Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: rFqAeHy04OlianPQjdUWTaXmJaMeR9grXSUBz0Y//PI=
Subject key identifier: 3E:B3:B9:9E:43:F2:4B:55:13:0C:B0:B5:60:A6:7C:9B:FB:D2:8E:13
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 01991DD5D2280D5ACEB2549A37EB2D536BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 9F
Signing time: Sat 06 Sep 2025 07:02:56 +0000
Manifest this update: Sat 06 Sep 2025 07:02:56 +0000
Manifest next update: Sun 07 Sep 2025 07:02:56 +0000
Files and hashes: 1: FxDzr4dkx7gP7-0QN9qS1QSuAFE.roa (hash: 2+R/DqRWvZVRETti21Zc43TNJBFDVQNiLw4+AXiQO7g=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: SMXO729Gi8GfIFhahGxSoQ5yWwa8MGiY7VLP4wkg3/w=)
3: aSbzflu2ueBH4HFc6DoptPDX5Rc.roa (hash: Ps8MiI9EyDzRjGBlJSLfyNG1HvPUvesSrz/Go0N5kKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d5:d2:28:0d:5a:ce:b2:54:9a:37:eb:2d:53:6b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Sep 6 07:02:56 2025 GMT
Not After : Sep 7 07:02:56 2025 GMT
Subject: CN=3eb3b99e43f24b55130cb0b560a67c9bfbd28e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:e4:bd:9d:ef:74:5f:ea:33:31:85:bf:aa:
ce:a1:55:dd:05:60:ba:e9:d1:04:3a:55:a5:fc:80:
82:e4:d5:f9:ed:a0:3d:61:b3:34:0d:af:21:a4:61:
e7:b4:82:d0:4b:f5:66:73:a3:50:d8:01:a8:41:7e:
63:aa:80:75:bd:c8:41:f8:ea:25:bd:50:d6:5d:85:
d3:b9:fa:8b:23:c2:a8:1a:c0:b0:05:bb:78:11:87:
a4:33:dd:f2:c4:6f:10:d1:e5:20:43:98:8f:39:b3:
60:cc:21:26:66:52:90:99:af:a9:ba:d9:f5:60:cc:
73:ef:41:3a:01:74:bb:f8:95:3c:e6:fa:75:b8:62:
f6:87:ac:c5:0c:2c:80:34:03:a8:f1:59:52:44:54:
09:40:d0:db:55:6c:fe:a5:46:e6:f0:44:35:31:ef:
43:99:f8:1f:96:c9:88:5b:3e:23:11:4e:9e:ca:4a:
0e:b8:3b:30:6e:d4:e6:f9:d9:57:61:a6:cd:e9:a4:
b1:d1:04:17:dd:8d:be:f5:e1:24:b3:22:bd:ca:e6:
15:b0:8e:68:ff:8a:6c:0b:d7:b8:cb:2a:4c:5b:e2:
d7:fe:8d:ed:88:ab:e1:a8:c5:29:15:be:65:1a:7f:
21:48:a1:1a:a1:eb:1c:1d:2a:45:2e:97:d0:8c:d0:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:B9:9E:43:F2:4B:55:13:0C:B0:B5:60:A6:7C:9B:FB:D2:8E:13
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:e2:43:59:ee:c6:94:a2:56:15:7d:1a:7e:a3:84:c0:f5:
02:7b:dc:09:af:2e:70:03:3f:67:11:fa:c6:e0:93:12:f7:1a:
7f:9d:db:d2:a0:96:c6:ee:65:a5:27:90:48:c0:e3:3e:2e:74:
dd:71:47:25:14:34:11:e5:c8:76:bc:0b:6c:6d:06:b3:8b:1b:
54:44:26:b5:03:a4:43:82:10:60:d8:03:80:a6:aa:31:17:60:
1b:f3:3b:de:25:e9:4c:de:88:af:b5:5a:90:cc:20:c1:d8:33:
c5:b3:f7:58:a7:d9:60:12:02:9c:91:ed:ad:f8:28:89:00:00:
8a:01:a4:1a:1e:07:1e:5e:c8:7a:7d:c7:5e:d4:61:26:86:6a:
9b:42:37:73:69:48:d6:c4:0d:0a:3c:db:91:92:15:b2:2c:2a:
fb:6a:1f:24:21:59:64:4c:67:09:03:9b:0c:4c:26:79:0d:b2:
51:c8:4a:cf:36:cd:ba:40:27:c3:39:f4:63:95:96:81:0d:b5:
ea:1d:fb:7c:2d:6e:53:3e:a0:b0:9a:88:1d:c7:da:52:d4:56:
7b:7f:cd:e0:81:93:4c:5a:d8:ac:9b:76:7c:c1:8a:cb:da:57:
2a:26:21:24:38:ad:a6:02:f2:f8:b0:f9:ff:7e:36:8e:ec:72:
c6:ac:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:26 2025 by rpki-client