Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: DvEw3ilNxNg+vpoMjVwJQuGJcsDxY8BCIko/VoDSU6c=
Subject key identifier: B7:78:5B:4C:86:C7:6D:5D:02:7B:D1:56:6E:39:35:AE:18:C1:BF:0B
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 0199228D1A86947639D1488AF53D041FDA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 09E5
Signing time: Sun 07 Sep 2025 05:01:36 +0000
Manifest this update: Sun 07 Sep 2025 05:01:36 +0000
Manifest next update: Mon 08 Sep 2025 05:01:36 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: tR29ozpG3jGaOFC86W2dx+4sGQppeBtXb5Hd0ajkdWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:1a:86:94:76:39:d1:48:8a:f5:3d:04:1f:da:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Sep 7 05:01:36 2025 GMT
Not After : Sep 8 05:01:36 2025 GMT
Subject: CN=b7785b4c86c76d5d027bd1566e3935ae18c1bf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:51:d9:d3:6c:ab:87:63:47:20:ab:66:7b:
30:3b:3b:cd:7b:fc:58:29:b8:46:80:f7:ae:13:80:
df:91:07:74:af:ad:d9:54:b0:b0:2a:14:c5:88:c0:
f9:ae:6c:91:c5:68:03:9d:4b:06:49:48:3c:0e:33:
cd:b6:3d:d9:9b:bd:1e:80:16:e7:54:0d:13:fb:78:
00:90:c0:ce:82:0d:ad:70:68:31:7c:b9:f1:64:7d:
e4:71:05:20:d2:ec:49:3f:b8:c5:f0:79:62:2a:6c:
1a:93:fa:62:de:85:3e:63:7c:cb:7c:32:11:ef:ef:
b5:bb:c9:52:3f:8b:fb:5c:c2:9e:c9:5d:7a:24:8a:
e2:49:05:5e:51:3a:66:43:8f:5a:c9:dd:b3:19:b1:
3a:56:a1:3d:a8:49:18:fc:0c:2f:65:c2:e7:8e:67:
dc:a3:2e:72:64:64:99:67:40:b3:7b:2a:b3:47:d2:
66:1e:88:01:00:fd:ed:23:f1:d7:f5:48:68:36:9b:
8c:e7:41:99:22:d8:03:5e:51:82:83:1a:a2:33:6a:
93:36:d5:6b:34:08:36:7f:82:d1:f5:26:b0:40:16:
0e:15:5f:e0:d3:16:b2:18:3f:5e:9c:dc:ae:3a:3e:
86:e5:66:88:5a:b9:62:e2:0c:3b:b5:f7:12:9a:7b:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:78:5B:4C:86:C7:6D:5D:02:7B:D1:56:6E:39:35:AE:18:C1:BF:0B
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:55:4d:ce:49:35:e1:3e:12:a7:2b:4f:87:d9:da:40:ff:6d:
d9:9c:e4:f1:87:d4:82:96:a9:db:04:d6:06:f1:4b:0c:08:6e:
b2:3d:7a:bd:0a:35:08:d6:96:a0:5a:e8:d6:d4:83:d6:2c:90:
88:ba:ae:00:49:7d:e5:95:29:0a:8c:57:c6:9a:7b:bd:69:26:
f0:8d:2c:07:53:52:f5:f6:6d:b6:55:d3:b7:61:7a:32:6d:45:
86:89:1b:00:f3:6c:c3:b0:c5:43:80:73:08:7f:4a:4f:cc:28:
06:e4:1a:e5:52:86:99:ff:94:71:c2:fb:7d:87:67:e3:43:91:
26:6d:76:f1:2f:fd:c2:0f:00:d2:c2:dd:12:f0:6c:c8:94:21:
33:d1:e1:72:51:67:e4:82:06:4f:c3:98:f5:c0:51:e6:a9:4b:
32:4a:e6:3e:a6:48:5c:a1:b0:64:21:e5:a7:1d:1e:03:31:01:
bf:dc:29:81:1e:83:d5:86:d9:68:8f:30:1e:3c:58:c4:6e:ce:
b1:6f:9b:dd:47:21:e7:14:93:2b:e2:d0:b9:91:a1:1c:76:1d:
04:af:3b:ed:77:fb:be:ca:d5:55:27:72:36:4c:6d:77:50:e3:
82:b7:45:66:2f:1f:9e:04:dd:93:f8:e9:24:b3:26:f3:ee:66:
44:4d:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:03 2025 by rpki-client