Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: vZPEtDjGdCEX0nlgaFKd6sZRy6IalnVAz3qLTzQtDBk=
Subject key identifier: 98:63:00:CA:E2:A9:D5:6F:09:67:09:8A:1A:10:E0:A4:E3:74:80:4D
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019A515137962B61F5167942D384AB8E0437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 09D9
Signing time: Wed 05 Nov 2025 00:01:08 +0000
Manifest this update: Wed 05 Nov 2025 00:01:08 +0000
Manifest next update: Thu 06 Nov 2025 00:01:08 +0000
Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: FN9dn7XIZUc8DYDiVMsRJTfqpyqckEpHRtn8PEeTziE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:37:96:2b:61:f5:16:79:42:d3:84:ab:8e:04:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Nov 5 00:01:08 2025 GMT
Not After : Nov 6 00:01:08 2025 GMT
Subject: CN=986300cae2a9d56f0967098a1a10e0a4e374804d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:4a:98:63:2e:10:07:0b:1e:a2:6b:6e:a4:
51:cf:5b:1a:87:67:80:ec:62:8e:db:63:0a:3b:55:
f5:f0:c8:7f:41:ff:99:7e:98:8e:a0:f2:24:49:c6:
3e:e4:17:24:2a:59:21:d8:06:73:b2:92:e9:85:c8:
dd:b4:26:c9:27:bd:a4:a7:2f:1c:c7:c2:40:37:3f:
cd:37:bd:34:1e:4f:98:d3:f2:75:f3:68:5e:97:cd:
57:6a:9f:9e:06:94:89:52:c5:94:f0:93:d5:4c:f6:
8e:61:9d:4a:f2:19:ee:c4:26:e2:80:8a:94:96:27:
3d:db:d8:3d:b3:9d:27:05:d5:ef:d1:d9:5f:2f:7b:
62:15:f5:40:96:dc:a6:6d:c0:c7:8f:13:8c:0d:4d:
82:9e:9c:7e:a5:64:7c:03:3b:79:b2:83:d8:7f:c0:
a9:e6:3a:59:90:06:59:dd:dc:97:c2:4e:a4:11:06:
fe:14:9a:e3:ca:b5:f2:0f:7d:8c:e4:19:0d:c1:a7:
19:64:97:95:3b:e1:46:10:a7:d4:9b:70:a4:10:dc:
b5:c5:d4:7e:ea:00:75:8f:8c:76:7d:86:a0:8e:aa:
c0:22:9f:ea:72:13:b2:93:9a:ad:d6:46:5c:23:2a:
2f:8a:2b:5d:f3:42:39:ec:ab:58:97:b6:2b:d7:c2:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:00:CA:E2:A9:D5:6F:09:67:09:8A:1A:10:E0:A4:E3:74:80:4D
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b2:51:44:8c:ec:55:6b:43:c7:5a:28:3e:bb:ae:6e:80:40:
4b:19:33:8c:f4:dd:30:95:76:1c:62:70:14:81:3f:34:2a:0d:
f8:6a:31:7c:58:ba:77:f0:06:77:18:09:db:60:a2:90:6e:92:
8a:b8:1d:ea:9d:cf:5d:48:5c:53:a4:eb:b4:8b:4c:b4:fd:f5:
87:9d:5f:98:12:fd:b7:4e:6f:af:6d:0d:e4:63:1e:08:6a:e3:
f5:7a:b4:ed:2a:5e:fc:1e:01:e2:1c:de:90:f4:00:c5:f4:51:
e2:b4:37:e4:39:d9:99:36:d4:90:91:13:b1:3e:a8:b3:a5:45:
a8:83:46:47:a0:22:9c:0c:ea:be:2e:4b:0e:cf:0d:4f:98:39:
6b:59:af:c2:e2:96:f6:43:81:d6:6e:de:f2:58:98:be:a4:74:
d9:69:0e:f2:30:a8:b7:88:a7:24:cd:2e:0a:29:da:80:26:3b:
d9:4b:a6:47:b1:66:69:45:9d:31:f2:74:98:14:d6:74:d2:f2:
74:ad:69:55:92:23:8e:0c:02:31:2a:5b:4b:50:ba:71:1d:dd:
30:b6:2a:a5:d2:22:ab:97:e2:c2:77:ed:71:80:13:5b:56:7e:
8f:a3:4b:bf:da:23:d8:fd:70:d2:d3:28:49:9f:91:46:58:86:
ca:9a:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:13 2025 by rpki-client