Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: eIu+t3z2aMmRMHdV7HJnqQyVwo5Q02GJwlEOzUxMrxw=
Subject key identifier: 99:A6:EF:E5:4F:B2:F2:70:FF:CC:1D:D2:88:9F:63:2C:DC:43:B7:96
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019A4D73DA9792DEFDF18FB7858F63CF927C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 109F
Signing time: Tue 04 Nov 2025 06:00:29 +0000
Manifest this update: Tue 04 Nov 2025 06:00:29 +0000
Manifest next update: Wed 05 Nov 2025 06:00:29 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: BZJIFalL6X45S2SnY/qMTpMR+aij7x52o9tk6GgGgPk=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:da:97:92:de:fd:f1:8f:b7:85:8f:63:cf:92:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Nov 4 06:00:29 2025 GMT
Not After : Nov 5 06:00:29 2025 GMT
Subject: CN=99a6efe54fb2f270ffcc1dd2889f632cdc43b796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:19:84:7a:44:14:b0:f1:a4:d1:6c:3e:9e:
98:b6:12:d8:e0:3d:ed:0e:9d:68:55:58:4f:ce:ed:
1a:9c:11:81:93:f4:a7:91:a7:88:2e:b4:17:c4:03:
41:42:0f:cb:31:8e:0f:81:32:7a:04:94:52:a6:27:
62:67:34:83:eb:6c:af:59:02:e6:61:ff:fb:92:5c:
9f:02:8a:ae:79:78:46:9c:63:1e:4b:36:42:0e:9e:
b1:47:79:58:f8:f7:98:6c:05:27:7c:f3:79:50:22:
b7:de:ae:1e:e0:ce:2e:01:bf:62:63:70:73:1c:5c:
9d:84:aa:97:63:8a:8e:e5:19:da:36:42:e6:81:e2:
cf:70:b1:98:51:d4:b3:54:0a:a7:3a:87:c1:32:b5:
b8:7b:39:8e:e5:43:1e:79:bc:49:8b:c2:5c:33:58:
78:b2:b1:b8:ee:1d:2d:93:fe:2a:f5:03:89:17:3b:
2c:4a:24:60:cd:12:89:b6:b7:d9:0f:bb:91:d5:6f:
dd:8f:de:a3:46:93:49:07:24:46:81:a7:b7:59:3e:
10:0f:0b:4e:40:68:fe:2d:6f:87:d9:c0:75:ec:87:
c2:2d:4d:76:3e:ae:04:2b:e7:30:87:f0:0d:b7:8c:
3a:96:90:7d:d4:4f:c3:8a:6b:eb:8b:fc:65:6e:36:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:EF:E5:4F:B2:F2:70:FF:CC:1D:D2:88:9F:63:2C:DC:43:B7:96
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:f7:87:01:a1:da:b6:ae:d5:f3:38:ab:dc:9c:b6:e7:d7:
09:95:08:58:e4:85:1b:05:c6:21:46:6e:9e:1f:1a:45:ef:da:
d2:87:3f:fc:8a:f1:93:67:35:ce:8f:25:66:64:3f:dd:8f:f3:
53:09:3a:94:d8:aa:e2:18:40:71:50:81:31:67:aa:e6:81:dd:
f6:b9:0e:c6:b0:00:60:d1:f1:ed:fa:a5:aa:12:91:9d:07:86:
b8:fc:c6:28:e0:d3:10:fc:20:8e:d0:5a:7f:10:71:da:ab:17:
6f:7c:d9:3a:57:4e:a9:f2:88:ae:68:7f:fc:3c:25:ff:1f:62:
aa:df:3e:ab:6a:1d:29:f7:ff:71:90:ba:6e:85:f4:c4:db:26:
7c:d9:f1:af:b1:77:a6:89:1c:f0:36:a4:ab:33:fc:de:c4:b1:
57:49:1f:27:3f:dd:1f:b5:24:12:6b:e2:6b:1e:9e:e9:ca:b5:
25:f4:b2:83:76:79:17:48:45:21:07:5d:f9:c0:d6:5f:96:72:
7b:25:0e:94:82:10:a0:e4:b2:c3:af:6b:c1:b8:c0:54:81:43:
f0:5b:31:fb:b0:45:b9:60:61:57:73:fb:8d:3b:f0:80:c5:38:
b7:07:f0:ab:bc:23:c0:0c:26:99:07:6c:c7:40:cb:1d:05:52:
27:71:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:26 2025 by rpki-client