Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier: ZvQtBqITlW2CAGMySMX24enSykprJb8gMLqsMR4BKr8=
Subject key identifier: 9A:A5:66:69:C7:C0:0B:B3:30:27:E7:68:FD:32:B1:98:58:B5:57:F6
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 019A54C02CC13E2B70B14F35089C7B122108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number: 05FB
Signing time: Wed 05 Nov 2025 16:01:11 +0000
Manifest this update: Wed 05 Nov 2025 16:01:11 +0000
Manifest next update: Thu 06 Nov 2025 16:01:11 +0000
Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: Ts5vZDlU91NKDn5GfSXm0NB2Y/r+a6OqWXaqAjPpPM8=)
2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:2c:c1:3e:2b:70:b1:4f:35:08:9c:7b:12:21:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Nov 5 16:01:11 2025 GMT
Not After : Nov 6 16:01:11 2025 GMT
Subject: CN=9aa56669c7c00bb33027e768fd32b19858b557f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:6b:26:c9:40:cf:52:47:f4:24:4c:5a:5b:
f7:31:a7:e3:c2:6e:c7:48:3f:be:a1:55:61:89:9e:
bf:f5:d1:7c:e9:23:c3:80:2e:94:d0:4f:a6:16:5d:
be:07:7f:27:81:e5:80:1f:d2:52:72:41:2e:5b:e7:
51:fc:02:7c:92:c4:6a:7d:3f:d0:c7:88:5d:77:36:
8e:f2:a0:6a:c2:ec:b7:b7:dd:8c:22:4e:ba:88:47:
e2:80:46:3a:3b:8f:92:40:d6:04:ae:97:e6:0e:f8:
bc:57:51:df:98:f3:b7:fe:a6:85:bd:83:f7:2f:59:
44:9b:d3:08:e8:86:db:e6:74:b9:d8:91:db:4e:fd:
fc:11:b7:d1:08:c6:4f:d1:d9:43:64:79:85:22:56:
d2:fc:7a:11:c1:a7:e0:f5:ff:f3:10:9b:5e:36:76:
b7:dd:97:8e:67:c1:95:bb:07:20:5d:d8:36:7a:b3:
93:24:3c:04:56:ca:31:00:d8:90:b0:8a:74:1c:37:
31:ec:24:65:18:41:e6:22:d6:74:43:6f:65:53:b2:
ca:ec:82:ee:b2:00:c3:ba:b0:04:be:3f:8a:8f:38:
d2:72:4e:f9:ad:d9:fc:2d:9e:8b:b0:44:bf:95:1f:
ef:5f:8a:97:87:6b:27:da:cd:fc:f6:ed:28:a2:2e:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A5:66:69:C7:C0:0B:B3:30:27:E7:68:FD:32:B1:98:58:B5:57:F6
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ce:0a:98:6d:0c:14:a3:1d:1a:eb:ab:51:e4:87:0c:62:ac:
71:4c:b4:62:6d:23:bb:4e:6e:62:c6:dc:85:67:b9:9a:ee:37:
e2:bd:05:e9:dd:ca:33:e7:74:67:89:73:b9:e7:db:af:7e:a1:
6a:6b:2b:95:0f:6c:f6:98:81:4a:22:3b:4e:cb:9c:27:5c:5e:
83:c0:83:35:d8:58:c1:0f:85:9c:bc:b2:35:b4:60:a7:f2:b5:
e6:6b:51:fe:92:0b:3d:4d:6a:67:c8:a8:78:ef:cf:96:90:17:
ac:88:cb:78:e8:dc:1a:18:56:d8:87:7f:84:d8:fc:a7:ec:7e:
54:95:35:5d:0f:2d:20:58:ce:5e:f3:1c:94:1a:5a:58:f9:16:
de:51:e6:50:78:db:d3:5b:7f:76:e6:af:a7:4e:57:9c:ff:e2:
43:79:7b:2d:36:32:89:0c:9b:91:47:b3:0d:93:89:4e:03:3f:
43:d7:39:85:d7:95:6a:11:fb:3d:43:e0:48:89:55:cb:3a:37:
40:02:54:cf:2a:d6:08:92:70:77:f3:34:f1:8a:4c:f4:8e:ad:
f3:8e:59:7c:7d:3e:ce:a4:4b:b2:b1:49:87:c4:36:28:27:0c:
f4:a6:57:97:34:5a:1d:ea:c4:92:50:12:c7:18:3a:9d:a6:4f:
69:c8:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:07:02 2025 by rpki-client