Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: 5u9I+hR2/zcrn+2dYlZSobviNl+FOkg9gcijKFmSUTs=
Subject key identifier: C1:23:C6:2F:56:10:26:C6:BF:69:FA:96:B8:35:3B:D4:B3:20:53:C5
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 0199221E9F61A77D0B02FA6896A41DD1A41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 6A
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: BLqnqYXfNpeDaXR1TT1NxALunTU.roa (hash: HiOoL5QoKyGrCXU+ZvFwDx1bHqF6go6OY2pLOukJd1s=)
2: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: hU/j3gtTIKbdA86lCGaYOZrYN0ivWVC4lD44TRnZvIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9f:61:a7:7d:0b:02:fa:68:96:a4:1d:d1:a4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=c123c62f561026c6bf69fa96b8353bd4b32053c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:3f:56:bf:9a:c5:48:ea:7a:ad:ab:4d:f0:
f5:83:d4:59:4f:74:fd:29:ce:ae:3d:15:eb:5b:c3:
97:9b:dc:e8:1b:d0:f5:b0:98:c3:26:15:a1:c3:67:
bb:08:4d:08:09:f8:0d:ca:6b:83:81:60:17:8d:3b:
b7:42:da:51:77:42:cb:d2:78:44:23:75:08:19:01:
fe:43:3b:16:47:fd:3c:c1:42:2c:cb:d5:c6:d5:d6:
2a:79:47:cb:6e:08:aa:6a:63:10:d4:0f:c9:a6:e6:
d3:ab:5b:59:e1:26:c5:4b:78:02:1e:c9:f2:70:92:
22:7e:dd:12:92:20:91:b6:b6:ba:c1:ff:41:55:8b:
13:c7:fb:95:57:2f:07:1d:82:1a:4e:42:62:90:86:
b6:ff:0e:7a:ec:d9:17:19:47:b6:0b:8d:54:05:9c:
44:80:03:8c:8f:79:6e:5e:b6:be:1c:9f:7a:6c:41:
25:44:35:2d:cb:26:75:d5:b7:d9:dc:56:f7:e4:ea:
18:30:2e:26:26:ff:a5:15:55:40:ac:36:4c:f3:39:
5d:5a:77:9d:25:a1:19:dd:54:99:7c:4b:46:2c:00:
a9:7b:0b:88:74:bd:7d:e1:1e:9d:7c:61:9b:17:87:
c3:fd:e9:ac:e2:cf:c2:55:4d:f1:ee:d2:61:72:f5:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:C6:2F:56:10:26:C6:BF:69:FA:96:B8:35:3B:D4:B3:20:53:C5
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3f:fb:1f:d5:7c:2e:8c:34:24:85:18:de:9e:ed:7c:1d:e3:
ef:09:f1:09:e7:66:1e:90:42:63:57:62:99:55:01:cd:b5:b5:
df:b9:72:bf:85:43:5c:59:3a:34:bf:f4:19:2b:79:13:1f:ff:
e9:59:0d:11:59:f2:fc:c4:e9:3b:14:db:dc:5c:aa:aa:32:1a:
f5:0b:3a:a7:22:39:44:f3:5c:a4:a9:72:f7:d5:e0:76:db:d3:
ca:da:f4:bb:15:df:b0:8c:da:33:3b:cd:da:1e:a9:4a:26:06:
3a:12:0c:a5:e1:d3:22:5d:b6:e4:fd:48:5a:3b:90:2e:d4:4b:
20:ff:b3:e2:63:74:24:c7:4a:c5:59:cb:e0:d8:b1:c7:7d:1e:
a0:6c:5b:94:30:54:30:4a:06:51:49:94:3c:b1:66:a7:1f:0b:
ce:a9:c5:45:74:5b:c8:58:8b:e4:29:72:c2:2b:93:31:28:51:
c1:c1:b7:58:8c:c6:e8:e7:9f:e3:3e:d2:f1:ef:66:b2:be:9a:
fe:93:5f:e8:b1:17:cc:eb:85:16:47:75:31:e9:5c:29:ef:38:
39:e3:6e:e9:6d:24:4f:7c:a6:47:bf:4d:23:4d:58:ba:21:7f:
23:a2:28:7d:6b:33:6f:91:57:60:c4:bc:41:33:0c:13:7a:ca:
5b:7f:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:39 2025 by rpki-client