:de:80:d9:08:
bc:20:67:17:ef:b0:45:1d:c7:00:c4:de:0a:9c:9c:02:3b:5c:
9c:d0:42:3b:7e:38:6a:65:ce:3a:78:d5:67:36:e6:ad:7e:33:
f9:75:ca:54:c9:ff:ca:31:65:da:82:97:5a:be:c3:e3:1d:38:
e9:f2:cf:dc:e5:00:d3:15:4a:be:45:2a:c6:0c:f8:de:69:1c:
85:fd:67:e2:38:a0:cf:87:c8:8a:86:28:d5:97:1b:55:60:88:
3d:27:41:75:a8:46:96:6f:c1:84:f7:08:db:ae:e5:29:79:ce:
6a:89:6f:47:d4:e9:d5:6f:e1:3b:69:f9:8f:b2:96:45:01:5d:
d1:5f:54:aa:c0:6d:ae:a1:0b:ac:98:a7:ad:1c:d8:7a:65:ea:
96:bb:21:e0:9d:e8:ef:a0:d1:42:af:c9:55:b5:54:36:61:50:
33:e7:4d:99:f7:a1:2a:ed:25:75:e5:93:ae:b2:c2:4d:69:e0:
14:05:28:73:92:ce:81:50:ac:39:ee:6d:e2:d1:5c:47:58:77:
08:ed:dc:d8:a8:99:14:73:c0:b9:50:14:32:12:09:65:90:b8:
2d:86:ac:c7:bd:cc:78:b1:7a:4c:74:cb:f1:a6:89:f9:cd:c4:
e6:3a:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:27:19 2025 by rpki-client