Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: GM7Hem7Ap7giWXHPzVipxwqIT5OPQS2Sdini59S4twc=
Subject key identifier: E5:B1:D4:AE:66:38:80:B3:94:89:2D:BE:7A:B0:9B:E6:43:33:86:A8
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 01993794B2C4A383AB0AB919C10E0B4F7E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 160D
Signing time: Thu 11 Sep 2025 07:01:55 +0000
Manifest this update: Thu 11 Sep 2025 07:01:55 +0000
Manifest next update: Fri 12 Sep 2025 07:01:55 +0000
Files and hashes: 1: ShowtNM2m2UKeBL8F3fZYKX41FQ.roa (hash: fLdZxXolLRuOUGV4tUzHHqmQm+iuYEtRLW2OEHSE+Js=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: kC7Yw9scuqdsl+POL4BeSIrQf6ZIfXp3BlRx5hKpFpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:b2:c4:a3:83:ab:0a:b9:19:c1:0e:0b:4f:7e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Sep 11 07:01:55 2025 GMT
Not After : Sep 12 07:01:55 2025 GMT
Subject: CN=e5b1d4ae663880b394892dbe7ab09be6433386a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:16:a3:05:0c:25:c6:23:62:78:70:6b:94:
57:46:fc:71:8e:e9:23:6d:d4:e7:e7:aa:15:d1:47:
b7:94:9d:d6:25:1a:f5:d1:49:7b:47:0f:f5:61:0a:
1f:72:2f:61:42:81:3c:09:24:a2:d5:4a:38:78:cd:
9b:9c:90:ee:86:a9:e5:f0:d0:3f:0a:a2:a8:4b:ac:
da:18:93:4d:30:e4:ec:71:bf:73:7e:26:84:7e:e6:
82:0c:05:d7:d4:19:5d:89:0b:88:7b:c1:9c:11:76:
8a:23:b1:5c:b9:0e:79:35:f4:5f:0a:68:a6:ba:2f:
56:21:af:39:1f:66:2b:93:33:da:d2:e6:a2:66:ac:
55:c1:2e:ba:55:c8:6c:38:a3:26:96:fd:67:fb:8b:
ec:77:19:70:ac:d8:57:86:87:96:db:af:c2:b3:72:
52:e7:1c:bf:cd:4f:f8:11:b3:10:a8:86:61:ca:71:
ed:a9:4c:ac:11:16:8c:1f:50:52:aa:ec:a6:e7:d5:
04:8d:e3:d4:c7:05:9f:e0:a3:16:2d:b9:ad:99:27:
47:e1:c5:61:b8:35:ea:1e:33:70:31:78:2d:13:1b:
5a:12:ce:57:f7:7c:5b:01:a9:fb:e8:47:cf:36:7f:
e6:ba:46:3f:37:ed:65:40:da:61:02:7b:2c:fc:c7:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:D4:AE:66:38:80:B3:94:89:2D:BE:7A:B0:9B:E6:43:33:86:A8
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:f3:2b:1c:f3:55:a9:b2:dd:78:2c:69:c0:5e:68:fc:7e:
a3:71:db:f7:e3:31:9a:6b:35:53:c9:d0:76:8b:bf:e1:24:cc:
cd:6a:e0:d9:07:3e:4b:d2:62:59:b5:bf:92:82:40:84:55:2e:
a1:20:c7:c0:38:3d:9f:d4:97:e9:99:bf:f9:59:61:8b:2a:fe:
9b:06:d5:6e:99:bd:8a:cf:de:cd:6c:83:68:1c:01:73:d9:07:
41:7c:62:ee:0a:55:cb:2e:14:f0:3b:44:4c:ad:2d:fe:13:92:
a4:7e:12:ca:72:a8:36:f5:98:ad:08:70:78:80:5f:bd:29:8e:
d4:83:e6:3b:a9:14:92:ac:40:50:9b:24:08:d3:c9:42:d9:8d:
e4:13:37:12:41:d1:95:07:46:b8:7f:f3:55:9b:19:7b:7a:f5:
cb:7d:a2:c7:a7:8f:4e:a1:f9:73:ee:61:dd:9d:1c:53:f8:c2:
12:bc:f2:3f:5a:22:0c:9c:76:98:fc:7c:6a:76:09:e8:14:bc:
bf:e5:21:62:e0:f0:d8:82:c2:c4:52:fb:5f:f7:ac:3c:51:96:
f0:8f:ea:e2:6f:54:f9:95:66:db:88:e0:f3:63:f2:82:66:5a:
07:d1:fc:35:10:11:c2:ba:11:15:64:e2:a4:89:b4:c0:a2:cf:
31:08:17:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:47:05 2025 by rpki-client