Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: A5TAdhaVarguqN57T/hj6pOs0spH+9PgeJCKvCsY6vg=
Subject key identifier: D1:4A:F3:68:38:45:5A:B7:94:23:15:0C:97:A9:B0:8B:E2:9A:87:07
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 019A16F3AC879AE01D920703A1886B9748BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0D7E
Signing time: Fri 24 Oct 2025 16:00:59 +0000
Manifest this update: Fri 24 Oct 2025 16:00:59 +0000
Manifest next update: Sat 25 Oct 2025 16:00:59 +0000
Files and hashes: 1: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (hash: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=)
2: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=)
3: X5Pbij4rIL8Dq4Js8EvH7j1Wj7k.roa (hash: JTczwWTBd9G1q76W/pHd7YHIV9ZzN4VCk+pl3uv/6uM=)
4: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: /FaUGYKNNvjeaiDkVWf/075RmwDpSTRwdHdnAoQDOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f3:ac:87:9a:e0:1d:92:07:03:a1:88:6b:97:48:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Oct 24 16:00:59 2025 GMT
Not After : Oct 25 16:00:59 2025 GMT
Subject: CN=d14af36838455ab79423150c97a9b08be29a8707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:60:8e:61:1f:77:e7:96:2b:73:c8:a7:66:
b1:6d:1b:e9:c6:2f:3c:d5:63:51:9b:e5:1f:49:e5:
80:d8:fe:0a:46:bd:7b:56:dd:7d:f1:88:95:cf:38:
10:0a:a8:ea:7e:87:a2:f9:5c:3a:c0:e4:bb:25:6c:
8f:3c:3e:22:32:24:06:a4:b1:35:5b:28:ff:49:fa:
04:ae:4b:27:92:cc:d9:04:1f:07:39:1e:ae:ad:9f:
ec:5a:af:e7:63:7d:8b:8d:eb:ab:df:71:59:fc:bf:
4d:45:c1:ed:f8:f2:c3:3f:50:78:1f:0e:26:05:fa:
32:11:18:1c:10:c7:6d:6a:24:1f:69:af:fa:56:28:
b2:95:de:a3:44:40:39:22:6c:a5:6e:c6:31:43:6b:
a7:a9:84:95:cd:da:06:92:4f:40:2d:49:e0:f2:1d:
29:f4:92:e8:d1:e1:b0:bc:30:1a:2d:9b:db:72:7c:
79:82:7d:51:34:0d:d2:18:1f:17:2e:98:ba:94:df:
16:38:ec:84:20:80:b9:2c:f9:9b:67:a5:c2:59:a7:
a8:8d:c6:fe:40:ef:18:bd:6b:00:87:79:16:33:58:
60:73:fa:25:b5:9d:6e:8c:a2:1d:ff:81:b0:43:6b:
fe:09:6a:da:6e:10:8b:d6:7b:97:a6:34:10:97:01:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:F3:68:38:45:5A:B7:94:23:15:0C:97:A9:B0:8B:E2:9A:87:07
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a2:67:32:09:f6:23:b9:30:b1:b3:b2:14:a3:e9:78:dc:1c:
e2:aa:7a:53:ad:09:bd:a5:1b:c7:f5:e6:c5:e3:b2:bb:de:76:
ba:1a:01:45:b9:1d:d7:73:59:f3:72:a2:24:da:cf:ff:67:b9:
f4:b8:74:49:6d:00:83:85:7d:0c:82:9c:45:a2:35:71:94:e9:
f3:67:82:ad:0a:4d:d1:90:fb:5e:52:09:e1:83:5c:1c:ad:b6:
2a:fc:10:03:1b:f1:20:18:46:99:14:45:78:97:22:4d:6e:ab:
de:c6:45:87:ae:51:14:0f:8c:a3:fa:23:12:7f:e7:4b:bd:7b:
dd:b9:f6:d4:59:7a:94:65:ea:fc:71:c0:ab:8e:a3:77:55:95:
46:79:90:4b:e0:97:03:b7:24:42:af:f7:ce:d4:b2:5c:77:9b:
bf:e4:85:e5:69:31:5a:21:bb:c1:06:a6:57:ea:4f:ef:aa:65:
ff:4b:a6:a6:9d:ce:bb:7f:51:1d:7b:40:e6:24:88:85:ba:3a:
3e:7c:d9:bd:ee:d9:99:51:df:26:a4:13:97:a9:a6:5b:88:ed:
b4:02:93:ea:f8:36:b9:0a:67:a4:f5:06:a7:92:67:58:84:dc:
cf:bb:9c:67:ce:8b:77:c9:82:b4:ac:34:8e:87:8c:f2:37:0b:
3a:fa:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:30:40 2025 by rpki-client