Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: 3poye1kZZ70dJsB53MXiGYJScjLJmkr1iwIwpRpyQow=
Subject key identifier: B6:FA:2F:EE:F0:10:E1:BE:E2:8F:D1:41:F5:BC:43:FA:34:DD:32:6A
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 019A5074C8AB17B6F177FEE951E82C3EA745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 0CD9
Signing time: Tue 04 Nov 2025 20:00:21 +0000
Manifest this update: Tue 04 Nov 2025 20:00:21 +0000
Manifest next update: Wed 05 Nov 2025 20:00:21 +0000
Files and hashes: 1: IbVX3LrFTxhR2c5rwBAGXni2IVg.roa (hash: i1+kfW3A/ZOMrSzikc6dwjCq+A7FU54gNo87BfXeXlo=)
2: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: bi2KgXO+VL1bY1O6bxKvq9CJmEukcUsV6Z6vpsXSk0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c8:ab:17:b6:f1:77:fe:e9:51:e8:2c:3e:a7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Nov 4 20:00:21 2025 GMT
Not After : Nov 5 20:00:21 2025 GMT
Subject: CN=b6fa2feef010e1bee28fd141f5bc43fa34dd326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:b3:34:d1:00:3d:7f:71:46:58:89:84:15:
7c:a6:f3:68:cf:98:52:ac:29:bc:94:3a:4e:e0:75:
c5:a9:76:f1:f3:85:46:25:f2:d0:a7:eb:f2:79:ba:
37:f0:cd:13:c2:b8:67:c1:1e:6b:d7:71:c7:7e:0e:
98:97:29:17:ea:96:8d:e1:47:ad:88:39:d4:28:c0:
b8:68:ab:81:96:4e:b7:b1:2c:a4:ad:c6:0f:3e:5f:
cb:53:3c:da:41:5a:48:54:45:2f:4e:29:ba:78:13:
3d:d0:5f:c6:e3:53:7a:eb:f9:ec:6e:fc:33:af:5d:
52:93:27:ed:fc:94:ba:ea:05:e1:a7:52:d6:fa:4d:
4e:d9:b0:3b:33:7a:88:6f:6d:5b:42:7d:c8:b7:c6:
f6:53:62:66:80:49:52:29:2c:35:d5:fc:c9:97:92:
e1:57:5f:3f:85:77:83:ac:7d:18:cb:6d:66:ad:b0:
e8:6f:2d:6a:a4:36:b3:e3:2d:59:0e:6b:d5:25:02:
6b:ed:e5:29:8b:93:8a:98:f0:91:02:79:0c:70:35:
df:e5:35:67:c4:b9:a0:b8:0c:9a:02:35:b3:a8:7d:
2a:dd:f8:76:88:da:d3:7c:b4:0d:7e:33:5d:49:af:
a0:54:18:93:0f:6f:dc:eb:d3:39:09:ea:92:2d:f7:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:2F:EE:F0:10:E1:BE:E2:8F:D1:41:F5:BC:43:FA:34:DD:32:6A
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fd:d4:1a:ae:44:f6:90:11:9e:3f:7c:45:32:fb:31:09:66:
c4:f7:4c:95:96:09:4c:93:d7:8b:8c:86:5d:20:29:70:bc:bf:
a5:71:f4:bd:2a:3b:ba:1e:6f:96:57:2c:f5:18:f9:ca:9b:e3:
82:69:a0:7d:2f:6d:82:d4:c7:60:04:ad:f5:e1:4b:24:59:2d:
a4:25:d1:74:13:96:54:8c:d6:25:30:f0:43:1f:0b:2b:f1:93:
fd:98:4d:9f:22:cc:3b:8b:67:ec:47:ed:88:21:7c:e1:f8:fd:
e6:41:32:c2:69:5c:1b:a3:d1:4f:ef:ab:d3:56:6d:56:d9:de:
b6:e7:57:45:ba:1f:4f:d9:a1:31:c4:0f:67:69:80:0c:86:3b:
13:43:9d:b4:75:0b:8f:2e:24:19:70:ff:82:aa:35:77:0a:0a:
34:5e:77:bf:90:e3:28:f3:cf:6a:bb:6b:9e:09:33:b4:2e:d5:
7d:65:58:d1:4c:da:ff:3b:b0:92:05:39:c5:c6:53:90:23:2a:
42:6f:07:6d:f6:a6:5f:07:0e:b0:f8:b2:19:62:c1:e1:cd:4f:
fb:c4:67:e8:10:ae:3e:d2:5a:25:05:aa:5c:1d:b2:b6:bb:ac:
03:47:df:67:b3:fe:d7:66:96:40:77:0f:63:87:d5:07:46:7d:
01:ea:60:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:29 2025 by rpki-client