Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: q88fZmbsnN45oVqtAA5UvGD9CfCFKF9Rpg+06wSvHSc=
Subject key identifier: E1:79:41:13:EA:F7:7D:D6:E5:D1:9D:0E:EE:2F:17:FA:F4:E5:AE:0A
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 01995ED8970278D1070107BC8DF184120DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 1697
Signing time: Thu 18 Sep 2025 22:01:16 +0000
Manifest this update: Thu 18 Sep 2025 22:01:16 +0000
Manifest next update: Fri 19 Sep 2025 22:01:16 +0000
Files and hashes: 1: I4AtuDZrbSqrgt1jAfNEMLFaaig.roa (hash: 7wTj3H6so/8/7mTO73IV6vt8mViKC1vPmg3wdN+1rZ0=)
2: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: kSHreC4tD0BSWkK43MnretB3uJLzHuDCznPPL9pQ95U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:d8:97:02:78:d1:07:01:07:bc:8d:f1:84:12:0d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Sep 18 22:01:16 2025 GMT
Not After : Sep 19 22:01:16 2025 GMT
Subject: CN=e1794113eaf77dd6e5d19d0eee2f17faf4e5ae0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:42:5c:b4:97:2b:8b:b3:95:60:bc:15:e4:
dc:a7:4e:eb:23:69:77:e8:bb:41:2e:ae:63:e7:4d:
46:2b:d7:b8:b4:41:3f:3e:fd:5d:46:09:77:62:fb:
e5:a6:ba:1c:0e:ac:ef:e9:80:68:c9:18:75:78:61:
53:8f:63:98:31:05:04:98:fd:46:61:a7:27:a0:d6:
c7:94:9f:db:a4:1c:7f:c5:06:81:49:30:c2:ee:62:
7a:20:89:a9:b2:84:1f:c1:45:fb:d7:45:e9:30:7b:
40:77:84:f1:9a:8c:c0:fc:46:74:c2:dc:ef:07:76:
44:ed:7f:e8:68:c9:37:c1:75:fd:0d:b8:7d:2b:c2:
f6:38:f4:e4:0d:3f:c5:f7:ec:22:be:ae:c0:32:e0:
f2:1d:9b:60:03:bb:84:c8:07:91:b1:2d:d9:af:f8:
15:77:28:7b:f0:78:4c:cb:be:43:6f:19:56:da:18:
c1:0d:7e:62:5a:d6:03:1b:12:d2:7b:25:5f:ff:8f:
1f:6b:d1:63:8f:cf:2f:18:60:20:85:08:d8:d0:81:
94:71:fb:c2:fb:38:4a:78:04:b5:6a:5c:d5:59:5a:
5a:3e:20:14:1a:5a:aa:a7:3f:4a:18:5a:a9:a9:25:
e3:d9:9b:61:1f:a9:75:9a:2a:d8:25:20:36:33:5f:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:79:41:13:EA:F7:7D:D6:E5:D1:9D:0E:EE:2F:17:FA:F4:E5:AE:0A
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:90:ea:d2:50:39:59:42:eb:39:14:f4:d7:4f:93:12:e3:ad:
97:07:d9:2a:18:4b:d4:f0:d2:a9:1a:6e:05:4e:a3:3b:b2:43:
1c:a7:ef:79:64:fa:25:f1:b0:0b:b7:6b:24:a9:33:90:e8:8a:
69:72:fd:b8:30:af:8a:fd:c7:65:62:62:9a:9f:ae:07:c5:cb:
84:bc:15:ef:db:0d:6d:fe:94:91:39:43:b6:ff:89:d7:55:52:
a3:bd:c2:7a:cb:fc:fa:5f:b3:44:2e:73:d7:f2:2c:2f:08:6f:
8e:b5:13:df:63:cd:40:71:2e:fc:0f:7f:54:30:aa:11:4a:fb:
9a:47:dd:d7:63:14:e1:13:36:81:77:c6:8e:64:4f:89:cb:4f:
b7:22:9c:b3:33:d4:cb:43:20:5c:7a:30:31:3f:00:25:1d:d4:
ae:0a:a1:94:b3:6a:0c:9e:80:6d:93:f1:33:67:5b:ea:02:fa:
6d:0a:fd:12:33:a7:4a:35:a2:bf:dc:af:48:3b:87:0f:4e:d9:
b4:15:9e:3d:69:b3:ef:f2:a3:4e:75:a3:6f:0a:ce:43:86:29:
9c:2d:79:f0:90:1d:7a:02:11:3e:db:df:56:7b:c2:a6:2a:c0:
bd:11:a3:f7:bd:ee:56:79:2a:e6:b2:b1:10:34:a3:bd:af:08:
44:8d:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:27:05 2025 by rpki-client