Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: 8Zlg2LfDC/CqPhU3Vy+z2P3tUlUhiJz2OuzXD/XXvms=
Subject key identifier: 90:06:69:24:01:4E:27:2C:41:87:30:BF:CD:73:F1:6D:46:F7:2D:37
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 019921B17BE1184CB2C751914EA3094F1C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0CFF
Signing time: Sun 07 Sep 2025 01:01:43 +0000
Manifest this update: Sun 07 Sep 2025 01:01:43 +0000
Manifest next update: Mon 08 Sep 2025 01:01:43 +0000
Files and hashes: 1: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (hash: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=)
2: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=)
3: X5Pbij4rIL8Dq4Js8EvH7j1Wj7k.roa (hash: JTczwWTBd9G1q76W/pHd7YHIV9ZzN4VCk+pl3uv/6uM=)
4: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: lIt+NgF/nW4A2e6iD2PUvhNNpjXdoxh7yrEdrxlZHSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:7b:e1:18:4c:b2:c7:51:91:4e:a3:09:4f:1c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Sep 7 01:01:43 2025 GMT
Not After : Sep 8 01:01:43 2025 GMT
Subject: CN=90066924014e272c418730bfcd73f16d46f72d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:a9:be:6c:18:10:5b:8a:6e:6e:ac:52:66:
c8:ef:50:12:e5:00:f9:70:74:fe:06:a0:52:07:69:
98:0e:c0:3c:02:39:4a:4d:8a:82:7d:12:b1:50:c4:
2c:d5:24:3d:6b:6f:68:19:88:f8:08:1b:0e:e0:ee:
6e:34:9a:a4:2b:10:e7:c7:5d:58:26:c5:2a:9c:d9:
d4:52:9f:73:79:3f:9a:e1:b9:63:d6:b3:df:60:f5:
62:59:27:57:78:a2:76:22:a0:2b:d0:24:7c:ab:84:
59:a7:77:f9:dc:ec:95:2c:8b:e2:cd:a7:18:95:5a:
bb:99:d3:9c:2a:99:71:09:a2:5e:b6:56:53:e2:f3:
78:5a:d4:fb:8f:b2:41:e1:c5:97:99:ca:be:bb:98:
54:e1:66:05:ef:e8:55:54:84:65:d3:c0:92:2d:cd:
31:95:17:4c:5a:8e:d9:61:bb:67:43:10:b5:88:40:
dc:69:62:19:aa:11:a2:9f:fd:30:d0:ca:f2:54:4b:
a0:42:61:e6:a7:2e:3f:d5:b3:ef:55:9f:35:9d:f2:
26:3a:7a:cc:5d:cd:71:2f:0d:c3:6e:bb:3e:60:fd:
c4:84:1e:47:fa:2b:3f:75:96:18:55:56:f2:0f:48:
85:9b:89:da:f7:2a:4c:64:5c:5a:f9:18:08:de:bb:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:06:69:24:01:4E:27:2C:41:87:30:BF:CD:73:F1:6D:46:F7:2D:37
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:35:ad:1d:1b:4c:75:cf:a0:1e:74:06:ba:cf:70:21:b5:5d:
9a:17:92:32:d0:de:ec:1d:a2:ef:56:c0:d0:ff:75:e2:47:53:
22:d1:e3:8b:14:10:d2:80:d7:7f:df:7f:de:08:67:c8:3e:6a:
99:6c:05:54:9c:5d:53:17:07:99:fc:07:e5:bc:c3:1d:a4:fc:
53:cb:07:24:ce:65:b3:cf:27:b2:a6:14:1f:7a:52:00:aa:a8:
2c:03:26:45:02:dc:0c:95:4c:6f:c6:0c:3d:a4:d7:e2:56:d1:
b2:e8:96:eb:a6:e6:d0:a4:da:4b:30:80:f0:33:19:8a:94:81:
b2:24:a5:d8:ec:2d:de:f0:9c:e1:14:80:53:a8:3b:a7:19:7d:
cc:fa:5e:f5:c4:24:2d:95:54:c4:c1:e7:1b:18:6b:2c:d6:6b:
c7:b9:63:11:68:77:a7:34:68:3d:9a:71:b9:92:01:18:d1:0e:
dc:79:38:69:f5:79:4f:12:8b:c2:fd:0b:5a:69:86:3a:6b:06:
19:da:c8:5c:3c:1d:4c:d3:66:48:a8:b9:d8:63:01:bd:1d:a4:
95:ad:81:49:ae:a5:0f:ac:21:fd:93:52:c9:a2:04:58:85:f0:
18:cb:c8:b2:9f:59:b6:8b:63:1c:b0:0b:fe:34:2e:08:eb:76:
aa:bd:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:50 2025 by rpki-client