Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: DtvT5JEsbFirJvyxLzKqSJMPNn9mu8Nsn5C7V1QBxGs=
Subject key identifier: 22:FC:9F:A3:3B:6F:BA:DF:E2:E1:C0:46:13:2B:5A:B0:0A:A3:B9:A5
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 019922557225549ECFA6DDC86302529AA8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 024F
Signing time: Sun 07 Sep 2025 04:00:49 +0000
Manifest this update: Sun 07 Sep 2025 04:00:49 +0000
Manifest next update: Mon 08 Sep 2025 04:00:49 +0000
Files and hashes: 1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: ZVx3ISoHQbuZBVAndEQtjsDgSZ9arQVZCB3LjfOUKvk=)
2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:72:25:54:9e:cf:a6:dd:c8:63:02:52:9a:a8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: Sep 7 04:00:49 2025 GMT
Not After : Sep 8 04:00:49 2025 GMT
Subject: CN=22fc9fa33b6fbadfe2e1c046132b5ab00aa3b9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:23:d6:07:c4:7b:0b:f0:c1:cc:90:b8:ff:
a0:21:7c:b4:f4:6d:fd:b0:25:59:cf:63:f7:84:a0:
0a:fa:26:9e:fa:00:81:12:f9:e5:7e:2b:ae:29:d9:
ea:17:05:99:23:27:4a:ec:d0:2f:d8:d8:38:58:69:
f8:6f:77:0a:49:84:ac:c6:e1:05:ca:5b:c2:ec:b2:
f0:3e:f1:96:42:ec:62:33:66:70:4b:e4:6d:b6:d4:
80:8e:07:91:df:48:46:84:10:66:25:26:4f:ea:22:
66:c7:d2:7a:42:9d:6f:f3:4a:47:0a:64:19:80:f9:
7f:71:3c:cc:3d:bb:ee:c9:8d:52:5b:b4:56:f6:78:
57:04:03:72:d8:55:be:82:74:b6:19:95:17:18:72:
6c:c5:c8:f4:a8:fa:81:1f:b7:cc:d1:f9:65:f5:17:
e7:dd:40:49:9f:0c:ca:5f:c8:c5:d2:a3:4a:54:ad:
38:e8:e4:48:89:f5:fd:d9:e9:8d:54:5e:d5:ba:c8:
b6:9f:f2:73:18:05:a8:b7:eb:b0:fd:05:6f:e2:fb:
e9:82:09:54:de:97:a1:28:ae:97:d8:3d:ff:c2:ea:
4a:c4:4d:37:8f:2a:1c:c6:0f:38:51:1b:98:f0:16:
5c:d5:43:3a:67:4f:69:4a:d2:5d:a9:35:ea:ea:27:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FC:9F:A3:3B:6F:BA:DF:E2:E1:C0:46:13:2B:5A:B0:0A:A3:B9:A5
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4f:13:35:41:bd:ca:44:50:d3:4e:01:66:26:6c:0a:a0:fc:
f8:9e:71:b6:6a:3b:e0:d6:6d:f8:59:6f:4c:a9:f6:9e:b6:3e:
52:be:81:c0:1c:01:4e:fd:e1:3b:d6:97:f8:e2:51:d0:76:9a:
29:87:de:5c:30:a2:63:43:13:98:82:0a:64:e4:ea:c4:cc:a3:
f3:1d:f5:c7:37:76:ff:a6:f7:f0:18:0d:63:1d:23:a5:69:0f:
19:00:88:35:33:4f:54:46:12:c6:75:11:d2:8f:e2:d0:d6:19:
77:02:f3:a1:59:5f:b7:4c:7f:76:74:c3:57:ec:c2:d3:7f:4d:
09:82:b1:44:92:92:c9:c0:3f:59:a2:72:bd:19:8a:98:1e:a3:
ec:7a:cb:88:18:61:08:d2:df:de:92:7d:0a:d4:c8:67:2a:81:
a5:40:d7:a9:71:b1:23:fd:b8:47:76:6f:b6:e7:e2:e1:9b:e6:
c9:84:b9:95:0a:a2:26:c1:41:30:5b:88:a1:2a:37:dd:55:82:
39:74:62:2c:97:59:0d:54:fc:88:c4:69:6d:43:13:dd:25:59:
e4:64:b4:7d:a9:78:e9:6d:b7:97:d4:31:99:8c:45:35:99:12:
5a:94:54:9a:84:c0:7b:32:dd:50:02:b7:83:29:47:9e:61:19:
04:2a:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:50 2025 by rpki-client