Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
File: _QB9d6vr_l2GsInvuT4C3NMASsY.mft (raw, json)
Hash identifier: u/A+py1jKO1PkLgkbEophtG9Uud8qJEA57/3JdQAqlw=
Subject key identifier: 02:7C:FE:FE:52:35:B5:9E:34:35:37:14:99:49:4D:28:92:BB:9B:BE
Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Certificate serial: 01992330CDC449935CC288C810B2C964E0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
Manifest number: 0127
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: _QB9d6vr_l2GsInvuT4C3NMASsY.crl (hash: 2GkMZdLWlvN8IQqolXrkcCaxpq+gSada5YNKv+4BTCo=)
2: bWo1p2kvLDaN2hfsArhL9srtb9s.roa (hash: UWHNEgib/6NKUlAE0qvnRy4yH/056aCyLvDBcALH7NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cd:c4:49:93:5c:c2:88:c8:10:b2:c9:64:e0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=027cfefe5235b59e3435371499494d2892bb9bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:c3:4b:cd:29:14:7b:e2:5d:e8:15:5b:47:
91:d7:c9:31:79:ec:e5:73:62:68:41:56:29:82:29:
94:3b:45:25:92:0a:b0:86:a5:20:da:7a:31:13:84:
da:46:e1:17:33:0e:d3:bd:83:97:f3:24:71:75:c6:
eb:0c:c2:2b:bc:91:44:b1:c3:81:fd:d5:88:03:a1:
1f:b4:19:9c:94:1a:41:a4:63:a3:c9:d9:1b:21:f0:
b6:ed:ef:db:f4:c7:0b:05:0f:f5:ff:ff:6a:24:9f:
e3:a9:de:0e:5b:74:92:3b:54:b2:7f:3a:1d:7f:63:
0a:2a:f0:4f:b7:cb:00:ff:02:e2:38:e3:90:42:2e:
1a:bc:03:db:40:53:6b:ef:44:ca:d4:b2:3c:ef:6d:
4c:eb:34:81:08:7b:76:c8:95:7f:68:d0:c6:22:80:
8a:e9:8b:c4:24:13:67:0c:96:26:14:67:23:8f:3e:
be:b0:1d:11:76:8b:93:d6:00:61:54:6b:2a:92:13:
cb:b3:50:db:45:32:36:be:3d:19:58:67:0f:c4:20:
04:ac:c1:87:02:d2:5f:4e:d6:4e:4b:8b:28:a6:0e:
ea:34:a6:b5:6b:ec:05:80:bd:1b:d2:1e:02:a2:fb:
cd:23:db:fa:29:68:6b:08:a1:80:b5:83:a6:c0:20:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7C:FE:FE:52:35:B5:9E:34:35:37:14:99:49:4D:28:92:BB:9B:BE
X509v3 Authority Key Identifier:
keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:37:13:74:d1:d9:83:70:7b:fb:3b:fa:b3:d5:8b:03:f8:80:
e0:43:75:cd:12:25:78:b6:10:1a:93:4f:d2:bf:41:21:f1:3a:
2a:60:20:dc:4b:95:32:e9:84:1e:a7:bd:d2:7b:a9:e8:47:e2:
6a:11:d8:0c:48:c8:c5:ce:06:e9:bf:6a:a8:8c:64:ce:9c:31:
05:c6:a6:b0:96:14:d2:c5:78:39:5f:e2:a5:ec:a6:4c:4e:6f:
14:ae:0b:52:ff:32:6b:d8:ad:5d:06:13:3a:c8:e0:f4:bd:d5:
f0:9c:e1:95:0d:eb:13:f2:74:72:d7:c0:87:8f:52:ed:a6:e6:
36:10:f6:69:bd:c7:cb:42:9f:fc:4b:82:80:4f:45:28:c2:0a:
fc:f1:25:06:af:17:95:21:4a:b0:ef:8e:a8:de:e2:09:17:a7:
04:ab:85:bd:4f:f3:61:db:fc:4a:11:72:59:19:3e:ca:bf:86:
d0:a3:02:59:bd:12:6a:9d:85:66:fa:e7:87:56:29:8e:1c:9a:
60:05:15:a4:31:63:fb:2f:08:2b:fd:40:fe:f7:08:d1:cd:26:
26:ba:c2:a2:51:71:0d:e1:20:b6:2e:f3:4f:de:6f:c2:3a:fc:
75:41:02:87:9e:3c:57:e1:50:77:0c:21:18:2c:81:2f:be:c8:
2b:06:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:36 2025 by rpki-client