Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: SSdmZIbmYw4DEhFqKqmCvHZDmwouGWvqJJe7YEwYQ/U=
Subject key identifier: A3:E6:D2:F4:4A:6E:14:A2:27:19:3D:32:E2:C5:22:38:87:F8:DD:5E
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 019938DFF00DED4904E4144199A6E1891430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 03E8
Signing time: Thu 11 Sep 2025 13:03:43 +0000
Manifest this update: Thu 11 Sep 2025 13:03:43 +0000
Manifest next update: Fri 12 Sep 2025 13:03:43 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: xvEHTnRsfH1IKM8ZOCNISF+/C9vKuEdG8a3JM0HnB88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:f0:0d:ed:49:04:e4:14:41:99:a6:e1:89:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Sep 11 13:03:43 2025 GMT
Not After : Sep 12 13:03:43 2025 GMT
Subject: CN=a3e6d2f44a6e14a227193d32e2c5223887f8dd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:01:ee:f0:eb:8d:c8:d6:23:6b:78:01:1e:
16:a6:a3:c7:8e:4e:6e:84:5e:38:05:1c:77:47:e9:
d7:86:b5:a7:fd:46:73:e3:31:8e:c0:4b:fd:e8:30:
d2:e3:6e:63:81:71:ea:a1:a7:52:c2:d5:a0:87:3f:
0a:32:af:31:2b:2a:29:28:3a:b9:d1:ae:df:4e:de:
96:1b:49:ad:c4:51:32:75:66:66:c1:fc:6a:c0:e2:
50:9c:13:40:12:de:0b:d2:47:9c:2a:f4:8a:01:b5:
d2:52:e8:3e:62:16:c2:4d:5a:06:9e:ac:48:aa:2d:
6f:bf:e5:a1:66:01:8e:6f:ca:b2:dd:3c:da:d7:30:
f3:a0:0c:55:60:6e:a3:b9:e9:84:e6:fd:e5:94:9c:
db:34:46:4c:55:e2:e6:a0:1a:a6:ae:be:cf:6b:d4:
e8:66:db:38:3c:e1:24:24:39:56:63:7d:a1:89:85:
28:e5:c7:85:1a:4c:46:21:ec:44:3f:ff:89:d0:a5:
ce:b8:a1:81:f8:d5:26:08:82:53:54:09:1b:68:4f:
e9:bc:37:f4:33:c0:5a:73:f8:60:6d:02:97:a6:b0:
39:ec:47:dc:8d:8e:2d:93:c0:10:6d:fb:fe:3c:5e:
c9:55:9a:36:44:8d:48:bd:5f:b3:0f:d5:69:6b:c2:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:D2:F4:4A:6E:14:A2:27:19:3D:32:E2:C5:22:38:87:F8:DD:5E
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f4:1c:f5:34:51:af:5f:ce:6f:91:54:2e:23:d5:25:a1:5c:
4a:47:17:3c:34:58:06:cc:88:aa:96:d1:12:71:3c:67:5b:a2:
f0:a3:54:96:ce:eb:e9:0c:6b:a0:4b:55:e8:df:92:9e:3c:cb:
88:02:ca:e9:10:1b:18:ee:ae:9c:7e:44:2f:49:e0:f9:93:06:
86:82:62:47:66:43:49:a3:6d:35:cb:38:ae:29:a6:7a:36:21:
36:02:22:76:37:18:4e:f5:81:5d:d9:3e:ad:f9:8e:03:1f:45:
77:66:73:c0:e7:a5:69:78:90:8e:90:30:2a:18:d4:52:c6:0f:
33:30:ae:99:4d:56:72:51:45:64:bf:0a:73:33:77:fb:06:54:
76:fd:2d:23:48:c7:fd:b1:de:34:25:f8:93:56:15:ad:d7:27:
44:32:d0:1e:a1:f6:2c:b4:90:f3:03:65:d1:e9:f3:88:18:5f:
ba:9a:dc:2d:c7:4d:77:1d:46:09:5a:e4:10:1f:77:a7:7e:44:
fb:35:45:e4:3e:79:a5:55:43:09:61:a3:65:44:73:45:27:6c:
0b:d2:01:13:af:1f:8b:3c:2f:ff:b3:32:c7:0e:21:ae:11:92:
66:12:cf:29:6c:c3:2d:a8:8c:8e:7f:44:62:75:72:5a:6f:03:
3a:a5:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:34:23 2025 by rpki-client