Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: EKmVfR4bVljQkraKJqMlmlih4b5xdavHjhUfYkqlycQ=
Subject key identifier: DC:35:2B:2A:E8:3E:59:E5:BA:3E:C9:5C:00:DA:29:FF:36:24:8A:5E
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 019A4D3D160FDAF3971FF5A30A64C29F1EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 08F9
Signing time: Tue 04 Nov 2025 05:00:40 +0000
Manifest this update: Tue 04 Nov 2025 05:00:40 +0000
Manifest next update: Wed 05 Nov 2025 05:00:40 +0000
Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: tdCij0NxKz6WASKU8M0uYB6IdSmiT8yHQmYb05Ee1G0=)
2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=)
3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:16:0f:da:f3:97:1f:f5:a3:0a:64:c2:9f:1e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Nov 4 05:00:40 2025 GMT
Not After : Nov 5 05:00:40 2025 GMT
Subject: CN=dc352b2ae83e59e5ba3ec95c00da29ff36248a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:db:02:ca:13:18:49:54:f0:c1:eb:3a:4b:
04:7c:b3:1f:47:9c:8a:23:0f:6b:80:ec:78:34:e3:
ff:e8:0c:62:aa:be:af:7a:df:c7:6b:b0:49:61:01:
8c:a9:7c:ba:23:79:fb:9a:65:c7:bf:9e:07:06:41:
82:77:d0:cf:5f:22:f2:af:4c:eb:a3:91:89:1d:5a:
e3:50:dd:dd:9f:e5:ed:65:47:8b:8c:19:1d:df:c3:
39:85:93:9c:82:ff:c7:32:a8:22:88:81:4c:a4:b5:
27:8f:97:6f:b2:23:c9:30:55:af:3b:c7:88:98:b5:
81:93:67:ef:a1:e4:94:78:9d:c7:51:55:a2:00:44:
3f:3c:b3:fb:4e:3f:54:51:9b:2f:76:0a:de:3a:e7:
60:35:25:25:85:d7:b0:59:76:b5:10:2d:81:75:71:
fc:2d:88:89:23:db:a7:b8:1d:aa:cc:7b:c3:cb:85:
9f:3c:c4:c4:22:7c:01:94:d7:7d:1c:6a:77:78:02:
8d:25:36:bf:68:d6:2b:32:a2:c0:60:e4:42:99:0b:
36:9f:64:b7:52:96:20:cf:8b:7f:ca:a4:6d:e5:28:
f2:5d:d7:13:39:c3:b4:82:07:f2:2d:c5:d5:78:c6:
57:4e:a9:fe:8a:43:3d:fd:2c:6b:46:f1:75:5e:78:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:35:2B:2A:E8:3E:59:E5:BA:3E:C9:5C:00:DA:29:FF:36:24:8A:5E
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:43:64:18:27:4f:e1:03:a1:66:76:75:ec:17:13:7f:44:1c:
1b:eb:81:d8:dc:42:5f:09:b6:63:4d:05:e1:3c:af:c5:75:37:
ad:bb:c3:e0:c8:69:09:1b:2c:d3:ea:14:5a:07:42:3b:5b:70:
26:e2:d4:ce:c8:b4:46:0d:bd:08:37:51:b6:a5:19:24:9e:a0:
f5:f4:60:a5:eb:ad:41:6b:92:cf:28:dc:56:f4:f7:86:25:51:
60:89:92:c4:ef:fe:f8:8f:48:15:f7:34:76:29:8f:ce:b3:69:
27:bb:51:fb:cd:5c:7a:15:e4:44:4e:08:29:48:4f:33:c9:70:
f8:51:c6:3d:6b:83:77:6d:ff:d3:de:27:63:d3:cd:64:9f:82:
64:05:08:dc:67:fe:5e:06:1b:22:a4:59:a9:95:fe:1c:d0:f4:
ec:92:03:06:c3:e3:d3:f2:05:41:b1:da:73:3a:c8:51:fe:27:
0a:41:ac:2b:80:0e:e8:c9:12:f4:eb:6b:9e:32:8a:23:68:18:
05:72:dc:55:bc:2f:6b:c4:cf:04:8c:18:62:a9:1e:16:01:f7:
4f:7f:cc:20:44:20:c8:c6:bf:57:9d:47:2f:f1:2b:92:8b:e4:
7a:38:74:1d:d3:b6:34:40:08:ff:79:ce:83:2f:0c:a0:32:2b:
ba:21:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:27 2025 by rpki-client