Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: vhAxE9gT0o00hCOwEuqfR8EoT5fQNdAN+cn2u+RDhCI=
Subject key identifier: E6:6C:82:5D:79:AD:A4:A1:34:92:94:9D:84:EC:C8:89:83:B9:5B:74
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 019921B16C84FEBF4B41AD072C81ADB03954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 0F49
Signing time: Sun 07 Sep 2025 01:01:39 +0000
Manifest this update: Sun 07 Sep 2025 01:01:39 +0000
Manifest next update: Mon 08 Sep 2025 01:01:39 +0000
Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: sQdvOgkcLAEn9IQ1d9CGbpH0FVZQEe/FkaPSa5il2F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:6c:84:fe:bf:4b:41:ad:07:2c:81:ad:b0:39:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Sep 7 01:01:39 2025 GMT
Not After : Sep 8 01:01:39 2025 GMT
Subject: CN=e66c825d79ada4a13492949d84ecc88983b95b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:55:8e:a8:9a:7c:42:07:30:bd:26:a3:db:
87:23:33:05:0e:9f:4b:b1:2d:81:dd:3b:93:6a:80:
28:8e:8d:1b:1f:bd:be:8f:c6:48:25:98:9a:a0:06:
5b:3a:cc:eb:c7:05:1c:0e:a1:60:43:7a:87:94:09:
4b:d6:d8:b4:94:78:9a:1e:2a:fa:4e:8b:f9:b4:96:
10:00:d0:5e:e5:4d:96:0a:80:d4:07:76:9c:b8:0a:
b8:54:0f:d5:ac:c6:22:ed:97:04:5f:d9:26:86:b5:
1a:a7:c2:17:45:39:aa:6e:a3:39:88:4b:e9:b5:3b:
0d:e4:8f:be:d4:a8:b1:1a:a2:12:62:56:02:fd:6e:
b3:34:25:fa:8d:3b:63:ef:3e:5e:e6:5a:a5:a6:67:
ff:6f:31:7b:3d:dd:97:12:aa:a4:f8:59:c4:67:aa:
ca:23:7f:64:63:20:ea:68:7e:7f:5c:07:7f:a7:e9:
81:73:a9:6d:af:f7:d2:0f:90:9f:06:46:b5:ed:2a:
85:a0:b2:08:42:99:79:11:94:1c:79:7e:c3:16:df:
0b:8a:26:ce:a9:ea:70:21:fe:a4:67:b5:36:43:d7:
db:47:d0:c5:cc:ee:3f:5f:27:ba:63:54:e1:20:91:
84:e5:55:d6:18:3c:23:5c:cf:04:9a:62:54:c9:63:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:82:5D:79:AD:A4:A1:34:92:94:9D:84:EC:C8:89:83:B9:5B:74
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a6:79:4a:b9:76:2e:45:25:a6:62:63:bf:10:39:b7:1f:0d:
a4:7c:1c:05:9b:4a:73:e6:6b:15:9e:ae:e0:2a:a2:72:5c:c2:
2c:29:6a:99:a4:e6:b1:6e:d8:19:d7:26:44:90:9d:02:8a:8e:
86:72:06:41:d7:c0:76:4c:8b:cb:cc:ff:d6:df:58:6e:eb:05:
f9:2c:6a:42:48:92:59:96:9c:8a:22:81:44:c7:d4:78:21:f2:
2a:2b:d8:69:87:5c:43:ef:82:c0:b8:90:5e:ef:e3:c8:03:ec:
0a:02:5f:82:d1:ce:88:40:59:6b:89:50:2a:19:44:12:01:3b:
78:7d:df:21:9b:db:d5:ee:da:6a:fe:9e:a8:69:2e:05:79:24:
94:35:05:60:f8:26:1b:da:9a:61:eb:15:59:3b:a4:c9:ee:64:
3d:e7:e9:3d:ac:41:0d:bc:09:19:b7:aa:8d:f2:de:e5:b0:3e:
c9:f7:25:b6:19:6e:ee:69:14:8d:c1:18:d8:30:b5:c3:49:f3:
e3:0e:e4:f3:81:e3:58:d9:07:83:07:af:e0:4f:62:03:a7:a0:
8f:87:f4:dd:3e:40:fe:05:b4:61:f5:75:b8:6c:ce:ae:50:ae:
82:05:6a:c7:23:6a:dd:30:2b:bc:11:9b:60:ba:4a:a0:0a:39:
b9:59:4b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:30 2025 by rpki-client