Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: k6GaTZ7/O0PMhmmdxQhdvm7KGcd3jqvKHQ7ZJN2zWVU=
Subject key identifier: 35:4A:6D:0C:08:69:94:6E:52:06:36:AB:97:85:A4:23:7F:52:92:67
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 019921E7E3155968C90A74F02966082E0046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: FC
Signing time: Sun 07 Sep 2025 02:01:08 +0000
Manifest this update: Sun 07 Sep 2025 02:01:08 +0000
Manifest next update: Mon 08 Sep 2025 02:01:08 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: PfkSUQ1gN2oNjsXDxfCWyDSCqisDVnRYPa/geySNkRs=)
2: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (hash: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e3:15:59:68:c9:0a:74:f0:29:66:08:2e:00:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Sep 7 02:01:08 2025 GMT
Not After : Sep 8 02:01:08 2025 GMT
Subject: CN=354a6d0c0869946e520636ab9785a4237f529267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:b0:a9:88:78:b8:14:0c:2e:1b:1e:78:a4:
87:48:cd:48:c1:af:71:ec:33:b5:78:2f:25:ec:26:
63:87:f4:23:93:00:0f:93:93:9c:d5:80:1c:38:2c:
97:b2:8f:d0:50:63:e8:ba:d8:c1:47:1c:ea:d0:5f:
db:78:2d:1d:64:31:27:e8:e5:ac:25:a6:f6:e9:0f:
22:d5:67:13:f6:44:d3:a6:42:82:67:d9:a2:f8:89:
81:04:ca:14:79:89:05:13:94:3c:6d:0e:1d:a4:ab:
7a:ba:4a:a2:43:30:e9:1c:c8:bb:5e:de:51:c7:0d:
9f:25:56:7c:a9:dd:e7:3c:1f:c9:4f:37:0a:cd:b3:
4a:f9:21:09:e6:e5:a7:4b:6f:4c:d7:75:f9:00:2a:
e2:cd:23:e2:22:e0:5b:64:9e:df:ee:ce:79:07:63:
be:09:75:b6:cf:bc:eb:94:26:f8:43:ce:8a:98:86:
68:85:51:72:8f:a7:92:1e:28:59:19:ab:3b:d2:6c:
2f:49:37:26:e1:a1:c7:08:3c:48:0b:a6:66:3a:e4:
71:77:02:b3:10:4f:2b:2c:26:eb:b7:6c:d3:e0:b2:
6b:a0:6b:a5:93:37:63:f7:3d:07:1c:f6:48:4b:22:
f1:3f:a0:05:8a:b7:82:4a:c8:78:e7:9c:52:54:d7:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4A:6D:0C:08:69:94:6E:52:06:36:AB:97:85:A4:23:7F:52:92:67
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d5:d2:9d:8e:b0:70:38:38:f7:37:58:0b:97:18:23:f8:ce:
af:9c:18:aa:52:c3:5e:04:19:a2:44:a6:f3:1a:0a:50:7c:8b:
04:2d:c6:26:4e:03:93:fc:64:68:f4:b2:9f:d6:f9:e4:3b:f4:
5d:c0:b2:31:d1:60:4d:b2:72:ed:e9:28:7b:7f:6e:79:56:88:
f8:8b:68:de:40:e3:b1:29:87:d7:ca:a3:c8:cb:bd:56:2b:36:
6e:a0:3f:ef:1b:8f:64:7e:73:ab:16:3a:bd:65:30:9c:37:12:
18:79:6e:60:40:d9:96:e8:47:7c:c7:d7:66:9a:73:03:a1:f1:
28:a2:51:4c:3f:7e:34:67:3d:86:f3:73:e2:3f:88:ba:f8:3b:
3a:dc:4e:ec:1a:2e:5f:a3:a1:90:4c:7d:43:96:8b:fe:6a:4c:
ff:2a:0e:35:da:eb:d9:48:7f:f6:00:19:98:c2:72:cd:89:25:
4f:dd:d6:2d:2b:d3:26:15:d5:33:20:f8:c0:29:47:28:dd:34:
ca:c0:37:1a:f6:84:40:cc:4f:7a:32:c9:bf:d2:0c:28:ee:35:
a2:64:68:55:99:2f:23:34:3d:0b:92:dd:03:46:8f:7d:37:96:
2a:eb:9f:16:db:49:2e:b7:16:47:46:77:81:94:d9:69:27:ad:
aa:97:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:28 2025 by rpki-client