Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: BMNH3ZyozNTxYt7OeZ05Lr1CLmSL5HV/76/ZtgmdMpQ=
Subject key identifier: 29:24:9A:72:64:4C:1B:C3:F0:81:32:D1:4E:1E:60:8A:82:86:F6:F5
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 019A4E4FDB66A4458089DFBD6F8CA4CB4658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 0D2A
Signing time: Tue 04 Nov 2025 10:00:47 +0000
Manifest this update: Tue 04 Nov 2025 10:00:47 +0000
Manifest next update: Wed 05 Nov 2025 10:00:47 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: AXVOHUHN1+bMUO5n2Ou6uw/0nhcWQJnxLgto5WLZlp4=)
2: vfjUIsx7CDVuZMrXZKkgTFoznUI.roa (hash: kc2fyWr6FJL7rTi0mPaMQj4eZbP6Y0dyJoouX+alOvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:db:66:a4:45:80:89:df:bd:6f:8c:a4:cb:46:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Nov 4 10:00:47 2025 GMT
Not After : Nov 5 10:00:47 2025 GMT
Subject: CN=29249a72644c1bc3f08132d14e1e608a8286f6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:f0:92:37:80:07:5e:74:3e:72:08:dc:74:
ee:a9:75:92:43:33:fc:01:e7:a8:1e:38:bd:aa:be:
81:57:76:4e:1d:72:d8:c3:f8:69:d8:27:47:67:67:
0b:78:2f:38:18:e8:a1:10:63:50:d1:4a:d3:08:5a:
e0:67:34:b5:bd:ea:af:1f:4f:3e:38:f5:01:23:22:
ce:5c:d4:86:a7:f0:b7:11:0e:f1:7b:81:db:49:42:
c6:c2:25:31:f4:ba:97:29:db:dd:d0:46:a8:f0:35:
77:1b:29:86:b3:20:37:bf:c7:0d:80:19:00:17:f4:
7e:5e:50:51:73:96:ad:86:58:5c:51:03:24:dc:a4:
1e:4d:3a:c8:3c:b8:c8:96:ea:6c:5f:f4:c4:13:68:
34:b0:a0:f6:53:57:cd:de:e4:83:5b:9f:f2:fc:df:
f6:49:ae:1e:67:c8:50:a0:3b:d3:6c:87:31:76:84:
9e:77:d1:be:c3:af:0d:eb:d2:5a:dc:7d:56:15:2b:
f7:74:51:31:0c:ab:fb:39:45:cb:8a:ed:f8:f1:c8:
fa:92:3d:76:59:d4:b2:df:1c:bc:bb:ac:1c:d8:ae:
90:49:66:3f:64:c9:fa:d1:f9:24:d9:51:12:05:89:
f6:6f:18:10:ab:10:4c:77:40:7b:e1:49:73:79:85:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:24:9A:72:64:4C:1B:C3:F0:81:32:D1:4E:1E:60:8A:82:86:F6:F5
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:95:fe:f8:28:4f:89:f1:76:f7:69:1a:59:db:98:c0:87:61:
b6:60:da:f7:c9:1e:ea:bc:5f:57:de:70:77:64:53:00:ef:f3:
11:b3:f5:1a:7d:2b:fe:99:78:b2:f8:df:1b:23:d7:98:8a:dc:
ab:24:13:c4:98:29:f3:af:c4:f5:11:3b:b3:dc:79:5f:b2:d6:
4e:7b:4d:ef:7c:11:fb:95:eb:db:98:c9:31:16:f6:ef:36:99:
e1:da:db:91:58:42:d2:32:2e:84:bc:fc:bf:3c:57:cf:05:94:
fd:9c:8c:22:c8:90:9b:04:fd:d5:ee:d3:1e:8b:0d:e2:95:1c:
7c:6d:86:42:53:36:2e:7b:2b:e4:99:df:1b:3c:14:00:5e:6e:
22:ec:72:ab:ff:6e:77:b5:a1:69:8b:03:04:02:22:ba:4c:12:
65:e1:0b:09:73:fc:a5:41:6f:b1:e0:eb:36:04:f6:ad:2f:d3:
9a:ec:f4:ff:2a:df:5e:ff:ec:65:43:20:ab:5f:43:63:fa:fc:
93:f0:1b:14:93:50:eb:68:0d:b0:5b:a0:ce:9e:b5:18:c8:f1:
29:29:f2:36:9f:6c:eb:6a:89:e2:eb:8a:d8:e3:97:02:95:3b:
33:2c:68:50:1b:a2:05:71:0a:a1:20:44:5a:53:f2:49:d0:1d:
a8:d8:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:24 2025 by rpki-client