Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: xUk4j1XFdGWhw43VhBpxbBjI4zf16UL8uyVRjXtZ2Kk=
Subject key identifier: 69:D2:85:76:5D:BA:9E:CD:C7:D3:36:0D:AF:E8:E3:51:97:BF:51:C5
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019A4E869CE787000801CA19FDDAD1C40F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 08D9
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: uX+T48yUFQBjO24aU22eDwTDZxH/dpnjGM9q3CUCwiE=)
2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9c:e7:87:00:08:01:ca:19:fd:da:d1:c4:0f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=69d285765dba9ecdc7d3360dafe8e35197bf51c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:3d:b2:a6:90:e8:a2:35:b5:de:36:22:3d:
4f:48:bf:5c:93:0c:73:8c:58:e5:e6:77:d3:fc:d3:
24:54:1d:54:98:74:c0:1b:2f:30:d7:0b:61:24:da:
06:1e:3c:71:d3:df:97:df:4a:14:5e:64:36:a9:c5:
32:70:a3:fb:1f:37:60:62:ee:a2:7f:90:2e:5d:58:
8a:b9:e9:c2:26:b4:aa:c0:0a:d8:ec:56:a6:60:a7:
ea:2c:f4:9c:56:39:0d:3d:50:0b:42:ab:c7:3c:a7:
7a:0d:12:55:84:0c:84:df:bb:ef:be:73:3e:97:ca:
3d:3a:d0:56:f7:e7:bb:bb:4b:1e:26:e9:2b:a2:a8:
ff:64:4d:a3:37:dc:28:53:a8:fa:41:de:f7:c8:7c:
35:95:88:5b:2a:e5:2e:ea:7b:8f:4b:f2:24:87:79:
3c:24:9c:43:10:70:9a:df:7d:55:1a:df:b5:e4:55:
62:f2:4f:7f:c6:73:e1:8e:11:6a:0c:23:fd:c6:18:
10:b8:a5:67:ab:03:b2:e4:50:73:58:60:38:1a:d6:
0f:b0:a5:d9:3e:e6:07:7a:9c:a4:10:45:fb:da:1a:
b5:8f:5f:4f:65:fd:67:8f:3f:ab:32:9f:4b:19:ee:
a3:38:28:22:21:53:9e:15:77:c9:68:28:45:b8:5e:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D2:85:76:5D:BA:9E:CD:C7:D3:36:0D:AF:E8:E3:51:97:BF:51:C5
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a2:98:3a:fd:7e:03:1c:b2:ac:04:a4:59:55:91:c2:b9:43:
dd:65:63:a0:34:86:0b:69:21:6f:af:7b:95:fa:39:5f:dc:58:
1f:58:e1:75:a4:e1:ff:54:96:1a:a2:71:f4:5f:b7:16:c6:9c:
ee:43:d4:36:5d:ae:29:1d:60:9e:0d:53:bf:3f:88:ed:b6:eb:
45:02:c8:80:d6:d1:22:1c:38:bc:da:c3:47:56:f8:d8:56:51:
6e:95:b3:42:69:97:5f:a9:e2:56:3d:2a:1e:8c:df:63:ce:2c:
6a:0a:a8:85:61:d2:f5:be:04:18:73:af:4f:08:30:c4:cc:a5:
ab:29:fe:b5:59:d5:c9:fb:6d:63:68:c6:d7:4c:f8:5e:b5:06:
9a:88:66:e1:d6:f6:e6:9b:3f:61:02:8e:e6:79:66:d8:76:ef:
43:2c:c6:3b:82:82:fd:93:c1:8f:e4:bb:fd:22:c3:20:ca:54:
0e:42:58:b7:4a:2e:98:e6:d1:4e:c0:c2:42:fc:fa:e6:29:79:
a1:db:47:fc:4a:71:44:cb:5c:9e:f9:6c:6a:f9:92:c2:09:42:
c8:60:c0:23:6f:8e:26:6d:70:55:8e:5e:92:83:36:69:f7:d3:
50:5b:19:85:ac:6f:ba:e1:bf:6f:c0:f8:4d:44:1f:15:84:15:
02:60:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:29 2025 by rpki-client